PrivacySignal
← Front page

Search & browse the archive

The full corpus — beyond today's front page.

Reset

65 results · page 1 of 3

GDPR / Intl
noyb (None of Your Business) · · EU

AI: EU Member States approve “digital expropriation” for AI companies

EU member states have approved a change to GDPR that would make personal data processing automatically lawful when it occurs 'in the context of AI,' according to reports. Critics, including privacy advocate Max Schrems, say the provision would let major AI companies use decades of collected personal data with few restrictions.

Who should care: Lawyers · Privacy officers · AI governance · General readers · Policy

#gdpr#ai#privacy Read original →
Enforcement
EDPB · · EU

Norwegian DPA fines Xandr EUR 8 600 000 for unlawful processing of personal data

Norway's data protection authority fined Xandr, the Microsoft-owned ad tech company, €8.6 million for unlawfully processing personal data, including sensitive categories. The case began with a 2020 complaint from the Norwegian Consumer Council and centered on violations of GDPR's core rules on lawful basis and special-category data.

Who should care: Lawyers · Privacy officers · Compliance · AI governance · General readers · Policy

#enforcement#gdpr#privacy Read original →
GDPR / Intl
IAPP · · International

When AI hallucinates facts about individuals: Personal data and accuracy under the GDPR

AI systems that generate false information about real people may create legal obligations under GDPR, which requires that personal data be accurate. The piece examines how hallucinated outputs about individuals fit within that framework.

Who should care: Lawyers · Privacy officers · AI governance · General readers · Policy

#gdpr#ai#privacy Read original →
Enforcement
noyb (None of Your Business) · · EU

Annual Report 2025 out now!

noyb has released its 2025 annual report, detailing a year of GDPR enforcement activity that includes new complaints, early work on its first collective redress case against Austrian credit agency CRIF, and engagement with the EU Commission's Digital Omnibus package. The organization reports that its legal work has cumulatively produced €2 billion in administrative fines.

Who should care: Lawyers · Privacy officers · Compliance · AI governance · General readers · Policy

#enforcement#gdpr#privacy Read original →
Enforcement
EDPB · · EU

Italian DPA fines Wind Tre EUR 16 700 000 for unlawful telemarketing and data protection infringements

Italy's data protection authority fined telecom operator Wind Tre €16.7 million for unlawful telemarketing practices and multiple violations of GDPR, including failures around lawful processing, transparency, the right to object, and data protection by design. The decision was finalized on June 5, 2026.

Who should care: Lawyers · Privacy officers · Compliance · AI governance · General readers · Policy

#enforcement#gdpr#privacy Read original →
Enforcement
noyb (None of Your Business) · · EU

Privacy win: Norwegian Authority fines Microsoft’s Xandr € 8.5 Million

Norway's data protection authority has fined Xandr, now owned by Microsoft, €8.5 million for GDPR violations tied to its processing of personal data from users of the dating app Grindr. The case was originally brought in 2020 by privacy group noyb and the Norwegian Consumer Council.

Who should care: Lawyers · Privacy officers · Compliance · AI governance · Cybersecurity · General readers · Policy

#enforcement#gdpr#surveillance#privacy Read original →
GDPR / Intl
noyb (None of Your Business) · · EU

Ranking: Who in the EU Parliament fights for your privacy – and who for Big Tech?!

Privacy advocacy group noyb reviewed more than 1,000 amendments proposed by Members of the European Parliament on the GDPR and ePrivacy Directive, as part of an effort to track where individual MEPs stand on proposed changes to EU privacy law under the so-called Digital Omnibus package.

Who should care: Lawyers · Privacy officers · AI governance · General readers · Policy

#gdpr#privacy Read original →
Enforcement
EDPB · · EU

Italian DPA fines BBVA EUR 5 508 000 for failing to respect a customer’s objection to direct marketing

Italy's data protection authority fined BBVA's Italian branch over 5.5 million euros after the bank continued direct marketing to a customer who had formally objected to it. The decision cites violations of GDPR principles covering data processing, transparency, the right to object, and controller accountability.

