[{"url":"https://www.ftc.gov/business-guidance/blog/2019/09/ftc-asks-do-consumers-notice-class-action-notices","titre":"FTC asks “Do consumers notice class action notices?”","pubDate":"Tue, 06 Oct 2026 08:06:23 +0200","source":"FTC USA Business Blog Posts","description":"FTC asks “Do consumers notice class action notices?” lfair September 9, 2019 | 11:17AM FTC asks “Do consumers notice class action notices?” By Lesley Fair Do consumers notice consumer class action notices? That’s one of the topics that experts will discuss at an upcoming FTC workshop on issues related to communicating with consumers about class actions . Set for October 29, 2019, in Washington, DC, Consumers and Class Action Notices: An FTC Workshop will feature panelists from a wide range of perspectives exploring what the research suggests about notice methods, claims rates, and redress – and what can be done to improve consumer participation in class action settlements. To enhance our understanding of the issues, FTC staff just released a report summarizing the findings of two studies involving consumer class actions. In the first study, we looked at a sample of more than 140 cases and analyzed how variables like notice methods and compensation amounts affected consumer claims and check-cashing rates. A second staff study explored consumer perceptions of class action notices, including whether people understood their options. Consumer class actions have been an issue of long-standing interest to the FTC. For more than a decade, the agency’s Class Action Fairness Project has worked to ensure that settlements in consumer protection and competition matters provide appropriate benefits to consumers. To that end, the FTC has coordinated with state, federal, and private groups to gather information; looked at the impact of legislative and class action rule changes; and – where appropriate – filed amicus briefs. Free and open to the public, Consumers and Class Action Notices will take place at the FTC’s Constitution Center conference facility, 400 7th Street, S.W., in Washington. We’ll post the agenda soon, but in the meantime, we welcome your comments , including additional consumer perception evidence. We’ll keep the record open until November 22, 2019. Can’t make it to DC on October 29th? The event will be webcast.","id":3199071},{"pubDate":"Fri, 02 Oct 2026 08:34:17 +0200","url":"https://www.berec.europa.eu/en/public-consultations-calls-for-inputs/public-consultation-on-the-draft-berec-work-programme-2027","titre":"Public consultation on the draft BEREC Work Programme 2027","source":"BEREC Office","id":3193166,"description":"Public consultation on the draft BEREC Work Programme 2027 yannick.stephan Thu, 01/10/2026 - 09:00 Breadcrumbs Public Consultations & Calls for Inputs Deadline to submit contributions:  31 October 2026 In January this year, BEREC adopted the Outline BEREC Work Programme 2027 , which reflected BEREC's objectives for the upcoming year. BEREC launched a first Call for inputs on the Work Programme 2027 from 27 February to 15 April. During the call for proposals, several additional actions were identified. Considering the early input received, during the 68th BEREC ordinary meetings (1-2 October 2026), the Board of Regulators adopted the draft BEREC Work Programme 2027 [BoR (26) 142] for public consultation. Background BEREC prepares its annual work programme in accordance with Article 21 of the BEREC Regulation and the BEREC Strategy 2026-2030 to guide how it organises and prioritises its work towards clearly defined objectives. The 2027 draft work programme was developed inclusively and transparently, with contributions from various stakeholders. This approach helps ensure that BEREC remains responsive to market needs, regulatory developments, and end-user expectations. Aim The BEREC Work Programme 2027 aims to align with the BEREC Strategy 2026-2030 and its five strategic pillars: Promoting full connectivity and the Digital Single Market; Supporting competition-driven and open digital ecosystems; Empowering end-users; Contributing to sustainable, secure, and resilient digital infrastructures; Strengthening BEREC’s capabilities and continuous improvement. The work programme will also take into consideration priorities set for BEREC’s institutional and international cooperation. Furthermore, the 2027 work programme has been developed against the backdrop of the ongoing review of the regulatory framework and the European Commission’s proposal for a Digital Networks Act, published in January 2026. This piece of legislation is meant to be the cornerstone shaping the future of the sector in the EU. As an advisory body to EU institutions for electronic communications, BEREC is committed to providing expert, independent advice to co-legislators and the European Commission throughout the legislative procedure. BEREC also aims to provide support and advice on other relevant policy developments. In addition to the mandatory work foreseen in the EU regulatory framework, the BEREC work programme follows a multiannual approach, meaning some projects started in 2026 will be completed in 2027 and are therefore included as carryovers. Additionally, recurring items are considered by default. Submit your contributions The incoming BEREC Chair 2027, Alejandra de Iturriaga Gandini (CNMC, Spain), encourages all interested stakeholders to provide their views and contributions to the draft BEREC Work Programme 2027 by submitting them to BEREC-WP2027@DISTRO.BEREC.EUROPA.EU by 31 October 2026 . After submitting the contribution, you will receive an automatic acknowledgement email. If you do not receive this acknowledgement, please contact the BEREC Office. Contributions should be sent preferably in English, and, to facilitate processing of the responses, the comments provided should clearly refer to specific paragraphs of the document. In accordance with the BEREC policy on public