EU GDPR

Binary code with EU flag showing GDPR privacy law reform

European Commission Changes to EU Privacy Laws Skewered by Privacy Advocates

November 19, 2025

While the proposed EU privacy law changes seem almost entirely like concessions to big tech desires at first glance, the European Commission is selling them as removement of onerous restrictions on smaller businesses. Critics such as noyb are calling this a "side-show" meant to pass changes that are instead really tailored to the tech industry.

Data Protection News

ChatGPT Racking Up Privacy Complaints in EU, Regulators Asked to Investigate

April 17, 2023

CNIL said that it is following up on "several" privacy complaints, and Spain is looking to put the ChatGPT topic on the Plenary of the European Data Protection Committee's discussion schedule.

The Federal Palace or Bundeshaus showing international data transfers and GDPR

Data Protection Insights

International Transfers of Personal Data and Privacy Contracting: How Switzerland Wins Over UK Both in Terms of Business-Friendliness and EU Convergence

November 2, 2022

Both countries, while accepting the EU standard contractual clauses as a compliance transfer mechanism still requires the clauses to be amended to reflect their own legal requirements. The big difference is that the Swiss requirements are very simple.

Globe with data flow showing privacy enhancing technology and UK data reform bill

Data Protection Insights

Privacy Enhancing Technology Can Solve the UK’s Data Reform Bill Protection Concerns

November 1, 2022

Instead of introducing an entirely new regime, the UK Government should explore the use of privacy enhancing technology to enable organisations to share and analyse personal data in a privacy-preserving manner, to create opportunities and unlock the power of data using innovative and trustworthy applications.

People talking in front of Facebook building showing corruption complaint against Irish DPC for GDPR case

Data Protection News

Irish DPC Faces Corruption Complaint From Activist Group

November 30, 2021

Privacy activism group noyb, which has made headlines for its high-profile cases against Facebook in the EU, has brought a corruption complaint against the Irish DPC over its handling of a case that dates back years.

European Parliament building with flags waving showing privacy commissioner complain of GDPR

Data Protection News

Outgoing Privacy Commissioner Calls GDPR “Broken,” Says That Basic Model “Can’t Work”

July 1, 2021

After 12 years at the head of the Hamburg data protection commission, Johannes Caspar is stepping down. The privacy commissioner returns to academia disillusioned with the GDPR, calling it "broken" and lamenting infighting.

Toddler baby boy sitting in car seat and watching a video from Youtube showing children's privacy violation

Data Privacy News

YouTube Faces $3.2 Billion UK Lawsuit Over Children’s Privacy Violations

September 25, 2020

Children’s privacy violations is a problem that is common to big tech companies in targeted advertising: screening out minors who are entitled to enhanced data protection rights.

Hammer and gavel on Euros showing privacy complaints targeting data transfers

Data Protection News

Flood of Privacy Complaints Following Schrems II Decision Target Data Transfers to US

August 27, 2020

Max Schrems, chairperson of noyb, has directed his organization to file over 100 privacy complaints against major businesses engaging in data transfers with the US.

Data Protection Insights

Tracking the Trackers: Cookies Are Subject to Opt-In Under GDPR and a Sale Under the CCPA

August 26, 2020

Those little automated data tracking mechanisms are subject to special treatment, consent, opt in and opt out requirements. Have you properly accounted for cookies for GDPR and CCPA?

Young woman wearing surgical mask using smart phone app showing lack of data protection impact assessment for UK Test and Trace, in violation of GDPR

Data Protection News

UK Test and Trace Program Has Yet to Undergo a Data Protection Impact Assessment, May Be in Violation of the GDPR

August 7, 2020

Privacy advocate groups allege that UK Test and Trace rushed the process and did not conduct the necessary data protection impact assessment that the GDPR requires for collection of personal data on this sort of scale.