The CJEU has decided that the maximum thresholds for GDPR fines should be calculated using the global turnover of the broader corporate group, not solely the infringing entity. The penalties ...

The Italian Data Protection Authority (the Garante) has issued its first GDPR fine for, among other breaches, unlawful retention of metadata from employees’ emails and web browsing activities. The ...

Fines for violations of the European Union's landmark privacy law have soared nearly sevenfold in the past year, according to new research. EU data protection authorities have handed out a total of $1 ...

Data protection authorities imposed over €1 billion in fines in 2024, but activists complain that violations of the law far too rarely result in penalties. Data protection authorities in Europe ...

The number of organizations notifying their GDPR regulator of a data breach surged by 22% to a daily average of 443 in 2025, according to DLA Piper. The global law firm has been analyzing GDPR ...

Microsoft 365 Copilot has introduced a default 'flex routing' feature that can process European user data in the US, Canada, or Australia during peak loads, raising potential GDPR compliance issues.

GDPR fines reached €68 million in the first quarter of 2026, driven largely by France and the U.K. The General Data ...

Even though 88% of businesses spend over €1 million on GDPR compliance and 40% invest up to €10 million, 80% of their employees still ignore basic password security practices. The formal risk is ...

Microsoft deputy general counsel Julie Brill spoke with European Data Protection Board chairwoman Andrea Jelinek about lessons learned from the GDPR one year in and ...

Spain’s €1M ($1.1 million) fine on LaLiga premier football league underscores the challenge of balancing privacy rights with public safety as sports leagues increasingly use biometric systems at ...

The European Union has investigated itself and found…actual wrongdoing! For the first time ever, the EU has been found to have violated its own privacy rules established by the General Data Protection ...