Data protection and digital regulation developments, collected automatically from 17+ sources.
Get this as an email digestDiscord has begun rolling out mandatory age verification and the internet is, understandably, freaking out. At EFF, we’ve been raising the alarm about age verification mandates…
Access Now, alongside several human rights organizations and independent news platforms, are calling on AppLogic Networks (previously Sandvine) to substantiate its announced…
To:Mr. Mark Driedger, Chief Executive Officer Ms. Carol Tate, Chief Ethics & Compliance OfficerAppLogic Networks Re: Addressing human rights abuses and attacks on press…
The EDPB and the EDPS have adopted a joint opinion on the proposal for a digital omnibus regulation, intended to simplify the EU regulatory framework and strengthen…
The Dutch Data Protection Authority (Autoriteit Persoonsgegevens) warns users and organizations against the use of OpenClaw and similar experimental systems. The cause is the high…
Brussels, 12 February - During its latest plenary, the EDPB adopted its work programme for 2026-2027. This is the second work programme to support the implementation of the EDPB…
GDPR Policy The EDPB (combining all independent data protection authorities) and the European Data Protection Supervisor (EDPS) published a joint opinion expressing serious…
The EU Data Protection Board and the European Data Protection Supervisor strongly urge the co-legislators not to adopt the proposed changes to the definition of personal data
Surveillance technology vendors, federal agencies, and wealthy private donors have long helped provide local law enforcement “free” access to surveillance equipment that bypasses…
Criticize the government online? The Department of Homeland Security (DHS) might ask Google to cough up your name. By abusing an investigative tool called "administrative…
The European Commission’s dangerous and misguided Digital Omnibus proposal includes a dangerous rollback of transparency requirements in the AI Act. 60 civil society…
EDRi has assessed the Digital Omnibus proposals affecting the General Data Protection Regulation (GDPR) and the ePrivacy framework. While presented as simplification, the changes…
Digital Commons: Infrastructures, Design, and the Ethics of Autonomy is an international conference exploring how digital infrastructures shape contemporary life, and how…
The Global Gathering brings together groups from around the world working on the most urgent technology-related challenges affecting human rights, social justice, civil society,…
Media scholars Lucie Chateau and Michael Stevenson, and legal scholar Catalina Goanta on how Big Tech killed the internet.
During the State of the Internet, Waag Futurelab takes the annual temperature of the internet. This edition focuses on AI and the limits of our planet. The lecture will be given…
Why do our digital systems break people? Conversational AI tools like Grok or ChatGPT are promoted as a means to democratize knowledge and expand access to information. In…
The event will give the opportunity to the researchers, the University of Amsterdam and Eurecat – Centre Tecnològic de Catalunya, to showcase the results of their analyses,…
Brussels, 11 February - The European Data Protection Board (EDPB) and the European Data Protection Supervisor (EDPS) have adopted a Joint Opinion on the Digital Omnibus Regulation…
We, the undersigned organisations and individuals, urge you in the strongest possible terms to reject the deletion of the Article 49(2) transparency safeguard for high-risk AI…
Safer Internet Day 2026
Interviewer: Jillian York Yazan Badran is an assistant professor in international media and communication studies at the Vrije Universiteit Brussel, and a researcher at the Echo…
Group led by EFF and Imperial Valley Equity & Justice Asks Gov. Newsom and Caltrans Director to Act Immediately SAN FRANCISCO – California must revoke permits allowing federal…
Amazon Ring’s Super Bowl ad offered a vision of our streets that should leave every person unsettled about the company’s goals for disintegrating our privacy in public. In the ad,…
We are calling on technology companies like Meta and Google to stand up for their users by resisting the Department of Homeland Security's (DHS) lawless administrative…
The Digital Omnibus proposal fails to comply with the Charter of Fundamental Rights and Better Regulation rules, EDRi urged the Council to send the proposal back to the Commission…
On January 27, 2026, the European Commission and Brazil adopted mutual adequacy decisions, confirming that their levels of data protection are comparable. On July 15, 2025, the…
The European Commission preliminarily found that TikTok was in breach of the Digital Services Act (DSA) due to the addictive design of its platform. EDRi welcomes this decision…
(This appeared as an op-ed published Friday, Feb. 6 in the Daily Journal, a California legal newspaper.) Section 230, “the 26 words that created the internet,” was enacted 30…
We are sad to report the passing of longtime EFF Board member, Dave Farber. Dave was 91 and lived in Tokyo from age 83, where he was the Distinguished Professor at Keio University…
For thirty years, internet users have benefited from a key federal law that allows everyone to express themselves, find community, organize politically, and participate in…
Section 230 helps make it possible for online communities to host user speech: from restaurant reviews, to fan fiction, to collaborative encyclopedias. But recent debates about…
Section 230 helps make it possible for online communities to host user speech: from restaurant reviews, to fan fiction, to collaborative encyclopedias. But recent debates about…
Flock contracts have quietly spread to cities across the country. But Flock ALPR (Automated License Plate Readers) erode civil liberties from the moment they're installed.…
Cookies, employee monitoring, and data security were the main issues addressed in the penalties imposed by the CNIL in 2025, with the cumulative amount of the fines totaling…
The EDRi network strongly condemns the pressure of the US Trump administration on EDRi members and allies for our work on online platform regulation.
