Data protection and digital regulation developments, collected automatically from 17+ sources.
Get this as an email digestnoyb remains one of the leading European forces pushing for the fundamental right to data protection for all users. To date, our legal work has resulted in administrative finesā¦
Background informationDate of final decision: 05/06/2026National caseController: Wind Tre S.p.A.Legal Reference(s): Article 5 (Principles relating to processing of personal data),ā¦
France's cyber agency coordinating with European counterparts in response to hackers.
For the first time, the Commission President explicitly proposed using AI tools to cut administrative burdens.
GDPR Policy If the European Commission and the EU Member States have their way, the so-called Digital Omnibus will result in a fundamental change to EU privacy laws. But whatā¦
Online & Mobile tracking In 2020, noyb (in cooperation with the Norwegian Consumer Council) has filed a complaint against the online advertising company Xandr (now part ofā¦
Sf deleted page UOOU (Czech Republic) - 6 As 25/2026-35 should have been made as a court decision not DPA
The DPA fined a gambling operator ā¬2.59 m for processing biometric data without valid consent and beyond the necessary scope, bundling multiple purposes into single consent, andā¦
EFF strongly condemns Turkeyās state-led discriminatory, oppressive attacks on feminist and LGBTQ+ organisations, media platforms, student groups, and rights defenders andā¦
EFF was thrilled to join organizers, advocates, and activists in the East Bay for the second annual Oakland Tech Week last week. We are grateful to our friends at MediaJustice andā¦
In the past two years, the federal government has unlawfully consolidated data exposing our private information. This consolidation has been chaotic but generally came in threeā¦
The DPA fined a veterinary clinic RON 5,242 (ā¬1,000) for failing to give full access to the personal data of a data subject upon a request pursuant to Article 15 GDPR. Englishā¦
The DPA fined a controller RON 26,294 (ā¬5,000) for failing to implement adequate security measures, which led to a breach affecting the confidentiality and availability ofā¦
The Dutch Data Protection Authority (AP) is further preparing for the supervision of artificial intelligence (AI). With the launch of the new directorate for Supervision andā¦
Background informationDate of final decision: 3 July 2026National caseController: Banco Bilbao Vizcaya Argentaria, S.A., Italian branch (BBVA)Legal Reference(s): Article 5ā¦
Background informationDate of final decision: 14 May 2026National caseController: EmiratesLegal Reference(s): Article 5 (Principles relating to processing of personal data),ā¦
Background informationDate of final decision: 6 August 2026National caseController: La Patria S.p.A.Legal Reference(s): Article 12 (Transparent information, communication andā¦
Background informationDate of final decision: 23 September 2026National caseController: IQVIA Solutions Italy S.r.lLegal Reference(s): Article 5 (Principles relating to processingā¦
The CNIL is organizing the 2nd edition of its Informatique & LibertĆ©s Meetings on Tuesday, September 29, 2026. This morning session is an opportunity to exchange views on variousā¦
This post was co-authored by Sheila B. Lalwani, a doctorate student and recent COMPASS Fellow hosted by EFF. Age verification proposals are often presented as a simple tradeoff:ā¦
The National Commission on Informatics and Liberty met on Thursday, 8 October 2026 at 9:30 a.m. with the following agenda:
The EU's cyber agency ENISA and the Joint Research Centre confirm for the first time that they are testing Chinese open-source AI models.
