Data protection and digital regulation developments, collected automatically from 17+ sources.
Get this as an email digestThe European Ombudsman has found that the Commission disregarded important transparency rules while preparing the Europol Regulation, which is a part of the legislation to…
What has the EDRi network been up to over the past few weeks? Find out the latest digital rights news in our bi-weekly newsletter. In this edition: 2025 might be almost over, but…
As the instability in the US legal system becomes increasingly apparent and the US sends openly hostile signals toward the EU, it is time to reconsider where our data is being…
Data Transfers Most EU-US data transfers are based on the “Transatlantic Data Privacy Framework” (TAFPF) or so-called “Standard Contract Clauses” (SCCs). Both instruments rely on…
The European Commission has fined X for violating the Digital Services Act (DSA), proving that this groundbreaking European law can indeed have an effect. Despite political…
The European Commission took aim at X for breaking the DSA, proof that Europe’s landmark law can bite. Despite political pressure and corporate pushback, the EU is showing that…
Cookie Banners So-called ‘Pay or Okay’ systems are on the rise in Europe. Instead of giving users a choice to either accept or reject ad tracking, Pay or Okay systems require a…
Brussels, 4 December - During the last plenary meeting, the EDPB (European Data Protection Board) adopted recommendations on the legal basis for requiring the creation of user…
The ruling on the relationship between the European Data Protection Supervisor (EDPS) and the Single Resolution Board (SRB) touches upon the core of the fundamental right to data…
In light of the upcoming "Pay or Consent" guidelines from the EDPB (European Data Protection Board), noyb commissioned a study into user choice options.
The EDPS vs. Single Resolution Board judgment goes to the heart of the EU’s fundamental right to data protection, shaping how artificial intelligence, data spaces and so-called…
Brussels, 4 December - During its latest plenary, the EDPB adopted recommendations on the legal basis for requiring the creation of user accounts on e-commerce websites. In…
Brussels, 3 December - As part of its December’s plenary meeting, the European Data Protection Board (EDPB) held yesterday an online meeting with Commissioners and representatives…
Over the coming months, the Dutch Data Protection Authority (AP) will be conducting random inspections of healthcare providers, such as hospitals and primary care centers. The AP…
Brussels, 3 December - During the December plenary meeting, the European Data Protection Board (EDPB) yesterday held an online meeting with commissioners and representatives of…
In the coming months, the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) will conduct random inspections of healthcare providers, such as hospitals or general…
"Use cookies wisely." With this message, the Dutch Data Protection Authority (AP) is launching a three-week public awareness campaign, urging organizations to review their cookie…
“Handle cookies smartly.” With this message, the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) is starting a 3-week public campaign, calling on organisations to…
Brussels, 28 November - The EDPB has published a call for expressions of interest to establish a new reserve pool for the "Support Pool of Experts" (SPE) programme. The objective…
Brussels, 28 November - The EDPB launched a call for expression of interest to establish a new reserve list for the Support Pool of Experts (SPE) programme. The objective is set…
Cookie Banners Today, the French data protection authority CNIL has fined the French magazine publisher Conde Nast €750.000 for violating the consent requirements on its Vanity…
Artificial intelligence systems require a vast amount of human labor, carried out by millions of workers, often in countries in the Global South, under precarious conditions. In…
What has the EDRi network been up to in recent weeks? Discover the latest news on digital rights in our biweekly newsletter. In this edition: The “Digital Omnibus” curtails…
The European Commission's new "Digital Omnibus" is presented as a simple "simplification", but in practice, it undermines important safeguards in the GDPR, the ePrivacy rules, and…
AI systems involve a huge amount of human effort at the hands of millions of workers, often in Global South countries, working in precarious conditions. In this blog, EDRi member…
The European Commission’s new Digital Omnibus is presented as simple “streamlining”, but in practice it dismantles key safeguards in the GDPR, ePrivacy rules and the AI Act. It…
What has the EDRi network been up to over the past few weeks? Find out the latest digital rights news in our bi-weekly newsletter. In this edition: Digital Omnibus rolls back…
Age verification is a short-sighted, ineffective, and dangerous means of protecting young people from online risks. It is a disproportionate measure, especially since better…
Since September 2025, the General Data Protection Regulation (GDPR) has been in effect. This new European regulation aims to give consumers within the EU more control over the use…
Driven by Metamorphosis, a member of EDRi, e-Society.mk brings together top experts and decision-makers to discuss the future of the digital society. The article "e-Society.mk…
Age verification is a short-sighted, ineffective and dangerous way to protect young people form online harms. It is disproportionate when better alternatives are available,…
Powered by EDRi member Metamorphosis, e-Society.mk brings together top experts & decision makers to discuss the future of the e-society.
The Data Act has been in force since September 2025. This new European regulation is intended to give consumers within the EU more control over the use of their data. In the…
The noyb team has conducted an initial analysis of the "Digital Omnibus" proposal, focusing on the practical problems it creates for users and businesses.
