The Spanish supervisory authority Agencia española protección datos (AEPD) imposed several fines on a pharmacy in Catalonia. The pharmacy had accessed the health data of nursing home residents without legal basis...
Hamburg sets a precedent for automated decisions. A company in Hamburg was fined ( 492,000 EURO ) for rejecting credit applications through fully automated algorithms without proper explanation or human review.
The UK Information Commissioner's Office (ICO) has fined the service provider Capita £14 million. The reason: inadequate security measures, which led to a massive hacker attack in March 2023.
The European Data Protection Board has published guidelines on the interaction of the Digital Services Act (DSA) and the General Data Protection Regulation (GDPR) on 12 September 2025.
A German court ruled in March 2025 that cookie consent banners must present a “Reject All” button as clearly and prominently as “Accept All” – and this applies to any website targeting users in the EU, regardless of where the company is based.
On February 6, 2025, Advocate General Maciej Szpunar of the Court of Justice of the European Union (CJEU) delivered an opinion in Case C-492/23, clarifying the liability of online marketplace operators concerning...
As artificial intelligence (AI) continues to reshape industries, regulatory bodies are tightening their oversight to ensure data protection remains a priority. In response, France’s data protection authority, CNIL, has released...
Since the GDPR is effective, data transfer from EU citizens to third countries has been a challenge for states that are not explicitly declared as secure by the EU Commission under an adequacy decision.