Who should care: Lawyers · Privacy officers · Compliance · AI governance · General readers · Policy

#enforcement#gdpr#regulation#privacy Read original →
Enforcement
EDPB · · EU

Italian DPA fines IQVIA EUR 7 000 000 for unlawful processing of patients’ health data

Italy's data protection authority fined IQVIA Solutions Italy €7 million following a finding that the company processed patients' health data without a lawful basis. The decision cited violations across multiple GDPR provisions, including rules on sensitive data, transparency, data protection by design, and impact assessments.

Who should care: Lawyers · Privacy officers · Compliance · Healthcare professionals · AI governance · General readers · Policy

#enforcement#healthcare#gdpr#privacy Read original →
Enforcement
EDPB · · EU

Italian DPA fines Emirates EUR 180 000 for infringements concerning passengers’ health data

Italy's data protection authority fined Emirates €180,000 following an investigation into how the airline handled passengers' health data. The ruling cited violations of GDPR principles on lawful processing, transparent communication, and disclosure obligations at the point of data collection.

Who should care: Lawyers · Privacy officers · Compliance · Healthcare professionals · AI governance · General readers · Policy

#enforcement#healthcare#gdpr#regulation#privacy Read original →
Breach
EDPB · · EU

Hellenic DPA decision on a data breach involving E.E.T.A.A. S.A. as processor for the Ministry of Social Cohesion and Family Affairs

Greece's data protection authority ruled against the Ministry of Social Cohesion and Family Affairs following a large-scale personal data breach, finding violations across multiple GDPR articles including security, breach notification, and data protection by design. The ministry's processor, E.E.T.A.A. S.A., was also implicated in the decision, which resulted in fines and a compliance order.

Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · AI governance · General readers · Policy

#breach#enforcement#gdpr#regulation#privacy Read original →
Enforcement
EDPB · · EU

Swedish DPA fines Miljödata i Karlskrona approximately EUR 160 000 for insufficient technical and organisational measures to ensure information security

Sweden's data protection authority fined IT service provider Miljödata i Karlskrona roughly EUR 160,000 after a 2025 cyberattack exposed personal data belonging to 2.2 million individuals, with the stolen data later published on the darknet. The fine was issued under Article 32 of the GDPR for inadequate technical and organisational security measures.

Who should care: Lawyers · Privacy officers · Compliance · AI governance · General readers · Policy

#enforcement#gdpr#privacy Read original →
Enforcement
EDPB · · EU

Dutch DPA fines Uber EUR 824 990 000 for unlawful automated decision-making and insufficient information on profiling

The Dutch Data Protection Authority has fined Uber approximately 825 million euros for violating GDPR rules on automated decision-making and failing to properly inform drivers about how profiling data was used against them.

Who should care: Lawyers · Privacy officers · Compliance · AI governance · Administrators · Cybersecurity · General readers · Policy

#enforcement#gdpr#ai-governance#surveillance#privacy Read original →
GDPR / Intl
NICCS (.gov) · · US Federal

Data Privacy for Businesses Workshop: Implementing Compliance With Global Regulations (e.g., GDPR, CCPA)

NICCS, a U.S. government cybersecurity training resource, is offering a workshop aimed at helping businesses implement compliance with major global data privacy regulations, including GDPR and CCPA.

Who should care: Lawyers · Privacy officers · AI governance · Compliance · General readers · Policy

#gdpr#state-privacy#regulation#privacy Read original →
Enforcement
C Compliance Week · · International

Future GDPR fines set to be more equal across EU

EU regulators are moving toward a more standardized approach to GDPR fines, aiming to reduce the wide variation in penalties imposed across member states for similar violations.

Who should care: Lawyers · Privacy officers · Compliance · AI governance

#enforcement#gdpr#regulation Read original →
GDPR / Intl
O Ogletree · · International

Deployment of AI Recruitment Tools in the EU: Employer Obligations Under GDPR and EU AI Act

Employers in the EU using AI-powered recruitment tools face obligations under both GDPR and the EU AI Act, which together impose rules on how candidate data is collected, processed, and used in automated hiring decisions.

