News & Analysis as of August 1, 2025

Enforcement Actions

+ Follow

Follow this channel for updates and analysis on all aspects of the European Union's General Data Protection Regulation, a reform of EU's data protection rules that impacts... more +

Follow this channel for updates and analysis on all aspects of the European Union's General Data Protection Regulation, a reform of EU's data protection rules that impacts individuals throughout the Union and all businesses operating therein. less -

Constangy Clips Ep. 10 - 3 Ways the GDPR Is Evolving with Today’s Tech Landscape

Constangy, Brooks, Smith & Prophete, LLP on 5/21/2025

In recognition of the GDPR's 7th anniversary on May 25, 2025, Constangy Cyber Team member Matthew Basilotto explores how the European Union’s General Data Protection Regulation (GDPR) continues to adapt in the face of...more

Irish Data Protection Commission Fines TikTok Over EEA Data Transfers to China

Maynard Nexsen on 5/12/2025

On May 2, 2025, the Irish Data Protection Commission (“DPC”) issued a decision, as lead supervisory authority, finding that TikTok infringed the GDPR regarding (a) its cross-border transfers of EEA User Data to China, and (b)...more

GDPR Enforcement is Alive and Well - Key Considerations in 2025

Smith Anderson on 2/13/2025

As 2025 progresses, one thing is clear—GDPR enforcement is not slowing down. In fact, regulators across Europe are intensifying their scrutiny, handing out significant fines and even warning executives of potential personal...more

Massive fine for Uber of EUR 290 million

Ius Laboris on 8/28/2024

On 26 August the Dutch Data Protection Authority (DPA) fined Uber EUR 290 million for a breach of the General Data Protection Regulation (GDPR). Following a number of complaints from French Uber drivers, the DPA found that...more

Will the U.S. Have a GDPR? With Rachael Ormiston of Osano

Osano on 7/9/2024

In this episode of The Privacy Insider Podcast, host Arlo Gilbert is joined by Rachael Ormiston, Head of Privacy at Osano, to dive into the complex world of U.S. privacy regulations. How does the U.S. view privacy differently...more

What You Should Know About the EU Data Governance Act

Alston & Bird on 10/16/2023

Last month, the European Union’s new Data Governance Act (DGA) came into effect. Our Privacy, Cyber & Data Strategy Group provides an overview of the key features of the DGA and discusses how the new law may impact businesses...more

CNIL Fines Health Website for Unlawful Data Processing

Latham & Watkins LLP on 6/12/2023

The French Data Protection Authority imposed a €280,000 fine for GDPR infringements and a €100,000 fine for violation of French cookie rules. On 11 May 2023 the French Data Protection Authority (the CNIL) handed down its...more

European Privacy Risk Exposure

McDermott Will & Emery on 1/30/2023

2022 was yet another eventful year in terms of GDPR compliance. The continued evolution of the enforcement landscape, with increasing number of sanctions and individuals exercising their rights required time and attention...more

Dutch DPA takes position on online tracking, advises companies to immediately stop using IAB framework

Hogan Lovells on 2/9/2022

The Dutch Data Protection Authority (Dutch DPA) recommends that Dutch websites stop using the IAB framework and other similar tools for tracking users, reports a Dutch newspaper (only in Dutch). The recommendation of the...more

German court drastically reduces GDPR fine

Hogan Lovells on 11/18/2020

Germany has seen a couple of record GDPR fines since the German Data Protection Authorities (DPA) issued their guidance paper on how to measure GDPR fines in October 2019. One of these DPA sanctions was recently subject to...more

EU Data Protection Authority Levies Its First Fine for Violations of the GDPR

Carlton Fields on 9/9/2020

The French Data Protection Authority, CNIL, has levied its first fine for enforcement of the General Data Protection Regulation (GDPR). The enforcement target, Spartoo, is a French online shoe retailer that makes its website...more

Update on Global Data Privacy Regulations by John Jackson

Jackson Walker on 8/26/2020

Cybersecurity and data privacy regulations were complicated well before the global pandemic. Since COVID-19 swept the world, Brazil has delayed enacting its new general data protection law, California's CCPA has gone through...more

Privacy & Cybersecurity Update - July 2020

Skadden, Arps, Slate, Meagher & Flom LLP on 8/6/2020

In this month's edition, we examine the Court of Justice of the European Union's decision invalidating the EU-U.S. Privacy Shield framework, as well as the U.S. government's response to the decision. We also examine two...more

Financial Services Weekly Roundup: The OCC’s True Lender Test Embraces A Simplified Solution

Goodwin on 7/23/2020

In This Issue. The Office of the Comptroller of the Currency (OCC) proposed a rule that would establish that a national bank or federal savings association is the “true lender” of a loan if, as of the date of origination, the...more