Data protection and digital regulation developments, collected automatically from 17+ sources.
Get this as an email digestDe Autoriteit Persoonsgegevens (AP) legt Uber een boete op van 824.990.000 euro. De reden hiervoor is dat de AP heeft geoordeeld dat Uber volledig geautomatiseerd besluiten namâŠ
The Romanian DPA imposed a fine of RON 15,728 (⏠3,000) on a car dealer for failing to implement appropriate technical and organisational measures in order to guarantee theâŠ
The ICO reprimanded ACRO for failing to implement appropriate security measures, including effective patch management and security monitoring, resulting in prolonged unauthorisedâŠ
The DPA found that pharmaceutical company unlawfully continued using an influencerâs personal data after their contract expired and fined it NOK 205,000 for breaching its duty toâŠ
Streamingplatform Twitch heeft bekendgemaakt dat Amazon persoonsgegevens van Twitch-gebruikers gebruikt om AI-modellen mee te trainen. Gebruikers die niet willen dat Amazon hunâŠ
The EUâs Action Plan on Cybersecurity and AI lays the groundwork for new, AI-powered approaches to IT security but organizations need to ensure their security foundations are fitâŠ
Vous avez demandĂ© un crĂ©dit et on vous lâa refusĂ© ? Vous ĂȘtes inscrit dans un fichier gĂ©rĂ© par la Banque de France ou un fichier tenu par votre banque ? Quelles sont lesâŠ
The DPA dismissed the data subject's complaint about their social security number shared with a financial service provider to obtain financial aid from the controller as itâŠ
La CNIL a Ă©tĂ© notifiĂ©e de violations de donnĂ©es affectant le systĂšme dâinformation de la Direction gĂ©nĂ©rale des Finances publiques (DGFiP). Elle est donc dâores et dĂ©jĂ saisie deâŠ
Cleared up "the DPA" and "million"/"billion" Example: The Romanian DPA fined Facebook Romania RON 25,000 (âŹ5,000).Example: The Romanian DPA fined Facebook Romania RON 25,000âŠ
English Summary The data subject appealed the DPA decision in April 2025. He argued that there was no particular threat that would justify the installation of a video surveillanceâŠ
The DPA reprimanded a company for refusing to cooperate with the supervisory authority: the controller had failed to provide information on the processing of personal data in twoâŠ
The DPA held that an employee who shared a customerâs phone number with a third person for a personal favour, overstepping company rules, acted as separate controller. Further,âŠ
The Court held that numerous repetitive GDPR requests were manifestly excessive under Article 12(5) GDPR and could be refused, while Article 14 GDPR requests did not constituteâŠ
A court annulled a reprimand issued by the DPA and held that requiring a photo ID to access outdoor swimming pools and video surveillance in the entry and exit areas constitutedâŠ
The DPA held that the dissemination of images of a body and the crime scene as part of the reporting on a murder case violated Article 5(1)(c) GDPR and the parents of the deceasedâŠ
The DPA fined the HSE âŹ300,000 for inadequate security measures which enabled a ransomware attack affecting health data of 84,000 people, alongside violations of Articles 28, 30âŠ
The DPA imposed a 54,300 fine to a controller for violations of Article 32(4), Article 14 and Article 5(1)(c) in conjunction with Article 9 GDPR and ePrivacy Directive.The DPAâŠ
Holding Holding. Holding The DPA, following CJEU precedent, maintained that the information appearing within the logs concerning employees access to a customerâs account areâŠ
English Machine Translation of the Decision Show changes
Undo revision 52721 by Marcm (talk) â Older revision (One intermediate revision by the same user not shown)(No difference)
Bent u een overheidsorganisatie of een private organisatie die publieke diensten levert? En bent u van plan een AI-systeem met een hoog risico te gaan gebruiken? Of gaat u alsâŠ
Are you curious about what happens behind the doors of the Dutch Data Protection Authority (AP)? You are cordially invited to the Bentinckhuis at Lange Voorhout 7 in The Hague onâŠ
Access Now's Digital Security Helpline and Vita Activa offer holistic digital safety and mental health support for activists.