By deliberation of 23 September 2026, the CNIL closed the injunction issued on 22 January 2026 against FRANCE TRAVAIL, without enforcing the penalty payment provided for, in lightā¦
Statistics updates GDPRtoday is a weekly newsletter that summarizes decisions that are collected in ''noyb''ās open wiki GDPRhub. The newsletter consists of aā¦
Background informationCross-border caseController: Uber B.VLegal Reference(s): Article 22 (Automated individual decision making, including profiling) and Article 13 (Informationā¦
Background informationDate of final decision: 28/07/2026National caseController: Ministry of Social Cohesion and Family AffairsLegal Reference(s): Article 25 (Data protection byā¦
Background informationDate of final decision: 22/09/2026National caseLegal Reference(s): Article 32 (Security of processing)Decision: Administrative fineWebsite topics:ā¦
Today is DAF Day! This event highlights the millions of donor-advised funds (DAFs) people have set up to make charitable donations and change the world. If you have a DAF,ā¦
The Portuguese digital rights organisation and EDRi member D3 announces that it has brought four class actions lawsuits against Facebook, Instagram, TikTok and YouTube over theā¦
A new report by ARTICLE 19 examines how the European Union is presiding over the most significant expansion of border surveillance in its history. Much of this development isā¦
A sweeping change to Austria's administrative law would let authorities issue binding decisions using AI systems with no human ever reviewing the outcome. EDRi memberā¦
The EUās Tech Sovereignty Package is supposed to jump-start Europeās āsovereign AIā ambitions. But due to fundamental misunderstandings about the technology behind āAIā and theā¦
What has the EDRi network been up to over the past few weeks? Find out the latest digital rights news in our regular newsletter. In this edition: Turning up the heat ā Commissionā¦
At the urging of the Dutch Data Protection Authority (AP), the government is working on more privacy-friendly rules for credit registration in the Netherlands. These should ensureā¦
More than half of young voters in recent state elections chose parties that are critical of support for Ukraine. The reason for this lies not only in classic debates, but onā¦
In a new blow to Ola Biniās legal guarantees, Ecuadorean authorities retained the free software developer and security expert yesterday in Quito and ordered his immediateā¦
A data leak or theft can cause harm to the individuals concerned. If the incident results from a breach of the GDPR, they may, under certain conditions, seek compensation. It isā¦
Judge Allows Social Media Surveillance Lawsuit Against Trump Administration to Move ForwardNEW YORK ā A lawsuit filed by three labor unions against the Departments of State andā¦
Congress is taking another run at site-blocking, a deeply flawed concept that would undermine basic internet infrastructure. Rep. Darrell Issa (R-CA) has introduced the Americanā¦
There has been a raft of site-blocking bills in the latest Congress, and the latest is called the āDeterring Extraterritorial Foreign Exploitation of Networks Damagingā¦
Over the years, the major tech companies have found all sorts of ways to embed themselves into our lives. We often use their software, their AI tools, their social media, andā¦
InterContinental Resort, Mauritius The Collaboration on International ICT Policy in East and Southern Africa (CIPESA), will host the Forum on Internet Freedom in Africa 2026ā¦
When state lawmakers attempt to rewrite how the internet works, users rely on courts to recognize that laws canāt make technical impossibilities a reality. Thatās why we wereā¦
If you are an Android user, you may have noticed it already: Google has begun allowing rival, third-party app stores to be distributed through the Google Play Store. And if youā¦
The Marin County Sheriffās Office is the latest California law enforcement agency to get caught sharing automated license plate reader (ALPR) data from their Flock Safety systemā¦
The National Commission on Informatics and Liberty met on Thursday, 1 October 2026 at 9:30 a.m. with the following agenda:
On the occasion of the European Cybersecurity Month, Cyber Month in France, the CNIL and Cybermalveillance.gouv.fr join forces around a new practical support to help individualsā¦
With the launch of iOS 27, Apple is rolling out a variety of new AI features to its familiar voice assistant, Siri. But how are AI tools like these handling our data? In ourā¦
When the rich and powerful try to use the court to silence negative reporting about themselves, itās worth calling out that behavior for what it is: an attack on free speech. Thisā¦
On 16 September, the European Commission presented the KIDS ACT, its plan for making online experiences safer for young people. Far from being a move to lead the EU towards betterā¦
People are increasingly concerned about the ways in which mass surveillance is tracking our every move: from Flock license plate readers to face recognition to creepy ads that āā¦
San Francisco's decision to retain its use of Automated License Plate Reader (ALPR) surveillance cameras belies what we know about this spying technology tool: it endangersā¦
AI Minister Kanishka Narayan said he's not bothered if the U.S. gets "first dibs" on AI model testing.
Protection of voters' rights, foreign interference... Monday, November 16, 2026, from 2 p.m., the CNIL invites you to its event dedicated to the ethical issues associated withā¦
The San Francisco Police Department (SFPD) began regularly deploying drones two years ago and has since expanded their use in a way that has outpaced its documented policy andā¦
EFF legal intern Simar Kaur also contributed to this article. Americansā First Amendment right to equal access to official government statements is violated by the Trumpā¦
Cardinal Michael Czerny who leads an AI commission at the Vatican says he just hasnāt had time to try it out.
