News

๐Ÿ‘‰ Non-compliant practices

Cookies & Trackers, Legal basis | 10/09/2025

๐Ÿ›ก๏ธ CNIL: €325M for Google & €150M for SHEIN — Enforcement on cookies & consent Regulator: CNILDecision, Google: SAN 2025-004Decision, SHEIN: SAN 2025...

Read more

๐Ÿ‡ช๐Ÿ‡ธ ๐Ÿšซ ๐Ÿ”€ No misuse of purpose

Legal basis | 10/09/2025

๐Ÿšจ โŒ AEPD – No illegal data repurposing: €1,200 penalty after acknowledgment of responsibility Regulator: AEPDDecision: PS-00181-2025, 2025-09-01 An ...

Read more

๐Ÿ”’ HR & Facebook

Legal basis | 18/07/2025

HR teams: stop mining employees’ Facebook posts. ๐Ÿ”Ž Autostrade per l’Italia fined €420,000 for… “screening” an employee’s Facebook ๐Ÿ‡ฎ๐Ÿ‡น Regulator: GPDP ...

Read more

๐Ÿ“š TOS update

Data Transfers, Legal basis | 18/07/2025

๐Ÿšš๐Ÿ“ฆ WeTransfer: when a simple TOS update raises an GDPR tsunami On 15 July, WeTransfer discreetly slipped the following statement into its new TOS: ‘W...

Read more

๐Ÿ“ข Spain, excessive data collection!

Data Subject Rights, Retention & Minimisation, Legal basis | 08/07/2025

๐Ÿ“ข Do you work in the hotel industry ๐Ÿ‡ช๐Ÿ‡ธ? Is your privacy policy really up to date? ๐Ÿ‘๏ธ If you go to a hotel in Spain ๐Ÿ‡ช๐Ÿ‡ธ Expect to fill in a form with 4...

Read more

๐Ÿ‡ธ๐Ÿ‡ช Sweden: breathalyser tests

Retention & Minimisation, Legal basis | 30/06/2025

๐Ÿ›ณ๏ธ๐Ÿซง When daily breath tests sink GDPR compliance: the WÅAB case (Sweden) Regulator: IMY (Swedish DPA)Source: IMY-2024-1520, 18 June 2025 ๐Ÿ” The facts...

Read more

๐Ÿ“Œ Data Deletion Not Effectively Implemented

Legal basis | 08/04/2025

๐Ÿ“œ Data Blocking and Deletion : Breach of Article 32 of the LOPDGDD Source :PS-00176-2024   The AEPD imposed a €20,000 fine (reduced to €16,000 for e...

Read more

๐Ÿ‡ฌ๐Ÿ‡ท Health data and online publication

Data Subject Rights, Legal basis | 30/03/2025

๐Ÿ“ธ Doctor: Publication of post-op photos of a former patient... Source : N°50-2024 Greece ๐Ÿ’ฅ The Hellenic Data Protection Authority has issued an ex...

Read more

๐Ÿง Private club and GDPR

Biometrics & Video Surveillance, Tools & Documentation, Legal basis | 30/03/2025

๐Ÿ” Guestbook, video surveillance, privacy policy: when a company underestimates the GDPR (way too much). ๐Ÿ“Œ The Belgian Data Protection Authority (GBA/A...

Read more

๐Ÿ‡ซ๐Ÿ‡ท Collection form and Processing register

Tools & Documentation, Legal basis | 28/03/2025

๐Ÿ“… December 29, 2023 – CNIL Sanction๐Ÿ’ธ €75,000 fine imposed on a data broker๐Ÿ“„ Reference: SAN-2023-025 ๐ŸŽฏ Why? ๐Ÿ”น Misleading forms: The company collected ...

Read more

๐Ÿšจ SS2I Inappropriate legal basis ๐Ÿšจ

Legal basis | 28/03/2025

๐Ÿ“ Greece | HDPA | €150,000 Fine ๐Ÿ” Following a complaint, the Hellenic Data Protection Authority (HDPA) investigated an IT services company (SS2I) reg...

Read more

๐Ÿ‡ณ๐Ÿ‡ด Sharing data without a legal basis!

Data Transfers, Legal basis | 27/03/2025

๐Ÿ‡ณ๐Ÿ‡ด Norway: Dating App Fined for Illegal Disclosure of User Data ๐Ÿ‡ณ๐Ÿ‡ด The dating app Grindr, dedicated to gay, bi, trans, and queer individuals, with 13...

Read more

Explore all our areas of expertise:

]]>