Data protection and digital regulation developments, collected automatically from 17+ sources.
Get this as an email digestGovernment letter, EHDS opt-out and other commitments. Please note, this does not concern an opt-out from the EHDS itself, but the opt-out provided for within the EHDS.
Zoals al aangekondigd in het Competitive Compass (blz. 12), lijkt het nu op dat onderdeel van Omnibus III, ook de AVG-regels voor het MKB wat versimpeld zullen worden. Er lijkt te…
Data Subject Rights In most countries, the government knows when you were born, your social security number, where you live, how much you earn and how much your house is worth.…
BfDI fordert mehr statt weniger Informationsfreiheit und Transparenz
Regarding the Data Protection Regulation, it should be noted that: "The Data Protection Authority (AP) is designated as the supervisory body for the section concerning the…
Soon, individuals may be able to receive a lump sum payment of up to 10% of their pension/retirement capital upon retirement, which will result in permanently lower future…
Questions and answers from members of the BBB parliamentary group regarding the proposed expansion of the communication secrecy provisions in the Telecommunications Act to include…
"Based on the information in the official's letter to your Chamber, the situation is that the official was to participate in an exercise that would take place in the data center…
"In terms of information management (including digital accessibility, document transparency, and GDPR compliance), the staffing levels are a major bottleneck, and have not kept…
Parliamentary Documents II, 2024–2025, 36 639, No. 6. Amendment of various laws concerning the introduction of the citizen service number and the services of the digital…
For some time now, various issues have been identified in the (proactive) services provided by the government. While some of these issues have been addressed, many remain…
Government response regarding the viability of the EU-US agreements on data privacy and the potential consequences for the transfer of sensitive personal data from Europe to US…
Questions and answers from members of the BBB group regarding the extension of the secrecy of communications in the Telecommunications Act to non-public networks and the…
Parliamentary documents II, 2024–2025, 36 639, no. 6. Amendment of various acts in connection with the introduction of the citizen service number and the facilities of the digital…
herein, brief mention is also made of data processing within educational institutions (p.
regarding the Data Regulation, it is noted: "The AP is designated as the supervisory authority for the part concerning the requesting of data by government authorities in…
Upon retirement, people will soon be able to have a maximum of 10% of their pension/annuity capital paid out as a lump sum, resulting in lower lifelong benefits. Nibud…
"The case, as can be inferred from the official's letter to Your Chamber, is that they were to participate in an exercise taking place at the data center of the private company.…
"Regarding information management (including digital accessibility, public disclosure of documents, GDPR legislation), staffing is the bottleneck, as it has not grown in tandem…
Al geruime tijd worden er verschillende knelpunten opgemerkt bij (proactieve) dienstverlening van de overheid. In dit kader zijn enkele geadresseerd, maar nog veel blijft open…
Artificial Intelligence OpenAI’s highly popular chatbot, ChatGPT, regularly gives false information about people without offering any way to correct it. In many cases, these…
Three recommendations from the Dutch Authority for the Financial Markets (Autoriteit Financiële Markten - AP) combined: (regarding the handling of data breaches; a task to improve…
Status update from the Tax Authority: In preparation for a parliamentary debate on the Tax Authority (March 13, 2025), a comprehensive set of information has been made public,…
Advice on Data Foundations & Analytics (October 2024) from the Analytics Advisory Committee, which specifically addresses: "The question is whether collecting additional…
Documents related to the decision regarding the disclosure of personal data by the Ministry of Defence to trade unions during reorganizations.
One of the use cases aims to: "Scale up the use of drone operations for surveillance and incident response, with the goal of increasing the speed, safety, and efficiency of…
Report on the Risk Analysis Model (RAM) at the Dutch Tax Administration, Benefits Administration, and Customs (Part 2) "This is the second part of the report concerning the…
Parliamentary letter regarding the appreciation of the motion by member Six Dijkstra on investigating the local operation of AI models within the government "I endorse the…
Amendment Act on the restriction of access to UBO registers, Parliamentary Papers II 2024-25, no. 36584 nos.