Requests for information regarding banking incident files account for an average of 400 requests received by the CNIL each year. For this reason, the CNIL has decided to test a…
The National Commission on Information Technology and Civil Liberties met on Thursday, February 5, 2026, at 9:30 a.m. with the following agenda:
The Dutch Data Protection Authority (Autoriteit Persoonsgegevens) has imposed fines totaling 250,000 euros on ten municipalities. The reason is that they processed files…
In the first part of our blog series on the dodgy digital security practices underlying advanced AI tools, we unpack how LLMs can jeopardize the confidentiality of people’s data.
Federal agencies like Immigration and Customs Enforcement (ICE) and Customs and Border Protection (CBP) have descended into utter lawlessness, most recently in Minnesota. The…
Immigration and Customs Enforcement (ICE) and Customs and Border Protection (CBP) have descended into utter lawlessness, most recently in Minnesota. The violence is shocking. So…
The CNIL invites you to explore a topic or current event related to data protection through a series of webinars. Check out this new episode dedicated to the CNIL’s inspections.
As the UK adequacy renewal comes to an end, EDRi member Open Rights Group reflects on its outcome and the broader implications for the future of EU-UK relatiopnships.
The phrase "artificial intelligence" has been around for a long time, covering everything from computers with "brains"—think Data from Star Trek or Hal 9000 from 2001: A Space…
The European Commission’s new Digital Networks Act threatens to dismantle nearly a decade of net neutrality protections in Europe. What is being presented as a technical update…
At the 39th Chaos Communication Congress (39C3), German author Marc-Uwe Kling helped launch the idea of a monthly “Digital Independence Day” with a broad coalition of civil…
19 civil society organisations have penned a letter to the Swiss Federal Department of Justice and Police (FDJP) to express serious concerns about their plans to extend the Swiss…
What has the EDRi network been up to over the past few weeks? Find out the latest digital rights news in our bi-weekly newsletter. In this edition: borders, biometrics,…
The CNIL specifies the circumstances in which its approval is required to conduct public scientific research (excluding health-related research) that involves the processing of…
The Dutch Data Protection Authority (AP) today presents its vision on generative artificial intelligence (AI). In this vision, the regulator outlines how generative AI can be…
Editorial for International Report February 2026
Blog for International Report February 2026
Fake videos, images, and audio clips are becoming increasingly realistic and can infringe on privacy and damage reputations. Creating or sharing them is not without risk and may…
The European Data Protection Board (EDPB) invites you to register for its conference, “Cross-regulatory interplay and cooperation in the EU: a data protection perspective”, taking…
The main changes to the data protection legislation in Part 5 of the Data (Use and Access) Act (DUAA) will be commenced on Thursday, 5 February, apart from Section 103
The Dutch Data Protection Authority (Autoriteit Persoonsgegevens) has amended the previously published guidance on targeted online political advertising. This version now…
The European Data Protection Board (EDPB) and the European Data Protection Supervisor (EDPS) have published a joint opinion on the European Commission's proposal to simplify the…
The Dutch Data Protection Authority (Autoriteit Persoonsgegevens) considers that it has been insufficiently demonstrated that special enforcement officers (BOAs) in public…
The Dutch Data Protection Authority (AP) has identified three central priorities for the 2026-2028 period: mass surveillance, artificial intelligence (AI), and digital resilience.…
The EU and Brazil adopted, on 27 January, mutual adequacy decisions which confirm that their levels of data protection are comparable. This recognition allows for personal data to…
EFF has long warned about the dangers of the “real-time bidding” (RTB) system powering nearly every ad you see online. A proposed class-action settlement with Google over their…
Today, we’re launching Encrypt It Already, our push to get companies to offer stronger privacy protections to our data and communications by implementing end-to-end encryption. If…
The Electronic Frontier Foundation stands with the people of Minneapolis and with all of the communities impacted by the ongoing campaign of ICE and CBP violence. EFF will be…
On the European Data Protection Day on January 28, the Dutch Data Protection Authority (AP) organized a session with young people. Delegates from various youth political parties…
Brussels, 29 January - The EDPB organises a remote event to collect stakeholders’ input on its Guidelines on the processing of personal data to target or deliver political…
