🔁 Authentication issue
🇫🇮🔐 Finland – Banking Sector: when 47 minutes cost €865,000Personal data breach following a change in authentication software settings 📌 Key facts: ❗...
Read more🇮🇹🛑 Passports: massive data theft
📂🚫 Data leak: high-res passport scans stolen from multiple Italian hotels!!!🛂 What to do if you stayed in Italy this summer? Between June and August ...
Read moreCookies: Council of State
💥 Cookies: the post office wins in the Council of State Some cookies are exempt from consent! Reminder: The La Poste / Digiposte case before the Coun...
Read more🚨 Cloud & sovereignty
⚠️ANSSI sets the record straightSenate report of 8 July 2025 Sources: official Senate minutes (hearing of V. Strubel), SecNumCloud v3.2 framework (AN...
Read more👉 Non-compliant practices
🛡️ CNIL: €325M for Google & €150M for SHEIN — Enforcement on cookies & consent Regulator: CNILDecision, Google: SAN 2025-004Decision, SHEIN: SAN 2025...
Read more🇪🇸 🚫 🔀 No misuse of purpose
🚨 ❌ AEPD – No illegal data repurposing: €1,200 penalty after acknowledgment of responsibility Regulator: AEPDDecision: PS-00181-2025, 2025-09-01 An ...
Read more⚠️ Access request not handled in time!
🚨🇮🇹 Hard Drive Failure + Ignored Access Request = €2,000 Fine for Tirrenia Hospital Srl 🚑💾 Regulator: GPDP (Italian DPA)Decision: 1...
Read morePoland: erroneous risk analysis
🔗 Cybersecurity ≠ Protection of rights & freedoms: the error that costs Białystok paediatric hospital fined PLN 66,500 / ~€15,000 🇵🇱 UODO sanction :...
Read more📚 TOS update
🚚📦 WeTransfer: when a simple TOS update raises an GDPR tsunami On 15 July, WeTransfer discreetly slipped the following statement into its new TOS: ‘W...
Read more🔒 HR & Facebook
HR teams: stop mining employees’ Facebook posts. 🔎 Autostrade per l’Italia fined €420,000 for… “screening” an employee’s Facebook 🇮🇹 Regulator: GPDP ...
Read more📢 Spain, excessive data collection!
📢 Do you work in the hotel industry 🇪🇸? Is your privacy policy really up to date? 👁️ If you go to a hotel in Spain 🇪🇸 Expect to fill in a form with 4...
Read more🇸🇪 Sweden: breathalyser tests
🛳️🫧 When daily breath tests sink GDPR compliance: the WÅAB case (Sweden) Regulator: IMY (Swedish DPA)Source: IMY-2024-1520, 18 June 2025 🔍 The facts...
Read more