Data protection and digital regulation developments, collected automatically from 17+ sources.
Get this as an email digestIn a voice vote earlier this week, the House of Representatives passed H.R. 6028, the “Legislative Branch Agencies Clarification Act.” The legislation is presented as a technical…
Brussels, 10 June – During its latest plenary, the EDPB met with Michael McGrath, Commissioner for Democracy, Justice, the Rule of Law and Consumer Protection. In addition, the…
Credit Scoring CRIF is one of the largest credit reference agencies in Austria. It has built up a largely unknown "shadow registry" containing the names, dates of birth and…
The Senate Judiciary Committee is set to consider and vote on the Nurture Originals, Foster Art, and Keep Entertainment Safe Act (NO FAKES). Instead of targeting the real privacy…
Several U.S. states are pushing to ban young people from social media entirely. This marks the latest wave of censorship bills masquerading as “children’s online safety” measures,…
Just days after a damning WIRED report exposed that Meta had quietly embedded facial recognition technology (FRT) code into millions of phones, the tech giant has quietly…
On a warm June evening in San Francisco, attorneys and other legally-minded friends of EFF gathered for our 18th Annual Cyberlaw Trivia Night, an annual test of tech-related legal…
The Dutch Data Protection Authority (AP) received over 13,500 complaints and tips regarding potential violations of privacy legislation in 2025. The number of complaints rose by…
Last year during LGBTQ+ Pride month, we launched an LGBT Q&A where we answered your most pressing digital rights questions on EFF’s Instagram and TikTok accounts. Ahead of LGBT…
The internet is an essential resource for young people and adults to access information, explore community, and find themselves—both inside countries and across continents. Yet…
Background informationDate of final decision: 10 July 2025National caseController: Magna PT S.p.A.Legal Reference(s): Article 5 (Principles relating to processing of personal…
Update, June 8, 2026: Following widespread public scrutiny and WIRED’s critical reporting, Meta has stripped the unactivated facial recognition code from its latest Meta AI app…
Governments must not adopt emerging and powerful AI technologies without also adopting strong and clear safeguards to protect Constitutional rights, EFF Senior Policy Analyst Dr.…
President Trump’s highly politicized appointment of an entirely unqualified acting Director of National Intelligence (DNI) underscores why the government’s warrantless mass spying…
California lawmakers are again considering A.B. 412, a bill that would require AI developers to identify and disclose copyrighted works used to train generative AI systems. The…
The Dutch Data Protection Authority (Autoriteit Persoonsgegevens) noted that in supervisory practice, there is a need for a form of supervision that is more intensive than regular…
As of 1 July 2026, the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) will verify whether municipalities have included the deployment of scanning cars in their…
Background informationDate of final decision: 27 November 2025National caseController: Pioneer Hi-Bred Italia Sementi s.r.l.Legal Reference(s): Article 5 (Principles relating to…
Background informationDate of final decision: 10 July 2025National caseController: Poste Vita s.p.a.Legal Reference(s): Article 5 (Principles relating to processing of personal…
Background informationDate of final decision: 18 December 2025National caseController: LTL S.p.A.Legal Reference(s): Article 5 (Principles relating to processing of personal…
Forced Consent & Consent Bypass Today, the Norwegian Consumer Council (Forbrukerrådet) and noyb have filed a complaint against the Norwegian news publisher Schibsted for…
The Dutch Data Protection Authority (Autoriteit Persoonsgegevens) has approved a protocol containing conditions for freight carriers, storage companies, and forwarders to refuse…
EFF is on the front lines of the fight against tech-enabled tyranny, but we aren't alone. Our team depends on your help to fight back against the surveillance state. JOIN EFF…
EFF welcomes our new Executive Director Nicole Ozer today! Nicole is a legal expert on privacy and surveillance, artificial intelligence, and digital speech who previously served…
ISS World Europe is an annual surveillance industry trade fair where the most invasive technologies for mass surveillance, data harvesting and tracking of individuals are traded…
After public outrage, California lawmakers are moving closer to exempting open-source operating systems from the sweeping age-bracketing regime mandated by last year’s Digital Age…
In the rush to block young people from certain parts of the internet, lawmakers are creating a privacy and security nightmare for everyone. This scenario is already playing out…
What has the EDRi network been up to over the past few weeks? Find out the latest digital rights news in our bi-weekly newsletter. In this edition: May the force be with the…
Commercial spyware in Europe has recently made headlines with the now notorious names of Pegasus and Graphite, the expensive, exploitation-driven products at the top end of the…
There is a debate in the Czech Republic over the use of facial recognition cameras in stadiums. Both clubs and politicians are calling for biometric surveillance after hundreds of…
The EU institutions have been engaged in a broad and wholesale digitalisation project but underneath the rhetoric of efficiency, modernisation, and citizen empowerment lies a more…
Connect with the global digital rights community at the monthly Digital Rights Social, hosted by Team CommUNITY on their virtual Mattermost platform
The European Data Protection Board (EDPB) has developed new guidelines on the use of personal data in scientific research. These are open for public consultation.