Axel Voss, a Conservative German member of the European Parliament, told POLITICO that the EU is responding too slowly to AI threats.
European lawmakers this week called for the EUās artificial intelligence regulations to hold American tech companies liable for the risks their most advanced models pose toā¦
Online sports betting company DraftKings is using AI to target customers who are most likely to place losing bets and respond to gambling promotions. This kind of targeting is aā¦
By a decision dated September 17, 2026, the CNIL closed the injunction issued on May 15, 2025, against SOLOCAL MARKETING SERVICES.
The National Commission for Information Technology and Civil Liberties met on Thursday, September 24, 2026, at 9:30 a.m. with the following agenda:
The blocās new AI envoy wants Brussels to focus on using AI to lift productivity, rather than chasing U.S. and Chinese models.
The tech billionaire argued that Pope Leo XIVās call to regulate AI could slow the West while China surges ahead with the technology.
If youāve been forwarded this newsletter, you can sign up free here. Confide in me: Send your tips to this generic inbox, canberraplaybook@poltico.com. ESSENTIALS ā Itās time toā¦
Over the past months, the European Commission's Digital Omnibus on Data has turned into a wider discussion about how much protection the data ā and with it, the rights ā of peopleā¦
Background informationDate of final decision: 21 September 2026National caseLegal Reference(s): Article 5 (Principles relating to processing of personal data), Article 6ā¦
On September 17, 2026, the EDPS adopted guidelines on the authority of data protection authorities to impose administrative fines and the final version of its guidelines on theā¦
On 17 June, the European Parliament approved the new deportation law (called the āReturnā Regulation) which aims to track undocumented people down and deport them from the EU inā¦
At least 14 people in Serbia have been targeted with spyware since the beginning of 2026, according to new findings by EDRi member SHARE Foundation. The targets include members ofā¦
Freedom not Fear (fnf) is an annual self-organised conference on privacy and digital rights. People from all across Europe meet and work towards more freedom in the digitalisedā¦
What has the EDRi network been up to over the past few weeks? Find out the latest digital rights news in our bi-weekly newsletter. In this edition: Turning up the heat āā¦
Weāre excited to welcome you to #PrivacyCamp26 on 13 October, 2026 online and at La Tricoterie, Brussels. Curious about what the day will look like? Check out the final programme.
Background informationDate of final decision: 1 February 2023National caseController: SECURITAS DIRECT, S.A.Legal Reference(s): Article 12 (Transparent information, communicationā¦
Background informationDate of final decision: 1 February 2023National caseController: SECURITAS DIRECT, S.A.Legal Reference(s): Article 12 (Transparent information, communicationā¦
Camera glasses are rapidly gaining popularity. However, those who use them to film or photograph other people may not simply use, share, or publish those images. People who happenā¦
Hybrid Side Event during UNGA81 High-Level Week
The EU Commission draft law to restrict young peopleās access to the internet that it presented last week will come at a high cost: it will put online services behind age gates,ā¦
EFF joined an amicus brief with ACLU, ACLU of D.C., National Press Photographers Association, and Professional Photographers of America to urge the D.C. Circuit to vacate an FAAā¦
Brussels, 21 September ā During its latest plenary, the EDPB has adopted guidelines on the application of the power to impose administrative fines in relation to other correctiveā¦
Artificial Intelligence In a leaked document, the Irish Presidency proposes to EU Member States that the interest of OpenAI, Anthropic, Google, Meta and SpaceX to make profitsā¦
The European Council president said the EU and Canada can work together on defense, AI and strengthening democracy.
