PrivacySignal

Search & browse the archive

The full corpus — beyond today's front page.

Reset

585 results · page 7 of 25

Enforcement
noyb (None of Your Business) · · EU

Annual Report 2025 out now!

noyb has released its 2025 annual report, detailing a year of GDPR enforcement activity that includes new complaints, early work on its first collective redress case against Austrian credit agency CRIF, and engagement with the EU Commission's Digital Omnibus package. The organization reports that its legal work has cumulatively produced €2 billion in administrative fines.

Who should care: Lawyers · Privacy officers · Compliance · AI governance · General readers · Policy

#enforcement#gdpr#privacy Read original →
Enforcement
BleepingComputer · · International

Norway fines Microsoft ad firm $9.6 million over Grindr data sharing

Norway's data protection authority has fined Microsoft's advertising subsidiary Xandr approximately $9.6 million for unlawfully handling and distributing sensitive personal data belonging to Grindr users in the country.

Who should care: Lawyers · Privacy officers · Compliance · AI governance · General readers · Policy

#enforcement#gdpr#privacy Read original →
Enforcement
R Reuters · · International

MIT files patent lawsuit against Amazon over cloud security technology

MIT has filed a patent lawsuit against Amazon, alleging the company used MIT-developed technology related to cloud security without authorization. The suit pits one of the country's leading research universities against one of the world's largest cloud providers.

Who should care: Lawyers · Privacy officers · Compliance

#enforcement Read original →
Enforcement
T This Is Reno · · International

Lawsuit: Reno police detective says she was told not to write a report about false facial recognition arrest (1 of 4)

A lawsuit alleges that a Reno police detective was instructed by superiors not to document a wrongful arrest made on the basis of a false facial recognition match. The case suggests an attempt to suppress an official record of the mistaken identification.

Who should care: Lawyers · Privacy officers · Compliance · Cybersecurity · General readers · Policy

#enforcement#surveillance#privacy Read original →
Enforcement
EDPB · · EU

Italian DPA fines Wind Tre EUR 16 700 000 for unlawful telemarketing and data protection infringements

Italy's data protection authority fined telecom operator Wind Tre €16.7 million for unlawful telemarketing practices and multiple violations of GDPR, including failures around lawful processing, transparency, the right to object, and data protection by design. The decision was finalized on June 5, 2026.

Who should care: Lawyers · Privacy officers · Compliance · AI governance · General readers · Policy

#enforcement#gdpr#privacy Read original →
Enforcement
R Reuters · · International

Norway fines Microsoft's Xandr $9.6 million over Grindr data sharing

Norwegian authorities have fined Microsoft's Xandr unit $9.6 million for improperly receiving personal data shared by the dating app Grindr. The penalty targets the ad-tech company's role in handling sensitive user information passed along from the platform.

Who should care: Lawyers · Privacy officers · Compliance

#enforcement Read original →
Enforcement
CyberScoop · · US Federal

Your AI agent is only as safe as the packages it downloads

NVIDIA has released an agent safety platform designed to enforce controls over the packages and dependencies that AI agents pull in during operation. The platform positions enforcement at the point where external code enters the system, though its effectiveness depends on the quality of what it allows through.

Who should care: Lawyers · Privacy officers · Compliance · General readers · AI governance · Policy

#enforcement#ai Read original →
Enforcement
noyb (None of Your Business) · · EU

Privacy win: Norwegian Authority fines Microsoft’s Xandr € 8.5 Million

Norway's data protection authority has fined Xandr, now owned by Microsoft, €8.5 million for GDPR violations tied to its processing of personal data from users of the dating app Grindr. The case was originally brought in 2020 by privacy group noyb and the Norwegian Consumer Council.

Who should care: Lawyers · Privacy officers · Compliance · AI governance · Cybersecurity · General readers · Policy

#enforcement#gdpr#surveillance#privacy Read original →
Enforcement
IAPP · · International

Washington's attorney general reflects on state's privacy legislation and enforcement

Washington State's attorney general has spoken publicly about the state's consumer privacy law and how it is being enforced. The remarks offer a look at how one of the more active state-level privacy offices views its own record and priorities.

Who should care: Lawyers · Privacy officers · Compliance · General readers · Policy

#enforcement#state-privacy#privacy Read original →
Enforcement
EDPB · · EU

Italian DPA fines BBVA EUR 5 508 000 for failing to respect a customer’s objection to direct marketing

Italy's data protection authority fined BBVA's Italian branch over 5.5 million euros after the bank continued direct marketing to a customer who had formally objected to it. The decision cites violations of GDPR principles covering data processing, transparency, the right to object, and controller accountability.

Who should care: Lawyers · Privacy officers · Compliance · AI governance · General readers · Policy

#enforcement#gdpr#regulation#privacy Read original →
Enforcement
EDPB · · EU

Italian DPA fines security company EUR 39 000 for violations concerning employees’ data

Italy's data protection authority fined security firm La Patria S.p.A. €39,000 following an employee complaint. The violations involved failures to provide transparent privacy information and blocking workers from accessing their own personal data.

Who should care: Lawyers · Privacy officers · Compliance · AI governance · General readers · Policy

#enforcement#gdpr#privacy Read original →
Enforcement
EDPB · · EU

Italian DPA fines IQVIA EUR 7 000 000 for unlawful processing of patients’ health data

Italy's data protection authority fined IQVIA Solutions Italy €7 million following a finding that the company processed patients' health data without a lawful basis. The decision cited violations across multiple GDPR provisions, including rules on sensitive data, transparency, data protection by design, and impact assessments.

