EDPB harmonises fining methodology and adopts final DSA-GDPR guidelines
EDPB adopts guidelines on administrative fines under GDPR and on interplay between Digital Service Act and GDPR.
EDPB (European Data Protection Board) · EU-wideEDPB (European Data Protection Board)
Regulation
Category
Type
Date
EDPB guidelines on anonymisation, web scraping for generative AI, and blockchain data processing
EDPB adopts final guidelines on anonymisation, web scraping for generative AI, and personal data processing through blockchain technologies.
EDPB (European Data Protection Board) · EU-wideEDPB calls for legal basis for cross-regulatory information sharing
EDPB calls for a clear legal basis enabling information sharing among regulators with different competences to support consistent GDPR application.
EDPB (European Data Protection Board) · EU-wideStakeholder event on guidelines on the interplay between data protection and competition law
Brussels, 30 July – The EDPB and the European Commission organise a remote stakeholder event in the context of their joint work on upcoming guidelines on the interplay between competition and data protection . The eve...
EDPB (European Data Protection Board) · EU-wideCNIL fine: Hôpital Privé de la Loire data breach, EUR 500,000
CNIL imposed EUR 500,000 administrative fine on Hôpital Privé de la Loire for inadequate security and delayed breach notification under GDPR Articles 32 and 34.
EDPB (European Data Protection Board) · EU-wideCNIL fine: Hôpital Privé de la Loire €500,000 for health data breach and inadequate security
CNIL fined a private hospital €500,000 for failure to secure patient data and notify data subjects of a 2025 breach affecting the Computerised Patient Summary system.
EDPB (European Data Protection Board) · EU-wideEDPB Final Decision: Administrative Fine and Compliance Order against Health Service Executive (HSE) for GDPR Violations
EDPB issued administrative fine and compliance order against HSE for breaches of GDPR Articles 5, 32, 33, and 34 relating to personal data security and breach notification.
EDPB (European Data Protection Board) · EU-wideIrish Data Protection Commission fines Google EUR 403,000,000 for unlawful location data processing
Google fined for processing location data without lawful basis, violating GDPR Articles 5, 6, 12 and 13 on transparency and data subject rights.
EDPB (European Data Protection Board) · EU-wideSpanish DPA fine: Securitas Direct EUR 100,000 for obstructing data subject rights via paid telephone number
Spanish DPA fined Securitas Direct EUR 100,000 for directing individuals to a chargeable telephone number to exercise GDPR data subject rights, making exercise more difficult.
EDPB (European Data Protection Board) · EU-wideCNIL fine: EXTIA €300,000 for failure to respect data subject rights
CNIL imposed a €300,000 administrative fine on EXTIA for violations of Articles 12 and 17 GDPR concerning transparent information and right to erasure.
EDPB (European Data Protection Board) · EU-wideCNIL fine: EXTIA EUR 300,000 for failure to respect data subject rights
CNIL imposed a EUR 300,000 administrative fine on EXTIA for violations of Articles 12 and 17 GDPR concerning transparent information and right to erasure.
EDPB (European Data Protection Board) · EU-wideSpanish DPA fine: Securitas Direct €100,000 for obstructing data subject rights via paid telephone number
Spanish DPA fined Securitas Direct €100,000 for making exercise of data subject rights more difficult by directing individuals to a chargeable telephone number, violating GDPR Article 12.
EDPB (European Data Protection Board) · EU-wideEDPB binding decision: Belgian DPA to handle merits of NOYB cookie banner complaint against VRT
EDPB binding decision requiring Belgian DPA to proceed with substantive examination of GDPR cookie-consent complaint against public broadcaster VRT.
EDPB (European Data Protection Board) · EU-wide
Showing 13 of 13 tracked updates
Health-tech only