Data protection and digital regulation developments, collected automatically from 17+ sources.
Get this as an email digestBackground informationDate of final decision: 10 July 2025National caseController: Poste Vita s.p.a.Legal Reference(s): Article 5 (Principles relating to processing of personal…
Governments must not adopt emerging and powerful AI technologies without also adopting strong and clear safeguards to protect Constitutional rights, EFF Senior Policy Analyst Dr.…
President Trump’s highly politicized appointment of an entirely unqualified acting Director of National Intelligence (DNI) underscores why the government’s warrantless mass spying…
California lawmakers are again considering A.B. 412, a bill that would require AI developers to identify and disclose copyrighted works used to train generative AI systems. The…
The Dutch Data Protection Authority (Autoriteit Persoonsgegevens) noted that in supervisory practice, there is a need for a form of supervision that is more intensive than regular…
As of 1 July 2026, the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) will verify whether municipalities have included the deployment of scanning cars in their…
Background informationDate of final decision: 10 July 2025National caseController: Magna PT S.p.A.Legal Reference(s): Article 5 (Principles relating to processing of personal…
Background informationDate of final decision: 27 November 2025National caseController: Pioneer Hi-Bred Italia Sementi s.r.l.Legal Reference(s): Article 5 (Principles relating to…
Background informationDate of final decision: 18 December 2025National caseController: LTL S.p.A.Legal Reference(s): Article 5 (Principles relating to processing of personal…
Forced Consent & Consent Bypass Today, the Norwegian Consumer Council (Forbrukerrådet) and noyb have filed a complaint against the Norwegian news publisher Schibsted for…
The Dutch Data Protection Authority (Autoriteit Persoonsgegevens) has approved a protocol containing conditions for freight carriers, storage companies, and forwarders to refuse…
EFF is on the front lines of the fight against tech-enabled tyranny, but we aren't alone. Our team depends on your help to fight back against the surveillance state. JOIN EFF…
EFF welcomes our new Executive Director Nicole Ozer today! Nicole is a legal expert on privacy and surveillance, artificial intelligence, and digital speech who previously served…
ISS World Europe is an annual surveillance industry trade fair where the most invasive technologies for mass surveillance, data harvesting and tracking of individuals are traded…
After public outrage, California lawmakers are moving closer to exempting open-source operating systems from the sweeping age-bracketing regime mandated by last year’s Digital Age…
There is a debate in the Czech Republic over the use of facial recognition cameras in stadiums. Both clubs and politicians are calling for biometric surveillance after hundreds of…
In the rush to block young people from certain parts of the internet, lawmakers are creating a privacy and security nightmare for everyone. This scenario is already playing out…
What has the EDRi network been up to over the past few weeks? Find out the latest digital rights news in our bi-weekly newsletter. In this edition: May the force be with the…
Commercial spyware in Europe has recently made headlines with the now notorious names of Pegasus and Graphite, the expensive, exploitation-driven products at the top end of the…
The EU institutions have been engaged in a broad and wholesale digitalisation project but underneath the rhetoric of efficiency, modernisation, and citizen empowerment lies a more…
Connect with the global digital rights community at the monthly Digital Rights Social, hosted by Team CommUNITY on their virtual Mattermost platform
The European Data Protection Board (EDPB) has developed new guidelines on the use of personal data in scientific research. These are open for public consultation.
An EFF analysis of millions of searches of Flock Safety automated license plate reader (ALPR) data by police has uncovered a troubling pattern: in the absence of a warrant…
Yesterday, Access Now and ten other civil society organizations filed an amicus brief in the U.S.’ Ninth Circuit Court of Appeals calling to protect encryption from NSO Group’s…
Cookie Banners The Austrian Broadcasting Corporation (ORF) must amend its cookie banner on ORF.at to bring it into line with the GDPR. This has now been decided by the Federal…
A follow up to our open letter regarding Microsoft’s formal review of recent allegations about Israel’s usage of Azure cloud for the surveillance and targeting of Palestinians.
Through a new joint letter, we're calling on Microsoft to publish the findings of its review into the Israeli military’s use of the company services.
As of August 1, 2026, Geert Potjewijd will be the new chair of the board of the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). He succeeds Aleid Wolfsen, who has…
The Dutch Data Protection Authority (Autoriteit Persoonsgegevens) has imposed a fine of 100 million euros on MLU B.V. for transferring personal data to Russia. MLU is the company…
Data Subject Rights LinkedIn tracks the visits to profile pages. However, if you want to see who has visited your own profile, you have to pay. The Microsoft subsidiary uses these…
Here's where you can subscribe to the Access Now Express newsletter and action alerts.
