Data protection and digital regulation developments, collected automatically from 17+ sources.
Get this as an email digestThe Data Act has been in force since September 2025. This new European regulation is intended to give consumers within the EU more control over the use of their data. In the…
Age verification is a short-sighted, ineffective and dangerous way to protect young people form online harms. It is disproportionate when better alternatives are available,…
Powered by EDRi member Metamorphosis, e-Society.mk brings together top experts & decision makers to discuss the future of the e-society.
The noyb team has conducted an initial analysis of the "Digital Omnibus" proposal, focusing on the practical problems it creates for users and businesses.
GDPR Policy This week the "Digital Omnibus" came out. noyb is right now working on an in-dept written analysis that we hope to publish the next days. As a preview, we brought…
The Dutch Data Protection Authority (AP) has taken note of the official Omnibus proposal from the European Commission. The Commission states that it intends to amend various laws,…
The Dutch Data Protection Authority (Autoriteit Persoonsgegevens) has taken note of the European Commission's official Omnibus proposal. The Commission states that it intends to…
GDPR Policy This is a first reaction to a developing story. For any changes and/or updates to our statement, please re-check this page.Despite heavy criticism from civil society…
The government intends to use information available online about citizens for the purpose of oversight and enforcement. This involves collecting personal data through so-called…
The European Commission has published its proposal for the "Digital Omnibus". The planned amendments to the GDPR (General Data Protection Regulation) would reduce the protection…
Today, the European Commission published two proposals under the "Digital Omnibus," which reopen the debate on the EU's core protections against harm in the digital age. This step…
On November 19, the European Commission published two so-called "omnibus" proposals: one revising key elements of the General Data Protection Regulation (GDPR) and the ePrivacy…
On 19 November, the European Commission has published two Omnibus proposals: one that rewrites key parts of the General Data Protection Regulation (GDPR) and ePrivacy rules, along…
Today the European Commission has published two Digital Omnibus proposals, reopening the EU’s core protections against harm in the digital age. This step risks dismantling the…
The government intends to use online information about citizens for the purposes of supervision and enforcement. This involves the collection of personal data via so-called open…
The conference will discuss the Digital Services Act (DSA) and European regulations for online platforms, including the broader legal and political context, under the overarching…
The Political Tech Summit is organized by Partisan, a Berlin-based center for political professionals working at the intersection of technology, campaigning, and democracy.…
The Political Tech Summit is organised by Partisan, a Berlin-based hub for political professionals working at the intersection of tech, campaigning, and democracy. Through events,…
The conference will reflect on the DSA and European platform regulation, including in its broader legal and political context, under the overall theme of platform governance and…
Brussels, 17 November - The EDPB organises a remote event to collect stakeholders’ input on anonymisation and pseudonymisation on implications of the judgement of the Court of…
The European Parliament has approved the EU-Singapore digital trade agreement and rejected a motion to seek an opinion from the Court of Justice of the European Union regarding…
Brussels, 17 November - The EDPB is organising an online event to gather input from stakeholders on anonymisation and pseudonymisation, and on the implications of the judgment of…
The European Parliament has approved the EU–Singapore Digital Trade Agreement, rejecting a motion to seek a Court of Justice opinion on its legality. This decision weakens the…
Many organizations want to handle personal data responsibly, but they often find it difficult to properly implement privacy regulations in practice. Therefore, the European Data…
Many organizations wish to handle personal data carefully, but find it difficult in practice to apply privacy rules correctly. Therefore, the European Data Protection Board (EDPB)…
While the EU's AI Act aims to regulate high-risk AI systems, it is undermined by major loopholes that allow their unchecked use in the context of national security and law…
According to him, the Advocate General of the Court is assessing whether the French law regulating the collection of biometric data by the police complies with EU data protection…
What has the EDRi network been doing over the past few weeks? Discover the latest news on digital rights in our bi-weekly newsletter. In this edition: Halloween is over... but the…
In early October, the organization Bits of Freedom, which advocates for digital human rights, initiated legal proceedings against Meta. The organization demanded that Meta provide…
Although the EU's AI legislation aims to regulate high-risk AI systems, it is undermined by significant exemptions that allow for their unchecked application in the context of…
In his opinion, the Court’s Advocate General assesses the compliance of the French law regulating the collection of biometric data by police with EU data protection criteria.…
In early October, digital human rights organization Bits of Freedom took Meta to court. The organization demanded that Meta offers its users on in apps such as Instagram and…
What has the EDRi network been up to over the past few weeks? Find out the latest digital rights news in our bi-weekly newsletter. In this edition: Halloween is over… but digital…
GDPR Policy noyb has joined forces with EDRi and the Irish Council for Civil Liberties (ICCL) to send an open letter to the EU Commission. There are serious concerns about the…
Well-drafted data processing agreements between organizations help to effectively manage and, in some cases, even prevent cyberattacks. This strengthens the digital resilience of…
EDRi, ICCL, and noyb have sent a letter to the European Commission expressing their concerns regarding the proposed comprehensive reform.
