Data protection and digital regulation developments, collected automatically from 17+ sources.
Get this as an email digestBrussels, 3 December - As part of its December’s plenary meeting, the European Data Protection Board (EDPB) held yesterday an online meeting with Commissioners and representatives…
Over the coming months, the Dutch Data Protection Authority (AP) will be conducting random inspections of healthcare providers, such as hospitals and primary care centers. The AP…
Brussels, 3 December - During the December plenary meeting, the European Data Protection Board (EDPB) yesterday held an online meeting with commissioners and representatives of…
In the coming months, the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) will conduct random inspections of healthcare providers, such as hospitals or general…
"Use cookies wisely." With this message, the Dutch Data Protection Authority (AP) is launching a three-week public awareness campaign, urging organizations to review their cookie…
“Handle cookies smartly.” With this message, the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) is starting a 3-week public campaign, calling on organisations to…
Brussels, 28 November - The EDPB has published a call for expressions of interest to establish a new reserve pool for the "Support Pool of Experts" (SPE) programme. The objective…
Brussels, 28 November - The EDPB launched a call for expression of interest to establish a new reserve list for the Support Pool of Experts (SPE) programme. The objective is set…
Cookie Banners Today, the French data protection authority CNIL has fined the French magazine publisher Conde Nast €750.000 for violating the consent requirements on its Vanity…
Artificial intelligence systems require a vast amount of human labor, performed by millions of workers, often in countries in the Global South, under precarious conditions. In…
Artificial intelligence systems require a vast amount of human labor, carried out by millions of workers, often in countries in the Global South, under precarious conditions. In…
Wat heeft het EDRi-netwerk de afgelopen weken gedaan? Ontdek het laatste nieuws over digitale rechten in onze tweewekelijkse nieuwsbrief. In deze editie: De "Digital Omnibus"…
The European Commission's new "Digital Omnibus" is presented as a simple "simplification", but in practice, it undermines important safeguards in the GDPR, the ePrivacy rules, and…
AI systems involve a huge amount of human effort at the hands of millions of workers, often in Global South countries, working in precarious conditions. In this blog, EDRi member…
The European Commission’s new Digital Omnibus is presented as simple “streamlining”, but in practice it dismantles key safeguards in the GDPR, ePrivacy rules and the AI Act. It…
What has the EDRi network been up to over the past few weeks? Find out the latest digital rights news in our bi-weekly newsletter. In this edition: Digital Omnibus rolls back…
Since September 2025, the General Data Protection Regulation (GDPR) has been in effect. This new European regulation aims to give consumers within the EU more control over the use…
Driven by Metamorphosis, a member of EDRi, e-Society.mk brings together top experts and decision-makers to discuss the future of the digital society. The article "e-Society.mk…
Age verification is a short-sighted, ineffective, and dangerous means of protecting young people from online risks. It is a disproportionate measure, especially since better…
Age verification is a short-sighted, ineffective and dangerous way to protect young people form online harms. It is disproportionate when better alternatives are available,…
Powered by EDRi member Metamorphosis, e-Society.mk brings together top experts & decision makers to discuss the future of the e-society.
Sinds september 2025 is de Dataverordening van kracht. Deze nieuwe Europese regelgeving moet consumenten binnen de EU meer controle geven over het gebruik van hun data. In…
GDPR Policy This week the "Digital Omnibus" came out. noyb is right now working on an in-dept written analysis that we hope to publish the next days. As a preview, we brought…
The team at NOYB has conducted an initial analysis of the "Digital Omnibus" proposal, focusing on the practical problems it creates for users and businesses.
The noyb team has conducted an initial analysis of the "Digital Omnibus" proposal, focusing on the practical problems it creates for users and businesses.
