Skip to content

News

Current events, updates, and developments in data protection law

240 Posts
12 Topics
Feb 23 Latest

EU countries furious at Hungary over plan to block Russia sanctions and Ukraine loan

EU's top diplomats "really upset and frustrated" over Budapest's stonewalling.

Distribution grids at the heart of Europe’s energy resilience [Promoted Content]

Distribution System Operators (DSOs) are emerging as key resilience actors. By integrating renewables, strengthening cybersecurity, adapting to climate risks and enabling anticipatory investment, DSOs are essential to building a secure and future-proof European energy system.

Top EU diplomat on Iran tensions: ‘We don’t need another war’

Kaja Kallas called for a diplomatic solution as the U.S. builds up military forces around Iran.

‘No thanks’: Greenland, Denmark reject Trump’s hospital ship offer

"It's not as if there's a need for a special healthcare initiative in Greenland."

Kyiv urges Brussels to intervene in Hungary oil pipeline feud

Hungary is blocking both a €90 billion loan to Ukraine and diesel deliveries

Why the EU won’t anchor an anti-Trump trade bloc

Mark Carney is eager to build a unified super-bloc capable of squaring up to the trade leviathans of China or the US. But his grand design is really a pipe dream

Meet Laurent Duplomb, the senator fighting France’s pesticide war

The lawmaker has tabled a new proposal to reauthorise the insecticide acetamiprid

Poland’s SAFE plan under threat amidst political fallout

Warsaw would be the largest recipient of the €150 billion EU defence programme

VOLTAGE: Energy tensions hit Brussels on multiple fronts

In today's edition: International Energy Authority, Druzhba pipeline, ETS support

ICO (UK) - Allay Claims Ltd

The controller claimed it relied on the soft opt-in in Regulation 22(3) of the Privacy and Electronic Communications Regulations 2003 (PECR), where an organisation may send direct marketing communications to its customers even if they did not specifically consent to electronic mail. However, only the organisation that collected the contact details can rely on the soft opt-in rule. The controller claimed it relied on the soft opt-in in Regulation 22(3) of the Privacy and Electronic Communications

US, South Korea and Greece to sign shipbuilding deal

The Trump administration has shown a strong interest in advancing relations with Greece in the fields of energy and defence

EU warns US against attacking Iran

“Diplomacy must be given a chance”, a Commission spokesperson said

Ensuring human rights-based, global perspectives in the DSA enforcement: the DSA Human Rights Alliance’s guidelines

The DSA Human Rights Alliance has released 'Principles for a Human Rights-Centred Application of the Digital Services Act: A Global Perspective' to guide the European Commission, national policymakers, and regulators as the DSA moves from legislation to enforcement. The recommendations focus on the cross-border effects of DSA enforcement, empowering diverse groups to enforce users’ rights and providing input during enforcement actions. This will ensure that the law is applied in a way that respe

New Report Helps Journalists Dig Deeper Into Police Surveillance Technology

Report from EFF, Center for Just Journalism, and IPVM Helps Cut Through Sales HypeSAN FRANCISCO — A new report released today offers journalists tips on cutting through the sales hype about police surveillance technology and report accurately on costs, benefits, privacy, and accountability as these invasive and often ineffective tools come to communities across the nation. The “Selling Safety” report is a joint project of the Electronic Frontier Foundation (EFF), the Center for Just Journalism (

How France is losing its leadership on EU agriculture

Italy, Spain and Poland are reshaping the bloc’s food export balance

THE HACK: Commissioner Micallef keen on AI copyright licensing

In today's edition: Parliament blocks AI features, MEPs meet MAGA committee amid censorship attacks

SONDAGE EXCLUSIF. A Nice, Eric Ciotti 10 points devant le sortant Christian Estrosi

SONDAGE Cluster 17 x POLITICO. Eric Ciotti, donné à 41% des intentions de vote, apparaît en mesure de renverser le maire Horizons de Nice, Christian Estrosi, lors des prochaines municipales.