Sound data processing agreements between organizations help to handle cyberattacks adequately, and sometimes even prevent them. In doing so, they strengthen the digital resilience…
The European Commission has secretly initiated a potentially far-reaching reform of the GDPR (General Data Protection Regulation). Noyb presents an initial overview of the…
GDPR Policy As gradually leaked the last days by various news outlets, the EU Commission has secretly set in motion a potentially massive reform of the GDPR. If internal drafts…
> How can PETs help with data protection compliance? At a glance • PETs can help you demonstrate a ‘data protection by design and by default’ approach to your processing. • PETs…
The results of a controlled experiment with Proctorio, an online exam proctoring system, show that the system is not effective in detecting fraud.
The results of a controlled experiment using Proctorio, an online proctoring system, show that it is ineffective at detecting cheating.
How can Privacy-Enhancing Technologies (PETs) contribute to compliance with privacy legislation? In brief: • PETs can help you demonstrate an approach where privacy protection is…
Georgetown University Law Center researchers propose that every IoT device manufacturer build a switch into their devices that disables any smart feature that contributes to…
DPC statement on LinkedIn AI Training
Brussels, 5 November - During its latest plenary, the EDPB adopted an opinion on the European Commission’s draft decision on the adequate level of protection of personal data in…
Brussels, November 5 - During its last plenary meeting, the EDPB (European Data Protection Board) issued an opinion on the European Commission's draft decision regarding the…
Brussels, November 5 - The European Data Protection Board (EDPB) is taking a significant step to assist organizations in complying with the GDPR (General Data Protection…
Brussels, 5 November - The European Data Protection Board (EDPB) is taking an important step towards facilitating GDPR compliance for organisations by developing a series of…
Most users want more control over their data – first cookie manager recognized in Germany
Biometric Data Today, noyb has filed a criminal complaint against Clearview AI and its managers. The facial recognition company is known for scraping billions of photos of…
Brussels, 20 October - During the last plenary meeting, the EDPB (European Data Protection Board) adopted two opinions on the draft decisions of the European Commission regarding…
Brussels, 20 October - During its latest plenary, the EDPB adopted two opinions on the European Commission’s draft decisions on the extension of the validity of the UK adequacy…
The Data Protection Commission and Coimisiún na Meán sign Cooperation Agreement and issue Joint Statement on Children
Brussels, 14 October - During the October plenary meeting, the European Data Protection Board (EDPB) selected the topic for its fifth coordinated enforcement action. This action…
Brussels, 14 October - During its October plenary, the European Data Protection Board (EDPB) picked the topic for its fifth coordinated enforcement action, which will concern…
Under section 6, "Social Media," it is proposed to establish a mandatory age limit for the use of social media. As an alternative, section 6a-ii suggests a measure identical to…
We are one step closer to the ratification of Treaty 108+! On September 30th, the Dutch House of Representatives approved the treaty, including the motion proposed by members…
This section briefly mentions the "Future of the BRP" (Basic Registry of Persons) project, which also focuses on: "The Future of the BRP provides functionalities to support data…
We are one step closer with the ratification of Convention 108+! On September 30th, the House of Representatives approved this, including the Motion by members Kathmann and White…
Under paragraph 6 'Social media', it is proposed to introduce a binding age limit for the use of social media, and as variant 6a-ii "Measure identical to measure 6a, with the…
This document briefly mentions the “Future BRP” (Basic Registration of Persons) project, which also focuses on: “Future BRP provides functionalities designed to minimize data and…
Brussels, October 10 - In anticipation of the planned commissioning of the EU Entry/Exit System (EES) on October 12, 2025, the Coordinating Supervisory Committee (CSC) will…
Brussels, 10 October - On the occasion of the upcoming entry into operation of the EU Entry Exit System (EES) on 12 October 2025, the Coordinated Supervision Committee (CSC) will…
Data Subject Rights The Austrian Data Protection Authority ("DSB") issued a decision finding that Microsoft 365 Education illegally tracks students and uses student data for…
Brussels, 9 October - The European Data Protection Board (EDPB) and the European Commission have approved joint guidelines on the interaction between the Digital Markets Act (DMA)…
Brussels, 09 October - The European Data Protection Board (EDPB) and the European Commission endorsed joint guidelines on the interplay between the Digital Markets Act (DMA) and…
BfDI Launches New Data Barometer – More Evidence for Effective Data Protection
Data Subject Rights Lithuania-based Whitebridge AI sells “reputation reports” on everyone with an online presence. These reports compile large amounts of scraped personal…
Credit Scoring noyb has scored a win in its complaint proceedings against the Austrian credit information agency KSV1870 and the energy provider Unsere Wasserkraft. The Austrian…
International Freedom of Information Day: Germany Needs More Transparency!