The Dutch Data Protection Authority (AP) has taken note of the official Omnibus proposal from the European Commission. The Commission states that it intends to amend various laws,…
The Dutch Data Protection Authority (Autoriteit Persoonsgegevens) has taken note of the European Commission's official Omnibus proposal. The Commission states that it intends to…
GDPR Policy This is a first reaction to a developing story. For any changes and/or updates to our statement, please re-check this page.Despite heavy criticism from civil society…
The government intends to use information available online about citizens for the purpose of oversight and enforcement. This involves collecting personal data through so-called…
The European Commission has published its proposal for the "Digital Omnibus". The planned amendments to the GDPR (General Data Protection Regulation) would reduce the protection…
Today, the European Commission published two proposals under the "Digital Omnibus," which reopen the debate on the EU's core protections against harm in the digital age. This step…
On November 19, the European Commission published two so-called "omnibus" proposals: one revising key elements of the General Data Protection Regulation (GDPR) and the ePrivacy…
On 19 November, the European Commission has published two Omnibus proposals: one that rewrites key parts of the General Data Protection Regulation (GDPR) and ePrivacy rules, along…
Today the European Commission has published two Digital Omnibus proposals, reopening the EU’s core protections against harm in the digital age. This step risks dismantling the…
The government intends to use online information about citizens for the purposes of supervision and enforcement. This involves the collection of personal data via so-called open…
The conference will discuss the Digital Services Act (DSA) and European regulations for online platforms, including the broader legal and political context, under the overarching…
The Political Tech Summit is organized by Partisan, a Berlin-based center for political professionals working at the intersection of technology, campaigning, and democracy.…
The Political Tech Summit is organised by Partisan, a Berlin-based hub for political professionals working at the intersection of tech, campaigning, and democracy. Through events,…
The conference will reflect on the DSA and European platform regulation, including in its broader legal and political context, under the overall theme of platform governance and…
Brussels, 17 November - The EDPB organises a remote event to collect stakeholders’ input on anonymisation and pseudonymisation on implications of the judgement of the Court of…
The European Parliament has approved the EU-Singapore digital trade agreement and rejected a motion to seek an opinion from the Court of Justice of the European Union regarding…
Brussels, 17 November - The EDPB is organising an online event to gather input from stakeholders on anonymisation and pseudonymisation, and on the implications of the judgment of…
The European Parliament has approved the EU–Singapore Digital Trade Agreement, rejecting a motion to seek a Court of Justice opinion on its legality. This decision weakens the…
Many organizations want to handle personal data responsibly, but they often find it difficult to properly implement privacy regulations in practice. Therefore, the European Data…
Many organizations wish to handle personal data carefully, but find it difficult in practice to apply privacy rules correctly. Therefore, the European Data Protection Board (EDPB)…
While the EU's AI legislation aims to regulate high-risk AI systems, it is undermined by significant exceptions that allow for their uncontrolled application in the context of…
According to him, the Advocate General of the Court is assessing whether the French law regulating the collection of biometric data by the police complies with EU data protection…
What has the EDRi network been doing over the past few weeks? Discover the latest news on digital rights in our bi-weekly newsletter. In this edition: Halloween is over... but the…
In early October, the organization Bits of Freedom, which advocates for digital human rights, initiated legal proceedings against Meta. The organization demanded that Meta provide…
Although the EU's AI legislation aims to regulate high-risk AI systems, it is undermined by significant exemptions that allow for their unchecked application in the context of…
While the EU's AI Act aims to regulate high-risk AI systems, it is undermined by major loopholes that allow their unchecked use in the context of national security and law…
In his opinion, the Court’s Advocate General assesses the compliance of the French law regulating the collection of biometric data by police with EU data protection criteria.…
In early October, digital human rights organization Bits of Freedom took Meta to court. The organization demanded that Meta offers its users on in apps such as Instagram and…
What has the EDRi network been up to over the past few weeks? Find out the latest digital rights news in our bi-weekly newsletter. In this edition: Halloween is over… but digital…
GDPR Policy noyb has joined forces with EDRi and the Irish Council for Civil Liberties (ICCL) to send an open letter to the EU Commission. There are serious concerns about the…
Well-drafted data processing agreements between organizations help to effectively manage and, in some cases, even prevent cyberattacks. This strengthens the digital resilience of…
EDRi, ICCL, and noyb have sent a letter to the European Commission expressing their concerns about the proposed comprehensive reform.