Who should care: Lawyers · Privacy officers · AI governance · Administrators · General readers · Policy

#gdpr#ai-governance#ai Read original →
News
Data Protection Commission · · EU / Ireland

Data Protection Commission publishes AI Insights Report

Ireland's Data Protection Commission has published a report focused on artificial intelligence, described as an AI Insights Report. The DPC is a significant European privacy regulator, responsible for overseeing many major tech companies headquartered in Ireland under GDPR.

Who should care: General readers · AI governance · Policy · Privacy officers

#ai#privacy Read original →
Enforcement
EDPB · · EU

The Irish Data Protection Commission fines Google 403 000 000 EUR following Inquiry into Google’s processing of location data

Ireland's Data Protection Commission fined Google €403 million on September 21, 2026, following an inquiry into how the company handled location data. The decision included a compliance order and found violations of GDPR rules on lawful processing, data principles, and transparency obligations.

Who should care: Lawyers · Privacy officers · Compliance · AI governance · General readers · Policy

#enforcement#gdpr#regulation#privacy Read original →
Enforcement
EDPB · · EU

The Spanish DPA fined Securitas Direct 100 000 EUR for making the exercise of data subject rights more difficult by directing individuals to a chargeable telephone number

Spain's data protection authority fined Securitas Direct €100,000 after the security company directed people to a paid-rate phone number to exercise their GDPR rights. A consumer association brought the complaint, citing video surveillance notices that routed access and objection requests through a chargeable 902 number.

Who should care: Lawyers · Privacy officers · Compliance · AI governance · Cybersecurity · General readers · Policy

#enforcement#gdpr#regulation#surveillance#privacy Read original →
Enforcement
IAPP · · International

Ireland's DPC fines Google 403M euros to close 2020 location data inquiry

Ireland's Data Protection Commission has fined Google 403 million euros, closing an inquiry that began in 2020 into how the company handled users' location data. The case is one of several large enforcement actions brought against major tech companies under the EU's GDPR framework.

Who should care: Lawyers · Privacy officers · Compliance · General readers · Policy

#enforcement#privacy Read original →
Enforcement
BleepingComputer · · International

Google fined €403 million over location data privacy violations

Ireland's Data Protection Commission has fined Google €403 million for breaching GDPR rules around how it processed users' location data. The fine is one of the larger penalties issued under Europe's data protection framework.

Who should care: Lawyers · Privacy officers · Compliance · AI governance · General readers · Policy

#enforcement#gdpr#privacy Read original →
Enforcement
EDPB · · EU

EDPB harmonises fining methodology and adopts final DSA-GDPR guidelines

The European Data Protection Board has adopted two sets of guidelines: one standardizing how national data protection authorities decide when and how to impose fines under the GDPR, and another clarifying how the Digital Services Act and the GDPR interact with each other.

Who should care: Lawyers · Privacy officers · Compliance · AI governance · General readers · Policy

#enforcement#gdpr#privacy Read original →
Enforcement
R Reuters · · International

Irish privacy regulator fines Google €403 million over location data processing

Ireland's Data Protection Commission has fined Google €403 million for violations related to how the company processed users' location data. The fine comes from the EU's lead privacy regulator for Google under the GDPR framework.

Who should care: Lawyers · Privacy officers · Compliance · General readers · Policy

#enforcement#regulation#privacy Read original →
Breach
noyb (None of Your Business) · · EU

AI: EU Member States plan “digital expropriation” of Europeans in the interest of AI companies

A leaked document from the Irish EU Council Presidency proposes making personal data use automatically lawful whenever it occurs 'in the context of AI,' effectively removing GDPR protections to benefit companies like OpenAI, Google, Meta, and Anthropic. Multiple EU member states are reported to informally support the measure.

Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · AI governance · General readers · Policy

#breach#gdpr#ai-governance#ai#privacy Read original →
Page 1 of 3 Next →