consultations , BEREC will publish all contributions and a summary thereof, respecting confidentiality requests. In that regard, please clearly mark the parts you define as confidential. We strongly encourage all stakeholders to submit their contributions as early as possible. Contributions received after the above-mentioned deadline will not be taken into account. Privacy statement type Privacy Statement for Public Consultation Category Name Ongoing Public Consultations and Calls for Inputs Notify subscribers"},{"source":"Federal Trade Commission - Protecting America's Consumers","id":3176041,"description":"The Federal Trade Commission announced today that is considering whether to update its Rule on Impersonation of Government and Businesses or take other action to prevent online platforms from engaging in ad-optimization practices that may be furthering impersonation scams. In an Advance Notice of Proposed Rulemaking (ANPRM) to be published in the Federal Register , the FTC is seeking comment on the extent to which ad-optimization tools and services offered by social media, search engines and other digital marketplace platforms further efforts by scammers to impersonate legitimate businesses and government agencies using online ads.  “Free markets depend on trust, transparency and consumers’ ability to make informed choices. Impersonation scams—especially when amplified by digital platforms that profit from them—do more than rob Americans of their hard-earned money,” said Christopher Mufarrige, Director of the FTC’s Bureau of Consumer Protection. “They erode the very foundation that allows competitive markets to function. Today’s impersonation scams are no longer the work of isolated con artists; they are sophisticated, highly engineered operations powered by the same advertising and targeting tools that platforms sell to legitimate businesses. Consumers reported nearly $3.5 billion in losses to impersonation fraud last year, and the true cost is likely far higher. “The Commission’s mission has always been to safeguard the conditions under which competitive markets can thrive. Increasingly, consumers rely on a small number of dominant digital platforms for everyday transactions—from shopping, banking and travel bookings to accessing government services. Yet these platforms are the very places fraudsters seek out consumers, exploiting their trust while platforms profit from optimizing and disseminating scam ads. “Today’s advance notice of proposed rulemaking asks whether the Commission should require platforms to take concrete steps to prevent impersonation ads from ever reaching consumers. By exploring potential new obligations platforms would have to follow, the rulemaking aims to ensure that Americans participate in an online economy where truthful information guides consumer choice.”  Impersonation scams have topped the list of fraud complaints reported to the FTC by consumers in recent years. In 2025, the FTC received more than 1 million reports about imposter scams from consumers, who reported losing nearly $3.5 billion to such scams. In addition, online platforms play an important role in many scams. For example, nearly 30% of consumers who reported losing money to scammers in 2025 said they were first contacted on social media platforms, with reported losses reaching $2.1 billion. The ANPRM notes that impersonation scams have been amplified by search engines, social media and other digital marketplace platforms that profit from optimizing online ads for third parties, regardless of whether the third parties are legitimate. The ANPRM seeks comment on a wide range of topics related to the use of these ad-optimization tools and services and the proliferation of ads that impersonate businesses and government agencies including:  The financial incentives driving these platforms to offer ad-optimization tools and services, details on how each tool and service optimizes the content and delivery of the ad, and the steps platforms currently take to prevent the use of such tools and services for deceptive advertising The extent to which these platform ad-optimization tools and services constitute unfair or deceptive acts or practices by furthering impersonation scams Whether these unfair or deceptive acts or practices are prevalent in the marketplace and whether the Commission should address these acts or practices by amending the existing Impersonation Rule, proposing a new separate rule or implementing non-regulatory Measures Measures the Commission could consider in crafting any new regulations, including vetting","pubDate":"Fri, 25 Sep 2026 08:10:48 +0200","titre":"FTC Seeks Public Comment on Whether to Update Rule on Impersonation of Government and Businesses to Address Platforms’ Role in Promoting Impersonation Scams","url":"https://www.ftc.gov/news-events/news/press-releases/2026/09/ftc-seeks-public-comment-whether-update-rule-impersonation-government-businesses-address-platforms"},{"source":"Federal Trade Commission - Protecting America's Consumers","id":3160549,"description":"FleetCor and its CEO will pay $100 million to settle a Federal Trade Commission administrative action alleging that the company charged its customers, who overwhelmingly are small businesses, undisclosed fees in connection with their use of fuel cards that FleetCor falsely promised businesses would save them money. In a complaint first filed in federal court in 2019 , the FTC alleged that FleetCor Technologies Inc., now known as Corpay Inc., and its CEO Ronald Clarke imposed a broad array of unauthorized fees that its customers never knew about and did not agree to pay, totaling hundreds of millions of dollars and harming tens of thousands of customers.  