EDRi, ICCL, and noyb have sent a letter to the European Commission expressing their concerns regarding the proposed comprehensive reform.
Sound data processing agreements between organizations help to handle cyberattacks adequately, and sometimes even prevent them. In doing so, they strengthen the digital resilience…
The European Commission has secretly initiated a potentially far-reaching reform of the GDPR (General Data Protection Regulation). Noyb presents an initial overview of the…
GDPR Policy As gradually leaked the last days by various news outlets, the EU Commission has secretly set in motion a potentially massive reform of the GDPR. If internal drafts…
> How can PETs help with data protection compliance? At a glance • PETs can help you demonstrate a ‘data protection by design and by default’ approach to your processing. • PETs…
The results of a controlled experiment with Proctorio, an online exam proctoring system, show that the system is not effective in detecting fraud.
The results of a controlled experiment using Proctorio, an online proctoring system, show that it is ineffective at detecting cheating.
How can Privacy-Enhancing Technologies (PETs) contribute to compliance with privacy legislation? In brief: • PETs can help you demonstrate an approach where privacy protection is…
Georgetown University Law Center researchers propose that every IoT device manufacturer build a switch into their devices that disables any smart feature that contributes to…
DPC statement on LinkedIn AI Training
Brussels, 5 November - During its latest plenary, the EDPB adopted an opinion on the European Commission’s draft decision on the adequate level of protection of personal data in…
Brussels, November 5th - During its latest plenary meeting, the EDPB (European Data Protection Board) issued an opinion on the draft decision by the European Commission regarding…
Brussels, November 5 - During its last plenary meeting, the EDPB (European Data Protection Board) issued an opinion on the European Commission's draft decision regarding the…
Brussels, November 5 - The European Data Protection Board (EDPB) is taking a significant step to assist organizations in complying with the GDPR (General Data Protection…
Brussels, 5 November - The European Data Protection Board (EDPB) is taking an important step towards facilitating GDPR compliance for organisations by developing a series of…
Mehrheit der Nutzerinnen und -nutzer wünscht sich mehr Kontrolle über ihre Daten – erster Cookie-Manager in Deutschland anerkannt
Biometric Data Today, noyb has filed a criminal complaint against Clearview AI and its managers. The facial recognition company is known for scraping billions of photos of…
Brussels, October 20th - During its latest plenary meeting, the EDPB (European Data Protection Board) adopted two opinions on the draft decisions of the European Commission…
Brussels, 20 October - During the last plenary meeting, the EDPB (European Data Protection Board) adopted two opinions on the draft decisions of the European Commission regarding…
Brussels, 20 October - During its latest plenary, the EDPB adopted two opinions on the European Commission’s draft decisions on the extension of the validity of the UK adequacy…
The Data Protection Commission and Coimisiún na Meán sign Cooperation Agreement and issue Joint Statement on Children
Brussels, 14 October - During its October plenary, the European Data Protection Board (EDPB) picked the topic for its fifth coordinated enforcement action, which will concern…
Brussels, October 14th - During its plenary meeting in October, the European Data Protection Board (EDPB) selected the topic for its fifth coordinated enforcement action. This…
Brussels, 14 October - During the October plenary meeting, the European Data Protection Board (EDPB) selected the topic for its fifth coordinated enforcement action. This action…
Under section 6, "Social Media," it is proposed to establish a mandatory age limit for the use of social media. As an alternative, section 6a-ii suggests a measure identical to…
We are one step closer to the ratification of Treaty 108+! On September 30th, the Dutch House of Representatives approved the treaty, including the motion proposed by members…