An EFF analysis of millions of searches of Flock Safety automated license plate reader (ALPR) data by police has uncovered a troubling pattern: in the absence of a warrant…
Yesterday, Access Now and ten other civil society organizations filed an amicus brief in the U.S.’ Ninth Circuit Court of Appeals calling to protect encryption from NSO Group’s…
Cookie Banners The Austrian Broadcasting Corporation (ORF) must amend its cookie banner on ORF.at to bring it into line with the GDPR. This has now been decided by the Federal…
A follow up to our open letter regarding Microsoft’s formal review of recent allegations about Israel’s usage of Azure cloud for the surveillance and targeting of Palestinians.
Through a new joint letter, we're calling on Microsoft to publish the findings of its review into the Israeli military’s use of the company services.
As of August 1, 2026, Geert Potjewijd will be the new chair of the board of the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). He succeeds Aleid Wolfsen, who has…
The Dutch Data Protection Authority (Autoriteit Persoonsgegevens) has imposed a fine of 100 million euros on MLU B.V. for transferring personal data to Russia. MLU is the company…
Data Subject Rights LinkedIn tracks the visits to profile pages. However, if you want to see who has visited your own profile, you have to pay. The Microsoft subsidiary uses these…
Here's where you can subscribe to the Access Now Express newsletter and action alerts.
National Administrative Procedures and DPA inactivity Today, noyb has filed a lawsuit against the Hamburg data protection authority (DPA). While the authority considers the…
El vínculo entre la desinformación y la privacidad La desinformación impulsada por internet y el uso de las redes sociales supone un desafío que muchos hacedores de políticas…
Each year sees an increase in the number of governments imposing internet shutdowns during national school exams. It's time to take action and demand change! #NoExamShutdown
European privacy regulators want the European Commission to examine the registration requirement imposed by the Israeli government on aid workers operating in Palestinian…
Data Subject Rights The most commonly exercised right under the GDPR is the right of access to one’s personal data that is being processed by companies. After all, it’s often the…
Data Subject Rights The French Data Protection Authority (CNIL) fined Criteo, a major online advertisement and tracking company in Europe, €40 million for violating the GDPR. This…
GDPR Policy Ever since the European Commission has published its Digital Omnibus proposal, discussions about the workload the GDPR creates for businesses in Europe have…
“The Data Protection Officers (DPOs) of the Ministry of Justice and Security (JenV) and of Asylum and Migration (AenM) have drafted the DPO DPIA Assessment Framework.”, see also…
Decision memo accompanying the letter to Parliament regarding the Amendment of the Primary Education Act, the Expertise Centres Act, the Secondary Education Act 2020, and the…
Amendment of the Housing Act 2014 and several other laws for the implementation of Regulation (EU) 2024/1028 on the collection and sharing of data relating to short-term rental…
Letter to Parliament containing a request regarding the consideration and voting on the legislative proposal concerning the collection of biometric data of foreign nationals
“Decision on a request for information regarding contacts with the Public Prosecution Service (OM) and the exchange of information.” See also the Documents themselves and the List…
“Decision on a request for all documents concerning the risks of doxing to social stability and the integrity of public administration. Specifically, the period from 1 January…
“The NVB is concerned about the exchange of data between supervisors entirely based on rules regarding the confidentiality of data and the exchange between supervisors, whereby,…
“In principle, the government views proposals that increase the reachability and accessibility of 112 positively. At the same time, the government has questions regarding the…
Request to the temporary committee on Fundamental Rights and Constitutional Review concerning the EU Omnibus and Digital Omnibus Regulations dated 25 February 2026
Letter to Parliament regarding the status of the implementation of the European Health Data Space. Do you only want the summary? If so, please read the decision memorandum.
