News

👉 Non-compliant practices

Cookies & Trackers, Legal basis | 10/09/2025

🛡️ CNIL: €325M for Google & €150M for SHEIN — Enforcement on cookies & consent Regulator: CNILDecision, Google: SAN 2025-004Decision, SHEIN: SAN 2025...

Read more

🇪🇸 🚫 🔀 No misuse of purpose

Legal basis | 10/09/2025

🚨 ❌ AEPD – No illegal data repurposing: €1,200 penalty after acknowledgment of responsibility Regulator: AEPDDecision: PS-00181-2025, 2025-09-01 An ...

Read more

🔒 HR & Facebook

Legal basis | 18/07/2025

HR teams: stop mining employees’ Facebook posts. 🔎 Autostrade per l’Italia fined €420,000 for… “screening” an employee’s Facebook 🇮🇹 Regulator: GPDP ...

Read more

📚 TOS update

Data Transfers, Legal basis | 18/07/2025

🚚📦 WeTransfer: when a simple TOS update raises an GDPR tsunami On 15 July, WeTransfer discreetly slipped the following statement into its new TOS: ‘W...

Read more

📢 Spain, excessive data collection!

Data Subject Rights, Retention & Minimisation, Legal basis | 08/07/2025

📢 Do you work in the hotel industry 🇪🇸? Is your privacy policy really up to date? 👁️ If you go to a hotel in Spain 🇪🇸 Expect to fill in a form with 4...

Read more

🇸🇪 Sweden: breathalyser tests

Retention & Minimisation, Legal basis | 30/06/2025

🛳️🫧 When daily breath tests sink GDPR compliance: the WÅAB case (Sweden) Regulator: IMY (Swedish DPA)Source: IMY-2024-1520, 18 June 2025 🔍 The facts...

Read more

📌 Data Deletion Not Effectively Implemented

Legal basis | 08/04/2025

📜 Data Blocking and Deletion : Breach of Article 32 of the LOPDGDD Source :PS-00176-2024   The AEPD imposed a €20,000 fine (reduced to €16,000 for e...

Read more

🇬🇷 Health data and online publication

Data Subject Rights, Legal basis | 30/03/2025

📸 Doctor: Publication of post-op photos of a former patient... Source : N°50-2024 Greece 💥 The Hellenic Data Protection Authority has issued an ex...

Read more

🧠Private club and GDPR

Biometrics & Video Surveillance, Tools & Documentation, Legal basis | 30/03/2025

🔍 Guestbook, video surveillance, privacy policy: when a company underestimates the GDPR (way too much). 📌 The Belgian Data Protection Authority (GBA/A...

Read more

🇫🇷 Collection form and Processing register

Tools & Documentation, Legal basis | 28/03/2025

📅 December 29, 2023 – CNIL Sanction💸 €75,000 fine imposed on a data broker📄 Reference: SAN-2023-025 🎯 Why? 🔹 Misleading forms: The company collected ...

Read more

🚨 SS2I Inappropriate legal basis 🚨

Legal basis | 28/03/2025

📍 Greece | HDPA | €150,000 Fine 🔍 Following a complaint, the Hellenic Data Protection Authority (HDPA) investigated an IT services company (SS2I) reg...

Read more

🇳🇴 Sharing data without a legal basis!

Data Transfers, Legal basis | 27/03/2025

🇳🇴 Norway: Dating App Fined for Illegal Disclosure of User Data 🇳🇴 The dating app Grindr, dedicated to gay, bi, trans, and queer individuals, with 13...

Read more

Explore all our areas of expertise:

]]>