This section briefly mentions the "Future of the BRP" (Basic Registry of Persons) project, which also focuses on: "The Future of the BRP provides functionalities to support data…
We are one step closer with the ratification of Convention 108+! On September 30th, the House of Representatives approved this, including the Motion by members Kathmann and White…
Under paragraph 6 'Social media', it is proposed to introduce a binding age limit for the use of social media, and as variant 6a-ii "Measure identical to measure 6a, with the…
Hierin wordt kort genoemd het project 'Toekomst BRP' (Basisregistratie personen), waarbij ook wordt ingezet op : "Toekomst BRP levert functionaliteiten ten behoeve van…
Brussels, 10 October - On the occasion of the upcoming entry into operation of the EU Entry Exit System (EES) on 12 October 2025, the Coordinated Supervision Committee (CSC) will…
Brussels, October 10th - In preparation for the planned launch of the EU Entry/Exit System (EES) on October 12, 2025, the Coordinating Supervisory Committee (CSC) will integrate…
Brussels, October 10 - In anticipation of the planned commissioning of the EU Entry/Exit System (EES) on October 12, 2025, the Coordinating Supervisory Committee (CSC) will…
Data Subject Rights The Austrian Data Protection Authority ("DSB") issued a decision finding that Microsoft 365 Education illegally tracks students and uses student data for…
Brussels, 9 October - The European Data Protection Board (EDPB) and the European Commission have approved joint guidelines on the interaction between the Digital Markets Act (DMA)…
Brussels, 09 October - The European Data Protection Board (EDPB) and the European Commission endorsed joint guidelines on the interplay between the Digital Markets Act (DMA) and…
BfDI startet neues Datenbarometer – mehr Evidenz für wirksamen Datenschutz
Data Subject Rights Lithuania-based Whitebridge AI sells “reputation reports” on everyone with an online presence. These reports compile large amounts of scraped personal…
Credit Scoring noyb has scored a win in its complaint proceedings against the Austrian credit information agency KSV1870 and the energy provider Unsere Wasserkraft. The Austrian…
Internationaler Tag der Informationsfreiheit: Deutschland braucht mehr Transparenz!
Credit Scoring Following an initiative by noyb, more than 2,400 affected individuals requested their data from the credit agency CRIF and have now received it. An evaluation by…
Jahreskonferenz des Digital Cluster Bonn
Decision to amend the "Decision on Notification Procedures and Data Processing in Shipping" in connection with the implementation of the Maritime National Single Window.
"Having carefully analysed the judgment in case C-383/23 [ILVA, AB], the EDPB considers that the Guidelines 4/2022, and in particular Section 6.2.1, align with this ruling, and…
National Administrative Procedures and DPA inactivity The GDPR has been inadequately enforced for years. Despite 3,813 complaints, there were only 62 fines in Austria in 2024.…
National Administrative Procedures and DPA inactivity According to reports in the Irish Times and RTE, Niamh Sweeney, a former senior Meta lobbyist, is set to join the Irish Data…
Forced Consent & Consent Bypass More than three years ago, noyb had filed a complaint against Google for sending unsolicited advertising emails directly to the inboxes of Gmail…
Data Transfers Press Release by the General CourtBackground. Philippe Latombe, a French member of parliament, brought an action for annulment of the EU-US data transfer agreement…
The purpose of this study was to assess the transparency of personal data in thirteen specific public registers in relation to European data protection law, and to identify…
The AIVD (Dutch Intelligence and Security Service) and MIVD (Military Intelligence and Security Service) are also investigating, as part of the implementation of the Temporary…
Core Objective 24: "The student participates in the digital world" begins with: "The student uses digital systems, data, and protects the privacy of themselves and others in a…
The Secretary of State has informed the Parliament that, following the IBTD reflection report, the Tax Authority is developing a GDPR-compliant reporting process, improving its…