Report Victim data in criminal case files
“Privacy Enhancing Technologies (PETs) offer great opportunities for secure data sharing, but their broad adoption in the Dutch market lags behind despite a strong starting…
Report by the Inspectorate of Justice and Security entitled ‘Risky Use of Algorithms’, an investigation into the use of algorithms within the probation service. Read and shudder.
This may not be the most appropriate place, but the Meijers Commission has also published a commentary on the EU Commission's Digital Omnibus proposal.
Meanwhile, a study titled ‘A Digital Omnibus: Identifying Interlinks and Possible Overlaps Between Different Legal Acts in the Field of Digital Legislation to Streamline Tech…
Officially, the Council has yet to establish its own position on the Digital Omnibus, but Euractiv has published a leaked version. The amendment to the definition of personal data…
GDPR Policy On 19 November 2025, the European Commission published its proposal for the "Digital Omnibus", subsequently sparking significant criticism and opposition. noyb…
Brussels, 23 February - EDPB Chair Anu Talus has signed a Joint Statement on AI-Generated Imagery and the Protection of Privacy on behalf of the EDPB. The statement, coordinated…
Le Service de première ligne recrute !
L'APD recrute un responsable helpdesk ICT néerlandophone
Risques liés aux images générées par l'IA : l’APD signe une déclaration commune
La AEPD renueva sus preguntas frecuentes para reforzar el apoyo a pymes y profesionales de la privacidad
La AEPD recibió en 2025 más de 2.700 notificaciones de brechas de datos personales
La AEPD publica un decálogo con recomendaciones para proteger la privacidad al usar herramientas de IA
Expertos en IA y protección de datos reunidos en Barcelona defienden estrategias para aunar el desarrollo tecnológico y la garantía de los derechos fundamentales
La AEPD emite una advertencia a la empresa del proyecto World ante el reinicio de su actividad en España
La Agencia lanza un Registro de Grupos de excelencia en investigación sobre privacidad, protección de datos y tecnologías emergentes
La Agencia publica unas orientaciones sobre Inteligencia Artificial agéntica desde la perspectiva de protección de datos
Resultados de la acción europea que ha analizado la atención del ejercicio del derecho de supresión por parte de los responsables
24. Februar
17. Februar
Termine am 10. Februar Alle Termine am 10. Februar
03. Februar
Across Europe, governments are moving quickly to harness the potential of artificial intelligence. National strategies are being announced, innovation hubs funded, and pilot…
Orbán-linked AI deepfakes flood social media despite EU attempts to boost transparency of Facebook ad ban
In today's edition: Council deletes GDPR changes, EU-US biometrics deal ajar to automated decisions
Distribution System Operators (DSOs) are emerging as key resilience actors. By integrating renewables, strengthening cybersecurity, adapting to climate risks and enabling…
DPC welcomes publication of EDPB CEF implementation report on right to be forgotten
The EDPB's upcoming updated guidelines on pseudonymisation are also given more prominence in a compromise text, obtained by Euractiv
It is still unclear how the new system would work under the existing complex array of EU data protection rules
We urgently demand the government of Gabon to immediately reverse orders to shut down social media indefinitely in the country. The order is in gross violation of national and…
We recently introduced a policy governing large language model (LLM) assisted contributions to EFF's open-source projects. At EFF, we strive to produce high quality software…
In today's edition: Spain's AI 'pornification' ban push, MEP questions US biometrics talks, DNA priorities