With doomsday AI scenarios dominating the news, lawmakers are rightly concerned about reports concerning security breaches at major US AI labs, such as the OpenAIāHugging Faceā¦
Secure messaging platforms, like Signal, WhatsApp, and recently, encrypted RCS, operate on a straightforward assumption: the content at each end of a conversation is private toā¦
Appleās new operating system is here, and along with it comes a new version of Siri, dubbed with two very familiar letters: AI. As the name suggests, this Siri power-up resemblesā¦
California Gov. Gavin Newsom's executive order is an opportunity for a needed, thoughtful conversation about artificial intelligence and its potential harms. Everyday Californiansā¦
A California law that prohibits teens from receiving recommended social media content from other social media users violates their First Amendment rights, EFF argued this week.ā¦
Established in 1978 under the Data Protection Act, the CNIL is an independent administrative authority composed of an 18-member board and a staff of state contract employees.
For years, Access Now and civil society have raised the alarm over Telenorās hasty and irresponsible departure from Myanmar and the potential human rights abuses should Telenorā¦
Since its integration into our digital world, social media has played a pivotal role in youth organizing and social mobilization. Yet, peopleās access to these platforms isā¦
Mass surveillance isn't a joke. But police are treating it like one when using automated license plate reader (ALPR) networks. In our latest EFFector newsletter, we're covering aā¦
The Electronic Frontier Foundation (EFF) is honored to announce today that Alexander āamacā Macgillivray ā a former White House official who also served in top legal capacities atā¦
Courts have for two decades found that linking and embedding someone elseās web content, be it a photo, music, or an article, doesnāt violate copyright lawāthe entity thatā¦
The U.S. Court of Appeals for the Ninth Circuit handed internet users and programmers a big win today, by rejecting an attempt to stretch a narrow provision of the Digitalā¦
The EU chief used her annual State of the European Union address to confront rising panic about AI. What she said showed the limits on her power.
Sarah Heck underscored the need for new rules governing existential risk but said the U.S. must stay in the lead on AI.
āI think thereās a lot to do around how to create better disclosures,ā Clem Delangue said.
A new POLITICO Poll finds that a plurality of Americans favor pausing the development of more advanced AI models, and 63 percent say the technology poses at least a moderate riskā¦
In this special episode from Strasbourg, Zoya Sheftalovich and Ian Wishart give their first take on the State of the European Union speech delivered by Commission President Ursulaā¦
On 14 September, the Dutch Data Protection Authority (AP) organized its first Societal Consultation with broad representation from civil society organizations.
The company is endorsing three bills to standardize biological data and defend against threats amplified by advanced artificial intelligence.
The head of one of the most profitable tech companies pushed arguments voiced by the president at a major AI conference as other industry leaders call for a slowdown.
The companyās top lobbyist believes thereās still a window for policy.
The federal government has inserted a provision into a funding deal with the state of California that would make the state abandon its gold standard net neutrality law, broadbandā¦
We, the undersigned organisations and experts, write to urge you to act before Canadaās Senate completes its consideration of Bill C-22, the Lawful Access Act, and to press Canadaā¦
Access Now, alongside several European civil society organisations, are urging Ursula von der Leyen, President of the European Commission, European Union commissioners, andā¦
Here's a riddle: Why did a Goshen Police Department officer search 6,474 automated license plate reader (ALPR) networks, representing data from 82,413 cameras, on May 7, 2025? Ifā¦
Governor Newsom signed a package of 12 bills yesterday aimed at āprotecting childrenā online. One of them was AB 1709, which EFF has opposed this legislative session and serves asā¦
Heightened global AI safety panic is leading to louder calls for regulation.
Amazon recently debuted a new feature for its Ring cameras that the company is calling Throw Away the Key Encryption (TAKE). The idea is to cut back on the amount of video contentā¦
Background informationDate of final decision: 21 July 2026National caseLegal Reference(s): Article 12 (Transparent information, communication and modalities for the exercise ofā¦
"Global rules are really needed," European tech commissioner says after researchers sound alarm over AI risks.
Bans Like Californiaās Donāt Fix Whatās Wrong With Social Media Companies SAN FRANCISCO - Technology and the laws that regulate it should support and empower young people.ā¦
With 'Beyond the Screen', the Privacy Agency is back with new adventures! Deepfakes, romance scams, harmful challenges on social networks, and internet scammers (brouteurs): thisā¦
Since September 1, 2026, the reform regarding electronic invoicing between companies has come into force. The CNIL helps companies understand the implications and ensure theā¦