French far-left party under fire after fatal attack on nationalist activist

With just weeks to go before March’s municipal elections, the tragedy comes at a particularly damaging moment for Mélenchon’s far-left party

VDAI (Lithuania) - Nr. 3R-219 (2.13-1.E)

}}}} The DPA partially upheld a complaint and issued a reprimand against a travel company for unlawful direct marketing, excessive passport copy collection, inaccuracies in travel documents, lack of transparency, and an incomplete access response.The DPA partially upheld a complaint and issued a reprimand against a travel company for unlawful direct marketing, excessive passport copy collection, inaccuracies in travel documents, lack of transparency, and an incomplete response to an access reque

Nigel Farage unveils his top team

Former Tory leadership contender Robert Jenrick is named shadow chancellor while Deputy Leader Richard Tice's portfolio covers business, trade and energy.

OLG Bamberg - 10 U 61/25 e

Holding }}}} The court held that the mere automated creation of a score value does not trigger [[Article 22 GDPR|Article 22 GDPR]] unless it directly leads to a legally or similarly significant decision about the data subject.The court held that the mere automated creation of a score value does not trigger [[Article 22 GDPR]] unless it directly leads to a legally or similarly significant decision about the data subject. == English Summary ==== English Summary == The data subject brought multiple

OLG Bamberg - 10 U 61/25 e

}}}} The court held that the mere automated creation of a score value does not trigger [[Article 22 GDPR]] unless it directly leads to a legally or similarly significant decision about the data subject.A court held that the mere automated creation of a score value by a credit information agency does not trigger [[Article 22 GDPR]] unless it directly leads to a legally or similarly significant decision concerning the the data subject. == English Summary ==== English Summary == === Facts ====== Fa

EU eyes ring-fencing public subsidies for European tech

A draft of the Industrial Accelerator Act, obtained by Euractiv, seeks to funnel public support to homegrown companies in tech sectors including AI, chips and space

Deuxième édition du Prix CNIL-EHESS

La CNIL et l’EHESS organisent un prix dédié aux sciences humaines et sociales en marge du Privacy Research Day, le 24 juin 2026 à Paris. Un jury pluridisciplinaire sélectionnera la contribution qui sera présentée et récompensée lors de l’événement.

Socialists slam Commission for participating in Trump’s Board of Peace

Most EU countries have kept their distance, with only two opting to join the board

Ukraine ex-energy minister named suspect in laundering probe

The EU is urging sweeping reforms to stamp out corruption as part of its demands for Ukrainian membership to the bloc

VOLTAGE: Merz’s ETS diplomacy masterclass

In today's edition: carbon pricing, air pollution, spy cars, Jos Delbeke

AI and the Talent Challenge: Why Europe Needs More Professional Accountants [Advocacy Lab]

Europe’s competitiveness depends on a strong pipeline of professional accountants, yet the demand for skills in areas such as sustainability reporting, green finance, cyber‑crime and AI is growing faster than the supply of qualified professionals. ACCA is launching a Europe‐wide conversation on how to attract, develop and retain the accounting talent our economies urgently need. Learn more […]

AEPD (Spain) - EXP202406574

Facts }}}} The AEPD fined a right-wing political party €500 for publishing a proof of delivery on Facebook that showed a person’s name, ID number and signature without a legal basis under [[Article 6 GDPR|Article 6 GDPR]].The AEPD fined a right-wing political party €500 for publishing a proof of delivery on Facebook that showed a person’s name, ID number and signature without a legal basis under [[Article 6 GDPR]]. == English Summary ==== English Summary == VOX had sent a certified letter to a m

The Brief – The real reason the US can never abandon Europe

What makes the transatlantic relationship so frustrating for both sides is that there is no escape; we are connected at the hip, culturally, economically and militarily

INTERVIEW: Why Europe shouldn’t give up on carbon pricing just yet

Jos Delbeke on why renewables are the answer to high electricity prices, and how the EU needs to up its diplomatic game

