Since 11 September 2026, reporting obligations under the EU Cyber Resilience Act (CRA) are applicable to manufacturers. Many companies still think of the CRA as a 2027 issue, but strict reporting deadlines already apply...
The Polish Data Protection Authority (UODO) imposed a fine of 18,416,400 PLN (approximately 4.3 million euros) on a bank. Between April 1, 2019, and September 23, 2020, the bank...
The EDPB has published an update of the One-Stop-Shop (OSS) case digest on right to object and right to erasure. This project has been developed in the framework of the Support Pool of Experts programme, which aims to support cooperation...
The EU AI Act may have entered into force, but the regulatory framework surrounding AI is far from settled. In order to address this, the European Commission's proposed AI Act Omnibus package demonstrates that...
France’s data protection authority (CNIL) has imposed significant fines totalling €42 million on Free Mobile (€27 million) and its parent company Free (€15 million) following a massive data breach that exposed millions of customers’ personal information...
The European Commission and Brazil have taken a major step towards a deeper digital cooperation by adopting mutual adequacy decisions that recognize each other’s data protection frameworks as equivalent...
Hamburg sets a precedent for automated decisions. A company in Hamburg was fined ( 492,000 EURO ) for rejecting credit applications through fully automated algorithms without proper explanation or human review.
The European Data Protection Board has published guidelines on the interaction of the Digital Services Act (DSA) and the General Data Protection Regulation (GDPR) on 12 September 2025.
Apple is stepping up its enforcement of the EU Digital Services Act (DSA) requirements, ensuring apps distributed via its App Store meet new trader obligations. The clock is ticking for developers...