Credit Scoring Following an initiative by noyb, more than 2,400 affected individuals requested their data from the credit agency CRIF and have now received it. An evaluation by…
Annual Conference of the Digital Cluster Bonn
Decision to amend the "Decision on Notification Procedures and Data Processing in Shipping" in connection with the implementation of the Maritime National Single Window.
"Having carefully analysed the judgment in case C-383/23 [ILVA, AB], the EDPB considers that the Guidelines 4/2022, and in particular Section 6.2.1, align with this ruling, and…
National Administrative Procedures and DPA inactivity The GDPR has been inadequately enforced for years. Despite 3,813 complaints, there were only 62 fines in Austria in 2024.…
National Administrative Procedures and DPA inactivity According to reports in the Irish Times and RTE, Niamh Sweeney, a former senior Meta lobbyist, is set to join the Irish Data…
Forced Consent & Consent Bypass More than three years ago, noyb had filed a complaint against Google for sending unsolicited advertising emails directly to the inboxes of Gmail…
Data Transfers Press Release by the General CourtBackground. Philippe Latombe, a French member of parliament, brought an action for annulment of the EU-US data transfer agreement…
The purpose of this study was to assess the transparency of personal data in thirteen specific public registers in relation to European data protection law, and to identify…
The AIVD (Dutch Intelligence and Security Service) and MIVD (Military Intelligence and Security Service) are also investigating, as part of the implementation of the Temporary…
Core Objective 24: "The student participates in the digital world" begins with: "The student uses digital systems, data, and protects the privacy of themselves and others in a…
The Secretary of State has informed the Parliament that, following the IBTD reflection report, the Tax Authority is developing a GDPR-compliant reporting process, improving its…
The purpose of this study was to assess the public nature of personal data in thirteen specific public registers against European data protection law and to identify…
The State Secretary informs the House that, following the IBTD reflection report, the Tax and Customs Administration is working on a GDPR-proof notification process, improved…
Likewise, regarding the implementation test of the Temporary Act on Research by the AIVD and MIVD into countries with an offensive cyber program, bulk datasets, and other specific…
Core objective 24: 'The pupil participates in the digitized world.' begins with: "The pupil handles digital systems, data, and the privacy of themselves and others safely." Which…
Data Subject Rights noyb has achieved a win against YouTube, the video platform provided by Google. After five and a half years, the Austrian data protection authority (DSB) has…
Fan Page Case Moves to the Next Round
Cookie Banners The Austrian Federal Administrative Court (BVwG) has confirmed an earlier decision by the Austrian Data Protection Authority (DSB) that the Austrian newspaper…
Artificial Intelligence Meta has recently started using the personal data of Europeans for AI training. Contrary to its GDPR obligations, Meta hasn’t asked for consent in advance.…
Almost 7 years after the GDPR came into force, noyb remains to be one of the leading European forces pushing for the fundamental right to data protection for all users. To date,…
Forced Consent & Consent Bypass So-called ‘Pay or Okay’ systems are on the rise in Europe. First introduced by newspapers in Austria and Germany, Meta adopted the approach for…
Ruling in the Fanpages case has been issued: BfDI is considering further legal action
Data Subject Rights Today, noyb has filed GDPR complaints against AliExpress, TikTok and WeChat. All three tech companies have failed to comply with access requests under Article…
Progress has been made on the file concerning the draft regulation of the European Parliament and the Council, which establishes additional procedural rules regarding the…
BfDI Launches Public Consultation on AI Models
Report, Rathenau Institute, The cost of free internet: Directions for future online tracking policies.
Report: Enforcement in Public Transportation. Analysis of the legal framework regarding identification and data exchange. Also see the joint response from the Ministry of Justice…
Starting July 1st, Denmark will hold the presidency of the European Union. They plan to focus on digital simplification, including a revision of the Cybersecurity Act.…
From public documents and conversations with employees of the Tax Authority in 2024, it became clear that reports regarding potential fraud by the SME (Small and Medium-sized…
There is a growing movement for reforms in data protection. The European Commission is proposing specific changes to make compliance easier for small and medium-sized enterprises,…
European Parliament (Think Tank), Information Brief: TikTok and EU Regulation: Legal Challenges and Insights from Various Jurisdictions (Written by Hendrik Mildebrath and Bente…
Report, Rathenau Institute, The price of free internet.
Report, Enforcement in Public Transport. Analysis of the legal framework regarding identification and data exchange. See also the joint response from Iens and the Ministry of…
Public documents and conversations with employees of the Tax and Customs Administration in 2024 revealed that reports of potential fraud by the Small and Medium-sized Enterprise…
Government letter, GDPR and privacy organization at the Tax and Customs Administration. A letter regarding the current state of affairs.