In addition, FleetCor charged late fees to customers who had either paid on time or were prevented by FleetCor from paying on time. FleetCor also misrepresented the gas savings, fraud-control features, and fees associated with its fuel cards. “FleetCor deceived its small business customers by promising fuel savings that never materialized, while unfairly charging them hidden and unauthorized fees,” said Christopher Mufarrige, Director of the FTC’s Bureau of Consumer Protection. “In addition to the relief the FTC has obtained in federal court, this order will help return money to the customers the company took advantage of.” According to the complaint, FleetCor often waited to begin charging many fees until several billing cycles passed, making the fees less noticeable to consumers. The complaint also alleged that FleetCor’s invoices did not disclose that any fees were being charged, requiring customers to proactively view other account management reports. Even on those documents, many fees were obscured among other information or not listed at all. In 2023, a federal district court entered summary judgment for the FTC on all counts, finding that FleetCor had charged its customers hidden or otherwise unauthorized fees and misrepresented the gas savings and fees associated with FleetCor’s fuel cards. The court-imposed order permanently prohibits FleetCor from: billing a customer for any charge unless FleetCor has obtained the customer’s express informed consent and provided clear and unavoidable information about the charge; hiding material information about a charge behind a hyperlink; and making deceptive claims about its fuel cards. In 2026, a federal appeals court upheld the summary judgment against FleetCor on all counts and affirmed the permanent injunction against it.  The court affirmed the judgment against Clarke on all but one count and vacated the injunction as to Clarke.  As part of the settlement order with the FTC, FleetCor and Clarke will pay $100 million, which will be used to provide redress to the company’s business customers harmed by its practices. FleetCor and Clarke have also agreed not to oppose reimposition of a federal court injunction against Clarke.  The Commission vote to accept the consent agreement was 1-0-1. FTC Chairman Andrew N. Ferguson is recused. The FTC will publish a description of the consent agreement in the Federal Register soon. The agreement will be subject to public comment for 30 days after publication in the Federal Register after which the Commission will decide whether to make the proposed consent order final. Instructions for filing comments will appear in the published notice. Once processed, comments will be posted on Regulations.gov. NOTE: When the Commission issues a consent order on a final basis, it carries the force of law with respect to future actions. Each violation of such an order may result in a civil penalty of up to","pubDate":"Fri, 18 Sep 2026 08:08:58 +0200","url":"https://www.ftc.gov/news-events/news/press-releases/2026/09/fleetcor-agrees-pay-100-million-resolve-administrative-action-after-federal-court-finds-it-violated","titre":"FleetCor Agrees to Pay $100 Million to Resolve Administrative Action After Federal Court Finds that It Violated the FTC Act by Charging Unauthorized Fees"},{"description":"New data from the Federal Trade Commission reveal that people reported losing a staggering $3.5 billion to imposter scams in 2025, with reported losses increasing nearly three times since 2020. FTC data also show that people reported imposter scams more than any other fraud category in 2025—nearly one in three fraud reports were about imposter scams. These scams lured consumers through text, phone, email, social media, search engine results and other means. Some of the costliest impersonation scams start with a fake security alert, often from a bank. People are convinced to move money to “protect” it, with their losses often limited only by their available funds. Last year, people reported losing nearly $1 billion to business impersonators with the highest reported losses to bank impersonators—and about $920 million to government impersonators, up from $866 million and $789 million respectively in 2024. The FTC has seen a striking increase in reported fraud losses to all types of fraud—about $16 billion was reported lost in 2025, the highest on record and an increase of about 25% compared to the 2024 figure. “Consumers derive enormous benefits from competitive markets built on truthful information. But fraud undermines that foundation, impeding the market process and preventing markets from operating efficiently,” said Christopher Mufarrige, Director of the Bureau of Consumer Protection. “The FTC will use every tool available to combat one of the most pernicious forms of fraud—government and business impersonation—and to protect the integrity of the digital economy.” The data underscore the importance of the FTC’s work with the  Elder Justice Coordinating Council (EJCC) , which is working to help raise awareness of imposter scams and other scams impacting older adults as well as other consumers. This year, the FTC, along with the Department of Justice, Department of Health and Human Services and members of the EJCC, is leading the Never Ever campaign, a public-private coordinated consumer education effort to raise awareness of government and business imposter scams. In addition to the federal agency members of the EJCC , the campaign also includes private sector representatives such as the American Bankers Association, USTelecom, Google and Microsoft. To help the public spot imposter scams, EJCC members launched the Never Ever campaign, which is aimed at promoting messaging on the key actions that government and businesses will Never Ever take. The Never Ever campaign will run from June 15 to June 26, in conjunction with World Elder Abuse Awareness Day. This first-of-its-kind public-private partnership includes participants from a wide range of organizations and is aimed at directing consumers to a website that includes information and resources to help them avoid imposter scams and what