News & Analysis as of July 24, 2025

Enforcement Actions

+ Follow

The European Union is an economic and political partnership comprised of 27 nations within the Eurozone. The EU was established in 1948 to promote stability and cooperation among member states in the aftermath of WWII. The EU maintains a common currency as well as several intranational institutions, including the European Parliament and the European Commission. less -

Constangy Clips Ep. 10 - 3 Ways the GDPR Is Evolving with Today’s Tech Landscape

Constangy, Brooks, Smith & Prophete, LLP on 5/21/2025

In recognition of the GDPR's 7th anniversary on May 25, 2025, Constangy Cyber Team member Matthew Basilotto explores how the European Union’s General Data Protection Regulation (GDPR) continues to adapt in the face of...more

Irish Data Protection Commission Fines TikTok Over EEA Data Transfers to China

Maynard Nexsen on 5/12/2025

On May 2, 2025, the Irish Data Protection Commission (“DPC”) issued a decision, as lead supervisory authority, finding that TikTok infringed the GDPR regarding (a) its cross-border transfers of EEA User Data to China, and (b)...more

GDPR Enforcement is Alive and Well - Key Considerations in 2025

Smith Anderson on 2/13/2025

As 2025 progresses, one thing is clear—GDPR enforcement is not slowing down. In fact, regulators across Europe are intensifying their scrutiny, handing out significant fines and even warning executives of potential personal...more

Massive fine for Uber of EUR 290 million

Ius Laboris on 8/28/2024

On 26 August the Dutch Data Protection Authority (DPA) fined Uber EUR 290 million for a breach of the General Data Protection Regulation (GDPR). Following a number of complaints from French Uber drivers, the DPA found that...more

What You Should Know About the EU Data Governance Act

Alston & Bird on 10/16/2023

Last month, the European Union’s new Data Governance Act (DGA) came into effect. Our Privacy, Cyber & Data Strategy Group provides an overview of the key features of the DGA and discusses how the new law may impact businesses...more

CNIL Fines Health Website for Unlawful Data Processing

Latham & Watkins LLP on 6/12/2023

The French Data Protection Authority imposed a €280,000 fine for GDPR infringements and a €100,000 fine for violation of French cookie rules. On 11 May 2023 the French Data Protection Authority (the CNIL) handed down its...more

European Privacy Risk Exposure

McDermott Will & Emery on 1/30/2023

2022 was yet another eventful year in terms of GDPR compliance. The continued evolution of the enforcement landscape, with increasing number of sanctions and individuals exercising their rights required time and attention...more

International Data Protection Update - Winter 2021/2022

BakerHostetler on 3/15/2022

This Update highlights some of the international data protection issues that caught our attention and the attention of our clients over the winter, including updates on European data transfers and cookie compliance,...more

Dutch DPA takes position on online tracking, advises companies to immediately stop using IAB framework

Hogan Lovells on 2/9/2022

The Dutch Data Protection Authority (Dutch DPA) recommends that Dutch websites stop using the IAB framework and other similar tools for tracking users, reports a Dutch newspaper (only in Dutch). The recommendation of the...more

Federal Judge Concludes Entity Subject to CCPA Despite Assertion It Is Not a “Business”

ArentFox Schiff on 9/22/2021

In Blackbaud Inc. Customer Data Security Breach Litigation, No. 3:20-mn-02972 (D.S.C. Aug. 12, 2021), a federal judge found that defendant, Blackbaud Inc. was subject to the CCPA despite its motion to dismiss asserting that...more

International News: Healthcare - Spotlight on the Industry - May 2021

McDermott Will & Emery on 5/5/2021

Sovereign Wealth Fund Investment in the Global Healthcare Industry - Sovereign Wealth Funds (SWF) seek out investments that are resilient, conducive to their aims and objectives, and reasonably free from market...more

German court drastically reduces GDPR fine

Hogan Lovells on 11/18/2020

Germany has seen a couple of record GDPR fines since the German Data Protection Authorities (DPA) issued their guidance paper on how to measure GDPR fines in October 2019. One of these DPA sanctions was recently subject to...more

EU Data Protection Authority Levies Its First Fine for Violations of the GDPR

Carlton Fields on 9/9/2020

The French Data Protection Authority, CNIL, has levied its first fine for enforcement of the General Data Protection Regulation (GDPR). The enforcement target, Spartoo, is a French online shoe retailer that makes its website...more

Privacy & Cybersecurity Update - July 2020

Skadden, Arps, Slate, Meagher & Flom LLP on 8/6/2020

In this month's edition, we examine the Court of Justice of the European Union's decision invalidating the EU-U.S. Privacy Shield framework, as well as the U.S. government's response to the decision. We also examine two...more

Financial Services Weekly Roundup: The OCC’s True Lender Test Embraces A Simplified Solution

Goodwin on 7/23/2020

In This Issue. The Office of the Comptroller of the Currency (OCC) proposed a rule that would establish that a national bank or federal savings association is the “true lender” of a loan if, as of the date of origination, the...more