National Administrative Procedures and DPA inactivity Today, noyb has filed a lawsuit against the Hamburg data protection authority (DPA). While the authority considers the…
The Link Between Disinformation and Privacy: Internet-driven disinformation and the use of social media pose a challenge that many policymakers are addressing
Each year sees an increase in the number of governments imposing internet shutdowns during national school exams. It's time to take action and demand change! #NoExamShutdown
European privacy regulators want the European Commission to examine the registration requirement imposed by the Israeli government on aid workers operating in Palestinian…
Data Subject Rights The most commonly exercised right under the GDPR is the right of access to one’s personal data that is being processed by companies. After all, it’s often the…
Data Subject Rights The French Data Protection Authority (CNIL) fined Criteo, a major online advertisement and tracking company in Europe, €40 million for violating the GDPR. This…
GDPR Policy Ever since the European Commission has published its Digital Omnibus proposal, discussions about the workload the GDPR creates for businesses in Europe have…
Letter to Parliament containing a request regarding the consideration and voting on the legislative proposal concerning the collection of biometric data of foreign nationals
Decision memo accompanying the letter to Parliament regarding the Amendment of the Primary Education Act, the Expertise Centres Act, the Secondary Education Act 2020, and the…
Amendment of the Housing Act 2014 and several other laws for the implementation of Regulation (EU) 2024/1028 on the collection and sharing of data relating to short-term rental…
“Decision on a request for information regarding contacts with the Public Prosecution Service (OM) and the exchange of information.” See also the Documents themselves and the List…
“The Data Protection Officers (DPOs) of the Ministry of Justice and Security (JenV) and of Asylum and Migration (AenM) have drafted the DPO DPIA Assessment Framework.”, see also…
“Decision on a request for all documents concerning the risks of doxing to social stability and the integrity of public administration. Specifically, the period from 1 January…
“The NVB is concerned about the exchange of data between supervisors entirely based on rules regarding the confidentiality of data and the exchange between supervisors, whereby,…
“In principle, the government views proposals that increase the reachability and accessibility of 112 positively. At the same time, the government has questions regarding the…
Request to the temporary committee on Fundamental Rights and Constitutional Review concerning the EU Omnibus and Digital Omnibus Regulations dated 25 February 2026
Letter to Parliament regarding the status of the implementation of the European Health Data Space. Do you only want the summary? If so, please read the decision memorandum.
Report Victim data in criminal case files
“Privacy Enhancing Technologies (PETs) offer great opportunities for secure data sharing, but their broad adoption in the Dutch market lags behind despite a strong starting…
Report by the Inspectorate of Justice and Security entitled ‘Risky Use of Algorithms’, an investigation into the use of algorithms within the probation service. Read and shudder.
This may not be the most appropriate place, but the Meijers Commission has also published a commentary on the EU Commission's Digital Omnibus proposal.
Meanwhile, a study titled ‘A Digital Omnibus: Identifying Interlinks and Possible Overlaps Between Different Legal Acts in the Field of Digital Legislation to Streamline Tech…
Officially, the Council has yet to establish its own position on the Digital Omnibus, but Euractiv has published a leaked version. The amendment to the definition of personal data…
GDPR Policy On 19 November 2025, the European Commission published its proposal for the "Digital Omnibus", subsequently sparking significant criticism and opposition. noyb…
Orbán-linked AI deepfakes are flooding social media despite the EU’s efforts to increase transparency regarding the Facebook ad ban
The Frontline Service is hiring!
The APD is hiring a Dutch-speaking ICT help desk manager
Risks Associated with AI-Generated Images: The APD Signs a Joint Statement
The AEPD Updates Its FAQs to Strengthen Support for SMEs and Privacy Professionals
In 2025, the AEPD received more than 2,700 notifications of personal data breaches
The AEPD has published a list of ten recommendations for protecting privacy when using AI tools
AI and data protection experts gathered in Barcelona advocate for strategies to balance technological development with the protection of fundamental rights
The AEPD issues a warning to the company behind the World project as it resumes operations in Spain
The Agency Launches a Registry of Groups of Excellence in Research on Privacy, Data Protection, and Emerging Technologies
The Agency publishes guidelines on agentic artificial intelligence from a data protection perspective
Results of the European initiative that analyzed how data controllers have handled the exercise of the right to erasure
February 24
February 17
Events on February 10 All events on February 10
February 3
Across Europe, governments are moving quickly to harness the potential of artificial intelligence. National strategies are being announced, innovation hubs funded, and pilot…
In today's edition: Council deletes GDPR changes, EU-US biometrics deal ajar to automated decisions
Distribution System Operators (DSOs) are emerging as key resilience actors. By integrating renewables, strengthening cybersecurity, adapting to climate risks and enabling…
Brussels, 23 February - EDPB Chair Anu Talus has signed a Joint Statement on AI-Generated Imagery and the Protection of Privacy on behalf of the EDPB. The statement, coordinated…
DPC welcomes publication of EDPB CEF implementation report on right to be forgotten