GDPR Policy This week the "Digital Omnibus" came out. noyb is right now working on an in-dept written analysis that we hope to publish the next days. As a preview, we brought…
The Dutch Data Protection Authority (AP) has taken note of the official Omnibus proposal from the European Commission. The Commission states that it intends to amend various laws,…
The Dutch Data Protection Authority (Autoriteit Persoonsgegevens) has taken note of the European Commission's official Omnibus proposal. The Commission states that it intends to…
GDPR Policy This is a first reaction to a developing story. For any changes and/or updates to our statement, please re-check this page.Despite heavy criticism from civil society…
The government intends to use information available online about citizens for the purpose of oversight and enforcement. This involves collecting personal data through so-called…
The European Commission has published its proposal for the "Digital Omnibus". The planned amendments to the GDPR (General Data Protection Regulation) would reduce the protection…
Today, the European Commission published two proposals under the "Digital Omnibus," which reopen the debate on the EU's core protections against harm in the digital age. This step…
On November 19, the European Commission published two so-called "omnibus" proposals: one revising key elements of the General Data Protection Regulation (GDPR) and the ePrivacy…
On 19 November, the European Commission has published two Omnibus proposals: one that rewrites key parts of the General Data Protection Regulation (GDPR) and ePrivacy rules, along…
Today the European Commission has published two Digital Omnibus proposals, reopening the EU’s core protections against harm in the digital age. This step risks dismantling the…
The government intends to use online information about citizens for the purposes of supervision and enforcement. This involves the collection of personal data via so-called open…
The conference will discuss the Digital Services Act (DSA) and European regulations for online platforms, including the broader legal and political context, under the overarching…
The Political Tech Summit is organized by Partisan, a Berlin-based center for political professionals working at the intersection of technology, campaigning, and democracy.…
The Political Tech Summit is organised by Partisan, a Berlin-based hub for political professionals working at the intersection of tech, campaigning, and democracy. Through events,…
The conference will reflect on the DSA and European platform regulation, including in its broader legal and political context, under the overall theme of platform governance and…
Brussels, 17 November - The EDPB organises a remote event to collect stakeholders’ input on anonymisation and pseudonymisation on implications of the judgement of the Court of…
The European Parliament has approved the EU-Singapore digital trade agreement and rejected a motion to seek an opinion from the Court of Justice of the European Union regarding…
Brussels, 17 November - The EDPB is organising an online event to gather input from stakeholders on anonymisation and pseudonymisation, and on the implications of the judgment of…
The European Parliament has approved the EU–Singapore Digital Trade Agreement, rejecting a motion to seek a Court of Justice opinion on its legality. This decision weakens the…
Many organizations want to handle personal data responsibly, but they often find it difficult to properly implement privacy regulations in practice. Therefore, the European Data…
Many organizations wish to handle personal data carefully, but find it difficult in practice to apply privacy rules correctly. Therefore, the European Data Protection Board (EDPB)…
While the EU's AI Act aims to regulate high-risk AI systems, it is undermined by major loopholes that allow their unchecked use in the context of national security and law…
According to him, the Advocate General of the Court is assessing whether the French law regulating the collection of biometric data by the police complies with EU data protection…
What has the EDRi network been doing over the past few weeks? Discover the latest news on digital rights in our bi-weekly newsletter. In this edition: Halloween is over... but the…
In early October, the organization Bits of Freedom, which advocates for digital human rights, initiated legal proceedings against Meta. The organization demanded that Meta provide…
Although the EU's AI legislation aims to regulate high-risk AI systems, it is undermined by significant exemptions that allow for their unchecked application in the context of…
In his opinion, the Court’s Advocate General assesses the compliance of the French law regulating the collection of biometric data by police with EU data protection criteria.…
In early October, digital human rights organization Bits of Freedom took Meta to court. The organization demanded that Meta offers its users on in apps such as Instagram and…
What has the EDRi network been up to over the past few weeks? Find out the latest digital rights news in our bi-weekly newsletter. In this edition: Halloween is over… but digital…
GDPR Policy noyb has joined forces with EDRi and the Irish Council for Civil Liberties (ICCL) to send an open letter to the EU Commission. There are serious concerns about the…
Well-drafted data processing agreements between organizations help to effectively manage and, in some cases, even prevent cyberattacks. This strengthens the digital resilience of…
EDRi, ICCL, and noyb have sent a letter to the European Commission expressing their concerns regarding the proposed comprehensive reform.
Sound data processing agreements between organizations help to handle cyberattacks adequately, and sometimes even prevent them. In doing so, they strengthen the digital resilience…
The European Commission has secretly initiated a potentially far-reaching reform of the GDPR (General Data Protection Regulation). Noyb presents an initial overview of the…
GDPR Policy As gradually leaked the last days by various news outlets, the EU Commission has secretly set in motion a potentially massive reform of the GDPR. If internal drafts…
> How can PETs help with data protection compliance? At a glance • PETs can help you demonstrate a ‘data protection by design and by default’ approach to your processing. • PETs…
The results of a controlled experiment with Proctorio, an online exam proctoring system, show that the system is not effective in detecting fraud.
The results of a controlled experiment using Proctorio, an online proctoring system, show that it is ineffective at detecting cheating.