Ever since the GDPR (General Data Protection Regulation) came into force in 2018, people in the European Union have stronger privacy and data protection. However, the law is far…
Lorem ipsum dolor sit amet, consectetur adipiscing elit. Fusce fringilla iaculis lorem eget feugiat. Etiam viverra turpis id ante porta, non mattis velit egestas. Ut facilisis…
The Digital Services Act (DSA) Human Rights Alliance has, since its founding by EFF and Access Now in 2021, worked to ensure that the European Union follows a human rights-based…
Lawmakers in Washington are once again focusing on kids, screens, and mental health. But according to Congress, Big Tech is somehow both the problem and the solution. We're…
Permanent CCTV surveillance of employees' fixed workstations is not permitted. Cameras may only be deployed if strictly necessary, for example for safety during incidents, and not…
Watch the video on online data protection risks for kids Brussels, 28 January - Every day, the European Data Protection Authorities (DPAs) that make up the EDPB work together to…
Data Subject Rights noyb has scored another win in its proceedings against Microsoft 365 Education: The Austrian data protection authority (DSB) has decided that the company…
Dangerously unchecked surveillance and rights violations have been a throughline of the Department of Homeland Security since the agency’s creation in the wake of the September…
U.S. Homeland Security Secretary Kristi Noem last week posted a photo of the arrest of Nekima Levy Armstrong, one of three activists who had entered a St. Paul, Minn. church to…
Municipalities find it difficult to detect the misuse of personal data by their own officials. This concerns, for example, officials who provide information to criminals under…
BfDI Launches "ReguLab" Sandbox: Greater Clarity on Data Protection
The European Commission has opened a DSA investigation into Grok, X’s AI chatbot. EDRi welcomes this decision and is calling for a swift resolution to this matter, to ensure that…
We're taking part in Copyright Week, a series of actions and discussions supporting key principles that should guide copyright policy. Every day this week, various groups are…
Lorem ipsum dolor sit amet, consectetur adipiscing elit. Fusce fringilla iaculis lorem eget feugiat. Etiam viverra turpis id ante porta, non mattis velit egestas. Ut facilisis…
We're taking part in Copyright Week, a series of actions and discussions supporting key principles that should guide copyright policy. Every day this week, various groups are…
The European Commission says that TikTok has agreed to provide advertising repositories in which data is stored and managed to ensure full transparency around ads on its services,…
We're taking part in Copyright Week, a series of actions and discussions supporting key principles that should guide copyright policy. Every day this week, various groups are…
We're taking part in Copyright Week, a series of actions and discussions supporting key principles that should guide copyright policy. Every day this week, various groups are…
Spyware continues to spread across Europe despite years of scandals and undisputable evidence of fundamental rights violations. As the European Commission remains inactive, civil…
Bits of Freedom shares lessons learned while working on “Amsterdam Top400”, an invasive municipality project which involved the use of predictive policing and led to unwanted…
What has the EDRi network been up to over the past few weeks? Find out the latest digital rights news in our bi-weekly newsletter. In this edition: EDRi’s 2025 year in review, new…
Brussels, 21 January - The European Data Protection Board (EDPB) and the European Data Protection Supervisor (EDPS) have adopted a Joint Opinion on the European Commission’s…
Version 2 of our report includes specific recommendations for the EU legislator on each of the most important articles, including on whether to reject or maintain proposed changes
The government has launched a consultation to seek views on whether under 16s should be banned from accessing social media
Earlier this month, Iran’s internet connectivity faced one of its most severe disruptions in recent years with a near-total shutdown from the global internet and major…
So many data breaches happen throughout the year that it can be pretty easy to gloss over not just if, but how many different breaches compromised your data. We're diving…
We're taking part in Copyright Week, a series of actions and discussions supporting key principles that should guide copyright policy. Every day this week, various groups are…
Credit Scoring An investigation into data flows at the Austrian credit agency CRIF has shed further light on the matter: most of the address data in the CRIF database comes from…
Brussels, 19 January - During its latest plenary, the EDPB adopted a report to support the European Commission’s evaluation of the Law Enforcement Directive (LED). The Commission…
Report: "Information Security within Digital Voting Assistance Tools," attached as an appendix to the evaluation of the Dutch Lower House elections of October 29, 2025.
