Framework
General Data Protection Regulation
44 stories in the last 90 days≈ $3.16B in fines tracked (19 actions)Next deadline 21 Jan 2027Latest story 1 day ago
Official text: EUR-Lex: Regulation (EU) 2016/679
An analysis published on 29 October 2026 reviews five years of China's Personal Information Protection Law, noting enforcement actions and upcoming regulatory focus.
1 source · trade press
The Irish Data Protection Commission imposed a €3.25 million penalty on Coinbase Ireland for inadequate security controls that led to a breach.
1 source · trade press
CNIL fined Fnac Darty €7 million for using third‑party trackers in its mobile app without user consent; a daily penalty of €10,000 applies if the decision is not complied with.
1 source · trade press
The Information Commissioner’s Office issued a formal reprimand to Staffordshire Police after a serious breach of personal data relating to domestic abuse victims.
1 source · trade press
The European Data Protection Board released an opinion on the Commission’s draft EU‑US Framework Agreement for reciprocal identity‑verification data exchanges.
1 source · official
EDPS published a FAQ detailing risk assessment, mandatory notification form, phased notifications and mitigation steps for controllers and processors.
1 source · official
The inspectorate reported that British police records have been accessed illegally on several occasions this decade through external IT service providers.
1 source · trade press
The EDPS newsletter outlines how the AI Act’s new transparency rules are being applied in EU bodies and offers advice on sharing health data with Korea.
1 source · officialFrance's data protection authority, joined by Italy, the Netherlands and Austria, lodged a complaint against Scale AI’s Outlier platform for mandatory biometric verification and continuous third‑party tracking of European freelance workers.
1 source · trade press
The Fifth Circuit on 23 October 2026 reinstated a privacy class action claiming an optical retailer shared customers' health‑related browsing data with Meta Pixel without consent.
1 source · trade press
The Council approved article 88bis on 23 October 2026, creating an automatic lawful basis for AI‑related processing and removing the need for user consent.
1 source · trade press
The European Commission announced on 22 October 2026 it will examine Booking.com’s safeguards against phishing scams targeting travelers.
1 source · trade press
The European Data Protection Board issued Guidelines 3/2025 on how the Digital Services Act interacts with the EU General Data Protection Regulation, published on 17 September 2026.
1 source · trade press
The Berlin DPA ruled that the SPD, Greens, Left and CDU unlawfully used political micro‑targeting in the 2021 election, finding no consent or other legal basis.
1 source · trade press
On 8 October 2026 the U.K. Information Commissioner published expectations for generative‑AI model developers and opened a call for evidence on agentic AI.
1 source · trade press