How can Privacy-Enhancing Technologies (PETs) contribute to compliance with privacy legislation? In brief: • PETs can help you demonstrate an approach where privacy protection is…
Georgetown University Law Center researchers propose that every IoT device manufacturer build a switch into their devices that disables any smart feature that contributes to…
DPC statement on LinkedIn AI Training
Brussels, 5 November - During its latest plenary, the EDPB adopted an opinion on the European Commission’s draft decision on the adequate level of protection of personal data in…
Brussels, November 5 - During its last plenary meeting, the EDPB (European Data Protection Board) issued an opinion on the European Commission's draft decision regarding the…
Brussels, November 5 - The European Data Protection Board (EDPB) is taking a significant step to assist organizations in complying with the GDPR (General Data Protection…
Brussels, 5 November - The European Data Protection Board (EDPB) is taking an important step towards facilitating GDPR compliance for organisations by developing a series of…
Most users want more control over their data – first cookie manager recognized in Germany
Biometric Data Today, noyb has filed a criminal complaint against Clearview AI and its managers. The facial recognition company is known for scraping billions of photos of…
Brussels, 20 October - During the last plenary meeting, the EDPB (European Data Protection Board) adopted two opinions on the draft decisions of the European Commission regarding…
Brussels, 20 October - During its latest plenary, the EDPB adopted two opinions on the European Commission’s draft decisions on the extension of the validity of the UK adequacy…
The Data Protection Commission and Coimisiún na Meán sign Cooperation Agreement and issue Joint Statement on Children
Brussels, 14 October - During the October plenary meeting, the European Data Protection Board (EDPB) selected the topic for its fifth coordinated enforcement action. This action…
Brussels, 14 October - During its October plenary, the European Data Protection Board (EDPB) picked the topic for its fifth coordinated enforcement action, which will concern…
Under section 6, "Social Media," it is proposed to establish a mandatory age limit for the use of social media. As an alternative, section 6a-ii suggests a measure identical to…
We are one step closer to the ratification of Treaty 108+! On September 30th, the Dutch House of Representatives approved the treaty, including the motion proposed by members…
This section briefly mentions the "Future of the BRP" (Basic Registry of Persons) project, which also focuses on: "The Future of the BRP provides functionalities to support data…
We are one step closer with the ratification of Convention 108+! On September 30th, the House of Representatives approved this, including the Motion by members Kathmann and White…
Under paragraph 6 'Social media', it is proposed to introduce a binding age limit for the use of social media, and as variant 6a-ii "Measure identical to measure 6a, with the…
This document briefly mentions the “Future BRP” (Basic Registration of Persons) project, which also focuses on: “Future BRP provides functionalities designed to minimize data and…
Brussels, October 10 - In anticipation of the planned commissioning of the EU Entry/Exit System (EES) on October 12, 2025, the Coordinating Supervisory Committee (CSC) will…
Brussels, 10 October - On the occasion of the upcoming entry into operation of the EU Entry Exit System (EES) on 12 October 2025, the Coordinated Supervision Committee (CSC) will…
Data Subject Rights The Austrian Data Protection Authority ("DSB") issued a decision finding that Microsoft 365 Education illegally tracks students and uses student data for…
Brussels, 9 October - The European Data Protection Board (EDPB) and the European Commission have approved joint guidelines on the interaction between the Digital Markets Act (DMA)…
Brussels, 09 October - The European Data Protection Board (EDPB) and the European Commission endorsed joint guidelines on the interplay between the Digital Markets Act (DMA) and…
BfDI Launches New Data Barometer – More Evidence for Effective Data Protection
Data Subject Rights Lithuania-based Whitebridge AI sells “reputation reports” on everyone with an online presence. These reports compile large amounts of scraped personal…
Credit Scoring noyb has scored a win in its complaint proceedings against the Austrian credit information agency KSV1870 and the energy provider Unsere Wasserkraft. The Austrian…
International Freedom of Information Day: Germany Needs More Transparency!
Credit Scoring Following an initiative by noyb, more than 2,400 affected individuals requested their data from the credit agency CRIF and have now received it. An evaluation by…
Annual Conference of the Digital Cluster Bonn
Decision to amend the "Decision on Notification Procedures and Data Processing in Shipping" in connection with the implementation of the Maritime National Single Window.
"Having carefully analysed the judgment in case C-383/23 [ILVA, AB], the EDPB considers that the Guidelines 4/2022, and in particular Section 6.2.1, align with this ruling, and…
National Administrative Procedures and DPA inactivity The GDPR has been inadequately enforced for years. Despite 3,813 complaints, there were only 62 fines in Austria in 2024.…
National Administrative Procedures and DPA inactivity According to reports in the Irish Times and RTE, Niamh Sweeney, a former senior Meta lobbyist, is set to join the Irish Data…
Forced Consent & Consent Bypass More than three years ago, noyb had filed a complaint against Google for sending unsolicited advertising emails directly to the inboxes of Gmail…
Data Transfers Press Release by the General CourtBackground. Philippe Latombe, a French member of parliament, brought an action for annulment of the EU-US data transfer agreement…