Who should care: Lawyers · Privacy officers · Compliance · Healthcare professionals · AI governance · General readers · Policy

#enforcement#healthcare#gdpr#privacy Read original →
Enforcement
EDPB · · EU

Italian DPA fines Emirates EUR 180 000 for infringements concerning passengers’ health data

Italy's data protection authority fined Emirates €180,000 following an investigation into how the airline handled passengers' health data. The ruling cited violations of GDPR principles on lawful processing, transparent communication, and disclosure obligations at the point of data collection.

Who should care: Lawyers · Privacy officers · Compliance · Healthcare professionals · AI governance · General readers · Policy

#enforcement#healthcare#gdpr#regulation#privacy Read original →
Enforcement
EPIC · · US Federal

CBP’s Predictive Policing Units Have Financial Data, Won’t Say How They Got It

Customs and Border Protection's Predictive Intelligence Targeting Units are using financial data to flag individuals for unusual transactions, according to reporting by 404 Media. The agency has not disclosed how it obtained the data, and has reportedly used local law enforcement as a shield to obscure its own involvement.

Who should care: Lawyers · Privacy officers · Compliance · Cybersecurity

#enforcement#surveillance Read original →
Enforcement
The Record · · International

ASOS: Hackers tricked way into employee account before sending rogue push notification

ASOS confirmed a breach in which attackers used social engineering to access an employee account, then sent unauthorized push notifications. The incident exposed some customer personal information, including names and contact details, along with non-personal account data.

Who should care: Lawyers · Privacy officers · Compliance · General readers · Policy

#enforcement#privacy Read original →
Enforcement
EDPB · · EU

Swedish DPA fines Miljödata i Karlskrona approximately EUR 160 000 for insufficient technical and organisational measures to ensure information security

Sweden's data protection authority fined IT service provider Miljödata i Karlskrona roughly EUR 160,000 after a 2025 cyberattack exposed personal data belonging to 2.2 million individuals, with the stolen data later published on the darknet. The fine was issued under Article 32 of the GDPR for inadequate technical and organisational security measures.

Who should care: Lawyers · Privacy officers · Compliance · AI governance · General readers · Policy

#enforcement#gdpr#privacy Read original →
Enforcement
EDPB · · EU

Dutch DPA fines Uber EUR 824 990 000 for unlawful automated decision-making and insufficient information on profiling

The Dutch Data Protection Authority has fined Uber approximately 825 million euros for violating GDPR rules on automated decision-making and failing to properly inform drivers about how profiling data was used against them.

Who should care: Lawyers · Privacy officers · Compliance · AI governance · Administrators · Cybersecurity · General readers · Policy

#enforcement#gdpr#ai-governance#surveillance#privacy Read original →
Enforcement
Y Yahoo · · International

Lawsuit claims facial recognition program led to wrongful arrest

A lawsuit alleges that a facial recognition program identified the wrong person, leading to a wrongful arrest. The case adds to a growing record of people facing serious legal consequences because of misidentification by automated systems.

Who should care: Lawyers · Privacy officers · Compliance · Cybersecurity · General readers · Policy

#enforcement#surveillance#privacy Read original →
Enforcement
Y Yahoo · · International

Lawsuit claims Amazon facial recognition led police to wrong man

A lawsuit alleges that Amazon's facial recognition technology misidentified a man, leading police to target the wrong person. The case puts corporate AI tools and law enforcement reliance on them under direct legal scrutiny.

Who should care: Lawyers · Privacy officers · Compliance · Cybersecurity · General readers · Policy

#enforcement#surveillance#privacy Read original →
Enforcement
The Guardian — Tech · · International

Police routinely failing to investigate ‘revenge porn’, research reveals

Research drawing on accounts from 100 people in England and Wales found that police frequently dismiss or fail to act on reports of intimate images shared without consent. Lawyers have filed a super-complaint to push authorities to treat image-based abuse as the serious criminal offense it legally is.

Who should care: Lawyers · Privacy officers · Compliance · General readers · Policy

#enforcement#privacy Read original →
Enforcement
The Guardian — Tech · · International

Privacy watchdog launches investigation into China-based company behind Kmart ‘pervert glasses’ app

Australia's privacy regulator has opened a formal investigation into Shenzhen Qingcheng, the China-based company behind the HeyCyan app embedded in Kmart's low-cost smartglasses, after the company failed to respond to the commissioner's inquiries. The probe follows public concern about the glasses being used to covertly capture images and video.

Who should care: Lawyers · Privacy officers · Compliance · General readers · Policy

#enforcement#regulation#privacy Read original →
Enforcement
A ANews · · International

US closes review of US airlines' data privacy without seeking penalties

U.S. regulators have closed a review of domestic airlines' data privacy practices without pursuing any penalties against the carriers. The outcome means airlines faced scrutiny but no formal consequences for how they handle passenger data.

Who should care: Lawyers · Privacy officers · Compliance · General readers · Policy

#enforcement#privacy Read original →
Enforcement
S SC Media · · International

Italy fines IQVIA $7.8 million for patient data privacy violations

Italy's data protection authority has fined IQVIA, a global health data and analytics company, approximately $7.8 million for violating patient privacy rules. The fine relates to how the company handled personal health data.

Who should care: Lawyers · Privacy officers · Compliance · Healthcare professionals · General readers · Policy

#enforcement#healthcare#privacy Read original →
Enforcement
R Reuters · · International

Catholic diocese sues US government seeking clergy access to detainees

A Catholic diocese has filed a lawsuit against the federal government, seeking to secure clergy access to immigration detainees. The suit challenges what the diocese says are barriers preventing religious ministers from reaching people held in detention facilities.

Who should care: Lawyers · Privacy officers · Compliance

#enforcement Read original →
← Prev Page 7 of 25 Next →