Flock Safety, the embattled vendor of mass surveillance technology, has rolled out a handful of new reforms intended to appease the justified nationwide anger that has seen scoresâŠ
I am Vasiliki (Vicky) Kalantzi, a Greek lawyer supporting the protection of privacy and personal data in the digital environment.Hello world, I am Vasiliki (Vicky) Kalantzi, aâŠ
Weâve had a few questions from EFF supporters lately, asking whether the images we use on our blog posts, or on donation and shop items, have been created with AI imageâŠ
Internet shutdowns have to stop. As Access Now marks the 10th anniversary of the #KeepItOn campaign in 2026, weâre reflecting on the path travelled so far â and the journey stillâŠ
Imagine if McDonaldâs could use trademark law to control how you use the term âfast food.â Or if the Canadian government could stop you from using the word âCanadaâ in the titleâŠ
Access to accurate information about reproductive and maternal health can be critical. But on Meta's platforms, simply talking about prescription medication, abortion care, orâŠ
In a 6,500 word essay, Zuckerberg detailed his vision for AI.
Le RGPD autorise les organismes Ă confier dâautres missions Ă leur dĂ©lĂ©guĂ© Ă la protection des donnĂ©es (DPO). Ces missions ne doivent nĂ©anmoins pas faire obstacle Ă ses missionsâŠ
The Senate Commerce Committee will vote this week on several censorious and privacy invasive bills: KOSA, the SCREEN Act, Youth AI Privacy Act, and CHATBOT Act. While weâŠ
Die KI-Modelle wollen die Menschen dazu bringen, unwissentlich an einem Cyberangriff mitzuwirken. Das befeuert die Debatte um die Gefahren der KI-Entwicklung.
Ă partir du 2 aoĂ»t 2026, cinq nouveaux membres intĂšgrent la CNIL. Ces nominations interviennent dans le cadre dâun renouvellement partiel du CollĂšge.
We, the undersigned organizations and members of the #KeepItOn coalition â a global network of over 370 organizations from 106 countries working to end internet shutdowns â appealâŠ
Access Now and the #KeepItOn coalition â a global network of over 370 organizations from 106 countries working to end internet shutdowns, through an open letter, are urgingâŠ
Toute personne concernĂ©e a le droit de demander Ă un organisme de presse l'effacement de donnĂ©es personnelles la concernant figurant dans un article de presse diffusĂ© en ligne. IlâŠ
If you track your menstrual cycle in an app, you are sharing highly sensitive information. Often, it remains unclear what such an app does with this information or with whom theseâŠ
The Ninth Circuit Court of Appeals has endorsed a commonsense technical interpretation of the Computer Fraud and Abuse Act (CFAA), a law not usually given to such interpretation.âŠ
In the scorching heat of every Las Vegas summer, EFF joins thousands of hackers, makers, policy analysts, and activists for the world's largest computer security gathering. IfâŠ
Developers Must Beware of Ad Libraries that Betray Usersâ PrivacySAN FRANCISCO â Some software development kits (SDKs) provided by advertising companies to help developersâŠ
Members of the European Parliament (MEPs) voted on a derogation of the EUâs ePrivacy Directive for the third time in 4 months. While the proposal passed, the vote nonethelessâŠ
Update: The Senate Commerce Committee voted to advance this bill on August 5, 2026. EFF continues to oppose the bill, which still needs approval from the full Senate. The SenateâŠ
Update: The Senate Commerce Committee voted to advance this bill on August 5, 2026. EFF continues to oppose the bill, which still needs approval from the full Senate. The SenateâŠ
The Federal Trade Commission (FTC) in July issued a proposed policy statement âconcerning the suppression of accuracy in artificial intelligence systems.â We urge the FTC toâŠ
EFF joined a group of 18 civil society organizations to send a letter encouraging New York Governor Kathy Hochul to veto Senate Bill 9934A, the New York Stealth CrawlerâŠ
The administration is preparing to brief leading AI companies on its blueprint for reviewing advanced AI models.
It's time. Time for tinkerers, security researchers, hackers, and fellow nerds to gather together in signature black hoodies and utilikilts to beat the heat in Las Vegas for theâŠ
The chat with the webshop's customer service, that video on social media, the photo on a news site: as of August 2, 2026, it must be stated in many cases that artificialâŠ
Update: The Senate Commerce Committee voted to advance this bill on August 5, 2026. EFF continues to oppose the bill, which still needs approval from the full Senate. ArtificialâŠ
Update: On August 5, 2026, The Senate Commerce Committee voted 15-13 to advance this bill, but the bill did not advance because of a lack of Senators in attendance. EFF continuesâŠ
California lawmakers have amended A.B. 1709, but the core problem remains: the bill is still a ban on social media access for youth under 16, and it still threatens the privacyâŠ
This post is available as a printable one page handout in English and Spanish. Recordings of law enforcement, whether by bystanders or by those directly encountering officers, canâŠ
The EU's executive is seeking contract agents for two units within the two-year-old AI Office just as its power is expanding.