Op 16 april 2024 heeft de Kamer moties aangenomen waarin de regering wordt verzocht om meer hulp en ondersteuning te bieden aan geadopteerden en om ervoor te zorgen dat…
One of the use cases has the objective: "Scaling up the deployment of drone operations for surveillance and incidents, with the aim of increasing the speed, safety, and efficiency…
The implementation of the legislative amendment varied significantly between organizations, with complexity primarily depending on existing reporting facilities and the need for…
NCTV memorandum on the status of (information) security following ADR investigation "The NCTV processes personal data within the currently applicable frameworks of the GDPR. This,…
Review of systems comparable to RAM "This report inventories the extent to which there is insight into whether systems of the Tax and Customs Administration that are comparable to…
Outcomes of External investigation into the Risk Analysis Model (RAM) at the Tax and Customs Administration, the Benefits Service and Customs. Report on the investigation of the…
Data Foundations & Analytics Advice (Oct. 2024) from the Analytics Advisory Committee, which explicitly addressed: "The question is whether collecting additional (special…
State of affairs regarding the Tax and Customs Administration. In preparation for a committee debate concerning the Tax and Customs Administration (13 March 2025), a series of…
Data Subject Rights Nowadays, more and more banks set their interest rates automatically, and without any human intervention. But even the smallest inaccuracies can cost consumers…
Response to parliamentary questions regarding the sharing of personal data through the use of Google Analytics on werkenvoornederland.nl and specific application procedures. The…
Parliamentary Papers II 2024-2025, 36663, no. 7. Letter from the temporary Committee on Fundamental Rights and Constitutional Review regarding an advisory report on the…
Kamerstukken II 2024-2025, 35968, nr. 30, (Intrekking van de Archiefwet 1995 en vervanging door een nieuwe Archiefwet (Archiefwet 20..)), Nader gewijzigd amendement van de leden…
Parliamentary Papers II 2024-2025, 36584, 18 (Amendment Act on limiting access to UBO registers), Motion by Member Flach et al.
Parliamentary Papers II, 2024-2025, 23 645, no.
Government-wide GDPR audit 2024.
The launch of a register for Data Protection Officers. "To strengthen the position of the data protection officer (DPO) and to ensure quality, [as was also announced in the…
Political Microtargeting, Manipulation & Tracking In March 2023, noyb filed complaints against several German political parties: During the 2021 elections, CDU, AfD, SPD, Bündnis…
Data Subject Rights The highly popular smartphone app WetterOnline shares the personal data of its users with hundreds of third-party companies for advertising purposes. Until a…
Parliamentary Papers II 2024-2025, 35968, no. 24 - Repeal of the Public Records Act 1995 and replacement by a new Public Records Act (Public Records Act 20..), Amended amendment…
Cabinet response to the report 'Ethnic profiling is a government-wide problem' by Amnesty International.
Uitkomst verkenning iedere 18-jarige standaard een vergeetrecht. Halverwege november 2024 werd een motie aangenomen om te verkennen op welke manier het recht op gegevensverwerking…
National Administrative Procedures and DPA inactivity Today, the EU's General Court held that the Irish DPC acted unlawful when it refused to investigate a noyb complaint. The…
National Administrative Procedures and DPA inactivity When the General Data Protection Regulation (GDPR) came into force in 2018, it ushered in a new era of data protection in the…
Data Transfers Since the Snowden disclosures we know that the US engages in mass surveillance of EU users by scooping up personal data from US Big Tech. The "Privacy and Civil…
EDSA schafft mehr Klarheit bei Pseudonymisierung
Data Transfers Today, noyb has filed GDPR complaints against TikTok, AliExpress, SHEIN, Temu, WeChat and Xiaomi for unlawful data transfers to China. While four of them openly…
In the judgment C-416/23, the Austrian Data Protection Authority (DSB) received a slap in the face from the CJEU. The authority has – arbitrarily – set the number of complaints…
Berlin Group beschließt Papiere zu LLMs und zu Data Sharing
Biometric Data Today, noyb filed a GDPR complaint against Ryanair. Booking a flight on the airline’s website not only requires a mandatory account. New customers must also go…
Data Subject Rights noyb has achieved a win against Netflix. Almost five years after the complaint has been filed, the Dutch data protection authority (DPA) has finally issued a…
Datenschutz ermöglicht verantwortungsvolle KI
Political Microtargeting, Manipulation & Tracking noyb win against the European Commission: The EDPS (European Data Protection Supervisor) has issued a decision finding that the…
Forced Consent & Consent Bypass Today, noyb has filed a complaint against the social media platform BeReal over the latest “dark pattern” to get consent. When people open the app,…
Data Subject Rights noyb is now approved as a so-called "Qualified Entity" to bring collective redress actions in courts throughout the European Union. Such action under Directive…
Data Subject Rights noyb welcomes yesterday's leading decision of the German Federal Court of Justice on claims in connection with a data protection incident at Facebook Copyright…
Forced Consent & Consent Bypass In the battle over the illegal use of personal data for advertisement, Meta has announced another variation that is not "Yes or No" consent: This…
Global Privacy Assembly beschließt Resolution für vertrauenswürdigen internationalen Datenverkehr
