Data Protection Matters

Resources

Privacy Updates

Regulatory news, decisions by data protection authorities and professional developments, newest first.

  1. Norway

    Norway Fines Adtech Company NOK 92 Million

    On October 12, the Norwegian Data Protection Authority announced a fine of NOK 92 million (approximately €8.6 million) against Xandr, an advertising technology company now owned by Microsoft.

  2. Italy, UK

    Court Accepts OpenAI Challenge to Fine; ICO Pushes Age Checks

    A Rome court accepted OpenAI's challenge to the Garante's €15 million fine, while the UK ICO fined Reddit and told platforms that self-declared age is not enough.

  3. European Union and United States

    Digital Omnibus proposal, FTC EdTech order, Data Privacy Framework appeal

    The Commission's Digital Omnibus is still a proposal, the FTC has proposed an order against an EdTech provider over student data security, and an appeal on the EU-US Data Privacy Framework is before the Court of Justice.

  4. California, EU

    California AB 656, the Delete Act and EDPS Generative AI Guidance

    California signed a law on social media account deletion, its data broker deletion platform is set to start processing requests in August 2026, and the EDPS revised its generative AI guidance for EU institutions.

  5. EU, International

    Digital Clearinghouse 2.0, Education AI and Hiring AI

    The EDPS proposes a forum for EU digital regulators, 1EdTech starts work on a framework for AI in education, and an Employ report finds 65% of recruiters use AI.