La CNIL vous propose de dĂ©crypter un sujet ou une actualitĂ© en lien avec la protection des donnĂ©es Ă travers une sĂ©rie de webinaires. Retrouvez ce nouvel Ă©pisode consacrĂ© auxâŠ
Brussels, 30 July â The EDPB and the European Commission organise a remote stakeholder event in the context of their joint work on upcoming guidelines on the interplay betweenâŠ
Germany, Greece, Portugal, Italy and Spain are backing plans to build the largest hubs.
Cookie Banners Today, noyb has filed a complaint against the popular online dictionary dict.cc. The GDPR requires that consent is freely given, informed, specific and unambiguous.âŠ
The Dutch Data Protection Authority (Autoriteit Persoonsgegevens) provides guidance to childcare organizations regarding the sharing of information in cases of suspected criminalâŠ
Watches, bands, and ringsâif you want to digitally monitor your fitness, more companies than ever are selling devices to do it. And more Americans than ever now own at least oneâŠ
A new analysis reveals that the artificial intelligence companyâs most powerful models spent days probing the open internet before breaching AI developer platform Hugging Face.
A ransomware attack often does more than just shut down computer systems. The personal data of hundreds, and sometimes millions, of people can also be compromised. OrganizationsâŠ
The concept of âsurveillance pricingâ is just one part of a much larger problem and business model: corporations maximizing their profits by invading our privacy. TheâŠ
Update 8/10/2026: Two San Francisco bars that used Patronscan have said they will stop using the system after listening to customersâ privacy concerns. EFF applauds this changeâŠ
Dario Amodei continued to stand aloof from other U.S. tech leadersâ unified praise for inexpensive âopen weightâ models.
Swap to decisions backend gdprhub" level="submit" path="search-embed" width="100%" height="10000" />decisions" path="search/embedded" width="100%" height="10000" />
Swap to decisions backend item.classList.add('preview-loading'); item.classList.add('preview-loading'); }); }); return fetch('/gdprhubnews/news.json') returnâŠ
The first-ever case of an artificial intelligence agent going rogue coincides with the EU's major new powers to regulate AI. But Europe's leverage may be limited by the U.S.-ChinaâŠ
EFFâs first EFFecting Change livestream was all the way back in July of 2024. Maybe you've caught each stream, or maybe youâve only caught a few. Or maybe youâre like me andâŠ
For years, John Deere had actively made repairing their tractors near-impossible for anyone but itself and the few "authorized" repair shopsâregardless of the ability of itsâŠ
Brussels, 23 July â The EDPB and the European Commission organise a remote stakeholder event in the context of their joint work on upcoming guidelines on the interplay betweenâŠ
Police departments across the country are lining up to launch drone-as-first-responder (DFR) programs, and hundreds have cleared a necessary hurdle toward making deployment aâŠ
Google could be hit with the largest fine yet under the EUâs Digital Markets Act. Zoya Sheftalovich and Kathryn Carlson explain why Brussels believes the tech giant is unfairlyâŠ
The first fully autonomous breach by OpenAIâs most powerful AI models has prompted a bipartisan push for stronger oversight over increasingly powerful artificial intelligenceâŠ
Intermediary liability laws around the world recognize that social media platforms, search engines, and other online service providers have become an integral part of our lives:âŠ
Legal intern Suzanne Castillo was the principal author of this post. The Fourth Circuit issued a disappointing opinion in U.S. v. Belmonte Cardozo, a case in which EFF filed anâŠ
The initiative marks a wider push to steer federal science funding toward AI-powered research and individual investigators.
La CNIL rĂ©pond aux principales interrogations des professionnels sur la mise en Ćuvre de sa recommandation sur les pixels.