"The purpose of this research is to identify the need for player data for independent research with social and/or scientific objectives in the field of gambling behavior. The…
WODC report: "Five Years of the WAMCA Act: An Evaluation of the Act on the Resolution of Mass Claims in Collective Actions (2020-2025)." "This evaluation examines how collective…
"Corporate Europe Observatory (CEO)", which describes itself as "a research group and advocacy organization dedicated to exposing and addressing the privileged access and…
"The research was structured around three main questions: (1) What is the legal framework in different European countries for collecting (online) data for the purpose of…
"The government recognizes the importance of protecting fundamental rights and appreciates that the Commission also gives attention to this issue. Nevertheless, the government has…
Planning for the SUWI work agenda. This section provides more information about the planning for legislative proposals concerning "careful data exchange (legal basis)" and…
Rathenau Institute, "The Price of Free Internet: Directions for Future Online Tracking Policy (2025)," including a letter from the Parliament responding to the report.
Amendment to the Implementing Act of the General Data Protection Regulation and several other laws, concerning the streamlining and updating of data protection law (Data…
A partial granting of a request under the Public Access of Information Act (Ministry of Finance) regarding the "policy situation" surrounding Transaction Monitoring Netherlands…
Rathenau Institute, The price of free internet. Directions for future online tracking policy (2025), including a Letter to Parliament responding thereto.
Amendment of the GDPR Implementation Act and several other laws in connection with the streamlining and updating of data protection law (Data Protection Omnibus Act); Memorandum…
A partial granting of a Woo decision (Ministry of Finance) regarding the 'policy situation' surrounding Transaction Monitoring Netherlands.
WODC report 'Five years of WAMCA. Evaluation of the Mass Damage Settlement in Collective Action Act (2020-2025)'. "This legislative evaluation examines how the collective action…
"The purpose of this study is to inventory the need for player data for independent research with a social and/or scientific objective in the field of gambling behavior. The…
"The research is structured around three main questions: (1) What is the legal framework in various European countries for the collection of (online) data for the purpose of the…
SUWI work agenda planning. This contains more information regarding the planning of legislative proposals for inspection 'careful data exchange (legal bases)' and proactive…
“The cabinet endorses the importance of the protection of fundamental rights and appreciates that the Commission is also paying attention to this. Nevertheless, the cabinet…
'This briefing analyses the establishment of the European Anti-Money Laundering Authority (AMLA) as a cornerstone of the EU’s 2024 Anti-Money Laundering/Countering the Financing…
'Corporate Europe Observatory (CEO)', which describes itself as "a research and action group committed to exposing and tackling the privileged access and influence enjoyed by…
Lawmakers in Washington are once again focusing on kids, screens, and mental health. But according to Congress, Big Tech is somehow both the problem and the solution. The Senate…
The Baton Rouge Police Department announced this week that it will begin using a drone designed by military equipment manufacturer Lockheed Martin and Edge Autonomy, making it one…