EU fertiliser import slump follows pre-carbon tax stockpiling spree

Precipitous drop comes after massive stockpiling ahead of climate measure

Quick EU membership for Ukraine unlikely, Latvian president says

In Munich, Ukraine’s President Volodymyr Zelenskyy said his country wants a clear date for EU membership

About 200,000 join Iran demonstration in Munich

Protesters denounced the leadership of Iran's Islamic Republic following the deadly repression of nationwide protests

OGS Zagreb - Pn-877/2023-29

Created page with "{{COURTdecisionBOX |Jurisdiction=Croatia |Court-BG-Color= |Courtlogo=Courts_logo1.png |Court_Abbrevation=OGS Zagreb |Court_Original_Name=Općinski građanski sud u Zagrebu |Court_English_Name=Municipal Civil Court in Zagreb |Court_With_Country=OGS Zagreb (Croatia) |Case_Number_Name=Pn-877/2023-29 |ECLI= |Original_Source_Name_1=OGS Zagreb |Original_Source_Link_1=https://odluke.sudovi.hr/Document/View?id=dbadb0f4-bf7a-41a9-b560-fd90e582056a&q=Op%25c4%2587a+uredba+o+za%2..." Sh

VG Osnabrück - 7 A 6/24

Fixed a link. }}}} A court held that a public authority violated Article 12(3) and [[Article 15 GDPR#1|Article 15(1) GDPR]] by failing to respond within one month to an access request and by wrongly requiring a reference date.A court held that a public authority violated [[Article 12 GDPR|Article 12(3)]] and [[Article 15 GDPR#1|Article 15(1) GDPR]] by failing to respond within one month to an access request and by wrongly requiring a reference date. == English Summary ==== English Summary == The

Seven Billion Reasons for Facebook to Abandon its Face Recognition Plans

The New York Times reported that Meta is considering adding face recognition technology to its smart glasses. According to an internal Meta document, the company may launch the product “during a dynamic political environment where many civil society groups that we would expect to attack us would have their resources focused on other concerns.” This is a bad idea that Meta should abandon. If adopted and released to the public, it would violate the privacy rights of millions of people and cost the

“Free” Surveillance Tech Still Comes at a High and Dangerous Cost

Surveillance technology vendors, federal agencies, and wealthy private donors have long helped provide local law enforcement “free” access to surveillance equipment that bypasses local oversight. The result is predictable: serious accountability gaps and data pipelines to other entities, including Immigration and Customs Enforcement (ICE), that expose millions of people to harm. The cost of “free” surveillance tools — like automated license plate readers (ALPRs), networked cameras, face recognit

Datatilsynet (Denmark) - 2025-431-0053

}}}} The DPA issued a reprimand to 51 municipalities and simultaneously warned them regarding their use of Google’s products in primary and lower secondary schools. In particular, the DPA found that the municipalities had not adequately demonstrated how personal data processed outside the EU is provided with an adequate level of protection.The DPA issued a reprimand to 51 municipalities and simultaneously warned them regarding their use of Google’s products in primary and lower secondary schools

CNIL (France) - SAN-2025-017

added links to GDPR articles === Holding ====== Holding === The DPA found that, since the membership form did not contain information on the transmission of members' data to the social media platform, or even on targeted advertising, the consent was not informed nor specific. Therefore, it found the processing to be unlawful, violating Article 6(1)(a) GDPR. The DPA found that, since the membership form did not contain information on the transmission of members' data to the social media

Information Integrity & Wikipedia: How community-governed platforms can inform future policy-making.

The event will give the opportunity to the researchers, the University of Amsterdam and Eurecat – Centre Tecnològic de Catalunya, to showcase the results of their analyses, presenting the policy options that can inform future policy-making. The post Information Integrity & Wikipedia: How community-governed platforms can inform future policy-making. appeared first on European Digital Rights (EDRi).