The move to simplify data centre efficiency reporting comes despite estimates suggesting that 75% to 85% of servers sit idle at any one time
In the third part of our blog series on the dodgy digital security practices underlying advanced AI tools, we look at how the availability of systems is impacted by the…
Brussels, 18 February - The European Data Protection Board (EDPB) has adopted a report on its Coordinated Enforcement Framework (CEF) action on the right to be forgotten (Art.17…
Wisconsin’s S.B. 130 / A.B. 105 is a spectacularly bad idea. It’s an age-verification bill that effectively bans VPN access to certain websites for Wisconsinites and censors…
EDRi is deeply concerned that the European Commission’s current plans to amend the Better Regulation framework will lead to worse lawmaking, not better. In its submission to the…
A study published by EDRi member Asociația pentru Tehnologie și Internet (ApTI) Romania analysed how the recommender algorithms on Facebook, Instagram and TikTok distributed…
The DSA Human Rights Alliance has released 'Principles for a Human Rights-Centred Application of the Digital Services Act: A Global Perspective' to guide the European Commission,…
On 3 February 2026, the United States House Committee on the Judiciary launched a report in which EDRi member Bits of Freedom and Justice for Prosperity, among others, are called…
EDRi submitted a response to the EU’s new open source digital strategy. We argue that free and open source software is not a niche technical choice, but a strategic foundation for…
The Czech Supreme Court has ruled that the legal regulation of blanket collection of electronic communications data (known as data retention) violates European Union law in a…
What has the EDRi network been up to over the past few weeks? Find out the latest digital rights news in our bi-weekly newsletter. In this edition: A competitiveness feast with…
Dans le cadre d’une action coordonnée au niveau européen, la CNIL a mené en 2025 une série de contrôles d’organismes pour vérifier la mise en œuvre du droit à l’effacement.
Court of Appeal tells X to hand over public data to two German-based civil society groups which are researching election risks under the EU's Digital Services Act
Data Protection Commission opens investigation into X (XIUC)
(This appeared as an op-ed published February 12, 2026 in the San Jose Spotlight, written by Huy Tran (SIREN), Jeffrey Wang (CAIR-SFBA), and Jennifer Pinsof.) As ICE and other…
The inquiry concerns potential breaches of the bloc’s General Data Protection Regulation
Culture Commissioner Glenn Micallef warns AI is one of the main threats to the sector's working conditions
In today's edition: Parliament blocks AI features, MEPs meet MAGA committee amid censorship attacks
A draft of the Industrial Accelerator Act, obtained by Euractiv, seeks to funnel public support to homegrown companies in tech sectors including AI, chips and space
Elon Musk's Grok AI tool has channeled most of the controversy and regulatory scrutiny over sexualised deepfakes but Spain's PM eyes a wider net
The Commission will investigate Shein over concerns about illegal products, addictive features and recommender transparency under the Digital Services Act
The EDPS renews its call to add extra safeguards against indiscriminate chat-scanning in planned extension to temporary rules
Deal strengthens efforts to build end-to-end model deployment capacity
Report from EFF, Center for Just Journalism, and IPVM Helps Cut Through Sales HypeSAN FRANCISCO — A new report released today offers journalists tips on cutting through the sales…
La CNIL et l’EHESS organisent un prix dédié aux sciences humaines et sociales en marge du Privacy Research Day, le 24 juin 2026 à Paris. Un jury pluridisciplinaire…