La CNIL vous propose de dĂ©crypter un sujet ou une actualitĂ© en lien avec la protection des donnĂ©es Ă travers une sĂ©rie de webinaires. Retrouvez ce nouvel Ă©pisode consacrĂ© auxâŠ
La Commission nationale de l'informatique et des libertĂ©s sâest rĂ©unie le mardi 21 juillet 2026 Ă 9 h 30 avec lâordre du jour suivant :
The European Commission is currently finalising negotiations with the Trump administration to conclude an âEnhanced Border Security Partnershipâ (EBSP) Framework AgreementâŠ
A new report from the Government Accounting Office reveals that the Department of Homeland Security (DHS) plans to nearly triple the number of surveillance towers along U.S.âŠ
Lors dâune rĂ©union Ă haut niveau qui sâest tenue Ă Dublin les 16 et 17 juillet 2026, le ComitĂ© europĂ©en de la protection des donnĂ©es (CEPD) a plaidĂ© en faveur dâune base lĂ©galeâŠ
Thereâs a new boogeyman in the battles over AI: so-called âstealth crawlers.â Weâll admit itâthe term âstealth crawlersâ sounds quite nefarious. In reality, theyâre anything but.âŠ
Are you a California resident? Then we've got exciting news for you: there's a tool just for you that lets you take a single, relatively easy step to protect your privacy. It'sâŠ
Lors dâune rĂ©union Ă haut niveau qui sâest tenue Ă Dublin les 16 et 17 juillet 2026, le ComitĂ© europĂ©en de la protection des donnĂ©es (CEPD) a plaidĂ© en faveur dâune base juridiqueâŠ
Les innovations Ă lâĂšre de lâIA gĂ©nĂ©rative se poursuivent avec la dĂ©mocratisation de lâIA agentique, dĂ©sormais capable dâagir sur son environnement Ă la place de son utilisateur.âŠ
The institution is opening its doors to models from OpenAI, Meta, Anthropic and Mistral as it tries to bring lawmakersâ growing use of the technology under control.
In the battle over AI regulation â from Washington, D.C. to Silicon Valley â one term has become unexpectedly controversial: âAI safety.â After all, who doesnât believe in makingâŠ
Dublin, 17 Julyâ At a high-level meeting in Dublin on 16 and 17 July 2026, the European Data Protection Board (EDPB) called for a clear legal basis for the sharing of informationâŠ
This month, we celebrate 36 years of EFF and a mission that is bigger than any one of us. Thanks to EFF, communities around the world are demanding that technology protects theirâŠ
Reversing course, Flock Safetyâthe surveillance technology vendor most known for its extensive network of automated license plate readersâhas announced that it will end a pilotâŠ
When Ubisoft's Watch Dogs 2 was released in 2016, it was a headtrip for those of us working on digital-rights issues in the Bay Area. During the day, I'd fightâŠ
EFF and ARTICLE 19 have submitted joint comments to the European Commission on draft guidelines for the Digital Services Actâs trusted flagger mechanism. Having long advocated forâŠ
La Commission nationale de l'informatique et des libertĂ©s sâest rĂ©unie le jeudi 16 juillet 2026 Ă 9 h 30 avec lâordre du jour suivant :
MENA's social media regulations give the appearance of legitimacy but threaten to increase state censorship and control.
Third reform in six years allocates âŹ3 billion to controversial EU policing agency with the capacities to place everyone under surveillance.
In November 2025, the European Commission presented the Digital Omnibus as a simplification package for EU digital rules. Since then, the AI Omnibus has been adopted, weakeningâŠ
The French Administrative Supreme Court ruled in favour of La Quadrature du Net, French Data Network (FDN), Franciliens.net and FĂ©dĂ©ration FDN by recognising that the Hadopi lawâsâŠ
EDRi responded to the European Commissionâs consultation on the Digital Fitness Check, emphasising the importance of the rights-based digital framework developed over the years.âŠ
What has the EDRi network been up to over the past few weeks? Find out the latest digital rights news in our bi-weekly newsletter. In this edition: Turning up the heat ââŠ
Privacy Camp hosts its 14th edition on 13 October 2026, in Brussels and online. For people living in Europe and across the globe, the impact technology has on our lives becomesâŠ
The European Data Protection Board (EDPB) has published 3 guidelines. These concern guidelines for the scraping (automatic collection) of data for training generative artificialâŠ
The effort to age gate the internet is back in Washingtonâand now it has a new name. Recently passed by the House of Representatives, the KIDS Act is a sprawling package ofâŠ
Oura Rings, Garmin GPS fitness watches, Apple Watches, Whoop bandsâevery year, more and more tech devices are promising to monitor our health and fitness, guide us towardâŠ
The California legislature has stepped back from a plan that would have expanded its age-gating law, removing language that could have compounded serious threats to usersâ speech,âŠ
By pushing for ever-tougher AI safety laws, Anthropic is drawing a distinction between its state lobbying strategy and OpenAIâs campaign to streamline a set of rules across theâŠ