AEPD (Spain) - PS-00456-2025

Holding === Holding ====== Holding === The DPA upheld the complaint and found an infringement of [[Article 6 GDPR#1|Article 6(1) GDPR]]. The Authority clarified that the necessity for the performance of a contract must be interpreted strictly and covers only processing that is objectively necessary, not merely useful or convenient.The DPA upheld the complaint and found an infringement of [[Article 6 GDPR#1|Article 6(1) GDPR]]. The DPA clarified that the necessity for the performance of a contrac

The Internet Still Works: Wikipedia Defends Its Editors

Section 230 helps make it possible for online communities to host user speech: from restaurant reviews, to fan fiction, to collaborative encyclopedias. But recent debates about the law often overlook how it works in practice. To mark its 30th anniversary, EFF is interviewing leaders of online platforms about how they handle complaints, moderate content, and protect their users’ ability to speak and share information. A decade ago, Wikimedia Foundation, the nonprofit that operates Wikipedia, rece

Sanctions et mesures correctrices : la CNIL présente le bilan 2025

Cookies, surveillance des salariés et sécurité des données, sont les principaux sujets des sanctions prononcées par la CNIL en 2025, dont le montant cumulé des amendes représente un montant total de 486 839 500 euros.

On Its 30th Birthday, Section 230 Remains The Lynchpin For Users’ Speech

For thirty years, internet users have benefited from a key federal law that allows everyone to express themselves, find community, organize politically, and participate in society. Section 230, which protects internet users’ speech by protecting the online intermediaries we rely on, is the legal support that sustains the internet as we know it. Yet as Section 230 turns 30 this week, there are bipartisan proposals in Congress to either repeal or sunset the law. These proposals seize upon legitima

RIP Dave Farber, EFF Board Member and Friend

We are sad to report the passing of longtime EFF Board member, Dave Farber. Dave was 91 and lived in Tokyo from age 83, where he was the Distinguished Professor at Keio University and Co-Director of the Keio Cyber Civilization Research Center (CCRC). Known as the Grandfather of the Internet, Dave made countless contributions to the internet, both directly and through his support for generations of students. Dave was the longest-serving EFF Board member, having joined in the early 1990s, before t

Op-ed: Weakening Section 230 Would Chill Online Speech

(This appeared as an op-ed published Friday, Feb. 6 in the Daily Journal, a California legal newspaper.) Section 230, “the 26 words that created the internet,” was enacted 30 years ago this week. It was no rush-job—rather, it was the result of wise legislative deliberation and foresight, and it remains the best bulwark to protect free expression online. The internet lets people everywhere connect, share ideas and advocate for change without needing immense resources or technical expertise. Our u

#DIDit: EDRi members spark movement for alternatives to Big Tech

At the 39th Chaos Communication Congress (39C3), German author Marc-Uwe Kling helped launch the idea of a monthly “Digital Independence Day” with a broad coalition of civil society organisations. On the first Sunday of each month, participants explore alternatives to dominant digital platforms, share experiences using #DIDit, and support one another through volunteer-led online and in-person meet-ups. To date, 189 organisations have joined the initiative, organising over 400 meet-ups. The post #

UK adequacy decision: a risk for the future and a lesson to be learnt

As the UK adequacy renewal comes to an end, EDRi member Open Rights Group reflects on its outcome and the broader implications for the future of EU-UK relatiopnships. The post UK adequacy decision: a risk for the future and a lesson to be learnt appeared first on European Digital Rights (EDRi).

EFF to Close Friday in Solidarity with National Shutdown

The Electronic Frontier Foundation stands with the people of Minneapolis and with all of the communities impacted by the ongoing campaign of ICE and CBP violence. EFF will be closed Friday, Jan. 30 as part of the national shutdown in opposition to ICE and CBP and the brutality and terror they and other federal agencies continue to inflict on immigrant communities and any who stand with them. We do not make this decision lightly, but we will not remain silent. See our statement on ICE/CBP violenc