News

๐Ÿ“š TOS update

Data Transfers, Legal basis | 18/07/2025

๐Ÿšš๐Ÿ“ฆ WeTransfer: when a simple TOS update raises an GDPR tsunami On 15 July, WeTransfer discreetly slipped the following statement into its new TOS: ‘W...

Read more

๐Ÿ”’ HR & Facebook

Legal basis | 18/07/2025

HR teams: stop mining employees’ Facebook posts. ๐Ÿ”Ž Autostrade per l’Italia fined €420,000 for… “screening” an employee’s Facebook ๐Ÿ‡ฎ๐Ÿ‡น Regulator: GPDP ...

Read more

๐Ÿ“ข Spain, excessive data collection!

Data Subject Rights, Retention & Minimisation, Legal basis | 08/07/2025

๐Ÿ“ข Do you work in the hotel industry ๐Ÿ‡ช๐Ÿ‡ธ? Is your privacy policy really up to date? ๐Ÿ‘๏ธ If you go to a hotel in Spain ๐Ÿ‡ช๐Ÿ‡ธ Expect to fill in a form with 4...

Read more

๐Ÿ‡ธ๐Ÿ‡ช Sweden: breathalyser tests

Retention & Minimisation, Legal basis | 30/06/2025

๐Ÿ›ณ๏ธ๐Ÿซง When daily breath tests sink GDPR compliance: the WÅAB case (Sweden) Regulator: IMY (Swedish DPA)Source: IMY-2024-1520, 18 June 2025 ๐Ÿ” The facts...

Read more

๐Ÿ“Œ Data Deletion Not Effectively Implemented

Legal basis | 08/04/2025

๐Ÿ“œ Data Blocking and Deletion : Breach of Article 32 of the LOPDGDD Source :PS-00176-2024   The AEPD imposed a €20,000 fine (reduced to €16,000 for e...

Read more

๐Ÿ‡ฌ๐Ÿ‡ท Health data and online publication

Data Subject Rights, Legal basis | 30/03/2025

๐Ÿ“ธ Doctor: Publication of post-op photos of a former patient... Source : N°50-2024 Greece ๐Ÿ’ฅ The Hellenic Data Protection Authority has issued an ex...

Read more

๐Ÿง Private club and GDPR

Biometrics & Video Surveillance, Tools & Documentation, Legal basis | 30/03/2025

๐Ÿ” Guestbook, video surveillance, privacy policy: when a company underestimates the GDPR (way too much). ๐Ÿ“Œ The Belgian Data Protection Authority (GBA/A...

Read more

๐Ÿšจ SS2I Inappropriate legal basis ๐Ÿšจ

Legal basis | 28/03/2025

๐Ÿ“ Greece | HDPA | €150,000 Fine ๐Ÿ” Following a complaint, the Hellenic Data Protection Authority (HDPA) investigated an IT services company (SS2I) reg...

Read more

๐Ÿ‡ซ๐Ÿ‡ท Collection form and Processing register

Tools & Documentation, Legal basis | 28/03/2025

๐Ÿ“… December 29, 2023 – CNIL Sanction๐Ÿ’ธ €75,000 fine imposed on a data broker๐Ÿ“„ Reference: SAN-2023-025 ๐ŸŽฏ Why? ๐Ÿ”น Misleading forms: The company collected ...

Read more

๐Ÿ‡ณ๐Ÿ‡ด Sharing data without a legal basis!

Data Transfers, Legal basis | 27/03/2025

๐Ÿ‡ณ๐Ÿ‡ด Norway: Dating App Fined for Illegal Disclosure of User Data ๐Ÿ‡ณ๐Ÿ‡ด The dating app Grindr, dedicated to gay, bi, trans, and queer individuals, with 13...

Read more

๐Ÿ‡ช๐Ÿ‡ธ An Employer Cannot Publish Personal Information About a Former Employee in Comments ๐Ÿ‡ช๐Ÿ‡ธ

Confidentiality & Security, Legal basis | 26/03/2025

Source : PS-00395-2021 ๐Ÿ‘๏ธ Facts: In response to negative reviews left by customers on Google, a Spanish café published the personal data of its form...

Read more

๐Ÿ‡ช๐Ÿ‡ธ Spain: An Influencer Sanctioned by the AEPD After Posting a Video on TikTok!

Data Subject Rights, Retention & Minimisation, Legal basis | 26/03/2025

๐Ÿ“ข Consent is Never Implicit! Source : PS 00471-2023 ๐Ÿ“ฑ A content creator posted a video on TikTok and Instagram, featuring a 13-year-old minor answe...

Read more

Explore all our areas of expertise:

]]>