The EDPB's upcoming updated guidelines on pseudonymisation are also given more prominence in a compromise text, obtained by Euractiv
It is still unclear how the new system would work under the existing complex array of EU data protection rules
We urgently demand the government of Gabon to immediately reverse orders to shut down social media indefinitely in the country. The order is in gross violation of national and…
We recently introduced a policy governing large language model (LLM) assisted contributions to EFF's open-source projects. At EFF, we strive to produce high quality software…
In today's edition: Spain's AI 'pornification' ban push, MEP questions US biometrics talks, DNA priorities
The move to simplify data centre efficiency reporting comes despite estimates suggesting that 75% to 85% of servers sit idle at any one time
In the third part of our blog series on the dodgy digital security practices underlying advanced AI tools, we look at how the availability of systems is impacted by the…
Brussels, 18 February - The European Data Protection Board (EDPB) has adopted a report on its Coordinated Enforcement Framework (CEF) action on the right to be forgotten (Art.17…
Wisconsin’s S.B. 130 / A.B. 105 is a spectacularly bad idea. It’s an age-verification bill that effectively bans VPN access to certain websites for Wisconsinites and censors…
EDRi is deeply concerned that the European Commission’s current plans to amend the Better Regulation framework will lead to worse lawmaking, not better. In its submission to the…
A study published by EDRi member Asociația pentru Tehnologie și Internet (ApTI) Romania analysed how the recommender algorithms on Facebook, Instagram and TikTok distributed…
The DSA Human Rights Alliance has released 'Principles for a Human Rights-Centred Application of the Digital Services Act: A Global Perspective' to guide the European Commission,…
On 3 February 2026, the United States House Committee on the Judiciary launched a report in which EDRi member Bits of Freedom and Justice for Prosperity, among others, are called…
EDRi submitted a response to the EU’s new open source digital strategy. We argue that free and open source software is not a niche technical choice, but a strategic foundation for…
The Czech Supreme Court has ruled that the legal regulation of blanket collection of electronic communications data (known as data retention) violates European Union law in a…
What has the EDRi network been up to over the past few weeks? Find out the latest digital rights news in our bi-weekly newsletter. In this edition: A competitiveness feast with…
As part of a coordinated effort at the European level, the CNIL conducted a series of inspections of organizations in 2025 to verify compliance with the right to erasure.
(This appeared as an op-ed published February 12, 2026 in the San Jose Spotlight, written by Huy Tran (SIREN), Jeffrey Wang (CAIR-SFBA), and Jennifer Pinsof.) As ICE and other…
Data Protection Commission opens investigation into X (XIUC)
The inquiry concerns potential breaches of the bloc’s General Data Protection Regulation
Culture Commissioner Glenn Micallef warns AI is one of the main threats to the sector's working conditions
In today's edition: Parliament blocks AI features, MEPs meet MAGA committee amid censorship attacks
A draft of the Industrial Accelerator Act, obtained by Euractiv, seeks to funnel public support to homegrown companies in tech sectors including AI, chips and space
Elon Musk's Grok AI tool has channeled most of the controversy and regulatory scrutiny over sexualised deepfakes but Spain's PM eyes a wider net
The Commission will investigate Shein over concerns about illegal products, addictive features and recommender transparency under the Digital Services Act
The EDPS reiterates its call to include additional safeguards against indiscriminate chat scanning in the planned extension of the temporary rules
The deal strengthens efforts to build end-to-end model deployment capabilities
Court of Appeal tells X to hand over public data to two German-based civil society groups which are researching election risks under the EU's Digital Services Act
Report from EFF, Center for Just Journalism, and IPVM Helps Cut Through Sales HypeSAN FRANCISCO — A new report released today offers journalists tips on cutting through the sales…
The CNIL and EHESS are organizing an award dedicated to the humanities and social sciences as part of Privacy Research Day, on June 24, 2026, in Paris. A multidisciplinary jury…
An email sent to lawmakers, seen by Euractiv, shows the Parliament worried about how much data goes to AI companies
Under the Data (Use and Access) Act, organisations must have a process for handling data protection complaints within their organisation
In today's edition: Omnibus boosts AI Office, a map of social media bans, and how to open Gemini
"The new measures announced today include a crackdown on vile illegal content created by AI," UK Prime Minister Keir Starmer said on Monday
Bharat Mandapam The India AI Impact Summit 2026 is a high-profile international event involving heads of state and government, ministers, senior government officials,…
The New York Times reported that Meta is considering adding face recognition technology to its smart glasses. According to an internal Meta document, the company may launch the…
In today's edition: EU Five Eyes, Dutch AI agnt warning, far-right vs EU space security, UK fines Kick
Second compromise text for the AI simplification package, obtained by Euractiv, details beefed up inspection powers
Existing data protection laws fail to address key vulnerabilities in computerized vehicles
Brussels, 13 February - The EDPB has recently adopted its work programme for 2026-2027, which is grounded in the four pillars of the EDPB strategy 2024-2027. The work programme is…
In the second part of our series on the dodgy digital security practices underlying advanced AI tools, we examine how LLMs threaten information integrity.