Online & Mobile tracking Today, noyb filed a complaint against the social media platform Pinterest. Most users probably know it as a visual mood board and use it to find ideas and…
BfDI bei G7 Roundtable in Rom
BfDI begrüßt EDSA-Leitlinien zum berechtigten Interesse
Online & Mobile tracking In today's ruling in C-446/21 (Schrems v. Meta), the Court of Justice of the European Union (CJEU) has fully backed a lawsuit brought against Meta over…
BfDI begrüßt BKA-II Entscheidung
Online & Mobile tracking Today, noyb filed a complaint against Mozilla for quietly enabling a supposed “privacy feature” (called Privacy Preserving Attribution) in its Firefox…
Forced Consent & Consent Bypass Following several noyb complaints from 2023, the Belgian data protection authority has ordered four major Belgian news sites to bring their cookie…
Neue BfDI tritt Amt an
Profiling & Automated Decision Making Today, noyb lodged a complaint with the Austrian data protection authority against the credit reference agency KSV1870 and the energy…
Data Security In early May 2024, the European Parliament informed its staff of a massive data breach in the institution’s recruiting platform (called “PEOPLE”). The breach…
Data Subject Rights Greek supermarket chain Alfa Vita (AB) runs a loyalty card program, allowing the collection of personal data of shoppers. Still, the company can’t even comply…
Artificial Intelligence Recently, Twitter International (now re-branded as “X”) began unlawfully using the personal data of more than 60 million users in the EU/EEA to train its…
Data Subject Rights Contrary to EU law, the Swedish Data Protection Authority (IMY) regularly refuses to properly handle complaints from data subjects. Even after a ruling by the…
Forced Consent & Consent Bypass Following a complaint by noyb, the Hamburg data protection authority declared the use of controversial ‘Pay or OK’ systems to be permissible.…
In 2023, noyb continued to be one of the major European forces pushing for the fundamental right to data protection for all users. Our achievements this year prove once again that…
The European Parliament and the Council of the EU have now published their amendments to the Commission's draft GDPR procedural regulation. We have analysed the two versions and…
Cookie Banners Following several hundred noyb complaints against companies that use questionable consent banners, the European Data Protection Board established a "cookie banner…
Data Subject Rights Advertising broker Xandr (a Microsoft subsidiary) collects and shares the personal data of millions of Europeans for detailed targeted advertising. This allows…
Online & Mobile tracking Today, a Norwegian court has confirmed that Grindr violated the GDPR by sharing user data with advertisers. This also confirms that Grindr must pay a fine…
Artificial Intelligence In response to 11 noyb complaints, the DPC has announced (late Friday afternoon) that Meta has committed to the DPC that it will not process EU/EEA user…
Forced Consent & Consent Bypass After years of growing criticism over invasive ad tracking, Google announced in September 2023 that it would phase out third-party cookies from its…
Berlin Group beschließt Arbeitspapier zu Digitalem Zentralbankgeld
BfDI und ICO stärken Zusammenarbeit
Artificial Intelligence Over the past few days, Meta has informed millions of Europeans that its privacy policy is changing once again. Only on closer inspection of the links in…
BfDI fordert ein Update bei der Informationsfreiheit
Forced Consent & Consent Bypass noyb has today lodged a GDPR complaint against Kurier. Just a few months ago, users were forced to consent to Google and other tracking cookies…
Berlin Group beschließt Arbeitspapier zu Facial Recognition Technology
Data Subject Rights In the wake of the pandemic, schools in the European Union have increasingly begun to implement digital services for online learning. While these modernisation…
BfDI erhebt Klage gegen den Bundesnachrichtendienst
Artificial Intelligence In the EU, the GDPR requires that information about individuals is accurate and that they have full access to the information stored, as well as…
Online Advertising CJEU press releases (look for C-446/21 - Schrems)Full AG OpinionKatharina Raabe-Stuppnig, lawyer representing Mr Schrems: "We are very pleased by the opinion,…
Bilaterales Treffen zwischen BfDI und Garante
Forced Consent & Consent Bypass Today, the EDPB has issued its first decision on "Pay or Okay" in relation to large online platforms such as Instagram and Facebook, as first…
Forced Consent & Consent Bypass So-called pay or consent systems are on the rise in Europe. First introduced by journalistic websites that were suffering from the loss of…
BfDI stellt 32. Tätigkeitsbericht vor
Forced Consent & Consent Bypass The European Data Protection Board (EDPB) will soon decide about the future of free consent online. Following Meta’s introduction of a “Pay or…
National Administrative Procedures and DPA inactivity Would you like a license to break the law? Sweden may be your dream destination: Thanks to a loophole in national law, large…
BfDI begrüßt die europäische KI-Verordnung
Credit Scoring Today, noyb has filed a complaint and report against the German credit agency SCHUFA with the Hessian data protection authority. The company appears to be making…
Forced Consent & Consent Bypass The European Data Protection Board (EDPB) will soon issue what is likely to be its most significant opinion to date: It will determine whether…
BfDI fordert Einhaltung der Grundrechte bei Chatkontrolle
Credit Scoring noyb has scored a stage victory in its proceedings against the credit reference agency CRIF and the address trader Acxiom in Germany. The companies are illegally…