to do if they spot one. Enforcement Actions To help combat impersonation scams, the FTC in 2024 finalized the Impersonation Rule. The Rule gives the agency stronger tools to combat and deter scammers who impersonate government agencies and businesses, enabling the FTC to file federal court cases seeking to get money back to injured consumers and civil penalties against rule violators. Since then, the FTC has vigorously enforced the rule and brought a dozen enforcement actions that have resulted in halting imposter schemes and obtained over $70 million in redress for consumers. In 2025, the FTC brought law enforcement actions under the Impersonation Rule against:  American Tax Service (IRS imposter scheme);  MediaAlpha (government imposter scheme to sell health insurance);  Click Profit (business imposter money making scam);  Blackstone Legal (phantom debt business imposter scheme) and  Accelerated Debt Settlement (government and business imposter scheme that targeted older adults for debt relief). More recently, the  FTC filed a complaint against Innovative Partners in April 2026 , alleging the operators","id":2959787,"source":"Federal Trade Commission - Protecting America's Consumers","url":"https://www.ftc.gov/news-events/news/press-releases/2026/06/ftc-data-show-people-reported-losing-3-point-5-billion-imposter-scams-2025","titre":"FTC Data Show People Reported Losing $3.5 Billion to Imposter Scams in 2025","pubDate":"Tue, 16 Jun 2026 08:09:40 +0200"},{"id":2900811,"description":"The French regulatory authority for audiovisual and digital communication, Having regard to the French intellectual property code , in particular article L. 331-12 ; Having regard to the French Sports Code , in particular article L.333-10 ; After due deliberation, Adopts the following notice: The year 2025 marked a turning point in the fight against sports broadcasting piracy, with increased involvement of various types of intermediaries, under the impetus of sports rights holders, as part of the dynamic injunctions issued under article L. 333-10 of the French Sports Code . In addition to the legal actions involving Internet Service Providers (ISPs), which have been fully integrated into the scheme since 2022, and in order to strengthen the effectiveness of the blocking measures implemented, rights holders have extended their legal actions, from 2023, to search engine operators, who play a key role as central players in the diffusion of information on the internet and in directing users to sports-related contdnt. Search engine operators are now almost systematically involved in actions taken by rights holders to protect sports competitions. Between 2024 and 2025, the number of delisting measures ordered by the courts and the number of measures notified by Arcom in application of the orders issued has dubbed. In response to the misuse by some Internet users of domain name resolution services or virtual private networks (VPNs), rights holders then extended the scope of players taken to court to prevent access to services dedicated to the unlawful broadcasting of sports competitions. More than 5,000 blocking demands were notified to alternative DNS in 2025. As for virtual private network service providers, they were the subject of the first court verdicts, handed down on the basis of article L. 333-10 of the French Sports Code , in May 2025, and as such are receiving a growing number of blocking demands to update the measures ordered by the judge. Against this backdrop, strengthening cooperation between rights holders of sports-related content and the various intermediaries mentioned in the court orders would therefore appear to be desirable in order to give an even greater impact to the fight agains sports piracy. The parties are also invited to continue their exchanges with Arcom with a view to optimizing the provision of identification data and ensuring the simultaneous application of delisting and blocking measures by all technical intermediaries involved in preventing access to unlawful services. Article L. 331-12 of the French intellectual property code makes provision for the adoption of notices by the Authority for the protection and promotion of creation, with the aim of encouraging the signing of voluntary agreements likely to help remedy infringements of copyright and neighbor rights, or of the audiovisual exploitation rights mentioned in article L. 333-10 of the French Sports Code, on electronic communications networks used for the provision of online public communication services. In addition, under the terms of IV of article L. 333-10 of the French Sports Code, Arcom is responsible for adopting model agreements which the rights holders mentioned in I of the same article are invited to sign. The agreement concluded between the parties specifies, in particular, the measures that the parties undertake to take to put an end to any infringement of the exclusive audiovisual exploitation rights of the sports event or competition. The Autorité recommends that the rights holders mentioned in I of article L. 333-10 of the French Sports Code, on the one hand, and any intermediaries implementing measures ordered on the basis of II of article L. 333-10 of the same code, on the other (notably search engine operators, domain name resolution services and virtual private network providers), enter into discussions with a view to concluding agreements that would reflect their joint commitment to fight agains the unlawful diffusion of sports-related events and competitions as effectively as possible. To this end, Arcom is","source":"Arcom Textes juridiques","pubDate":"Fri, 22 May 2026 14:08:22 +0200","titre":"Arcom's notice of May 6, 2026 accompanying the publication of model agreements provided for in article L333-10 of the French Sports Code.","url":"https://www.arcom.fr/en/find-out-more/legal-area/legal-resources/arcoms-notice-may-6-2026-accompanying-publication-model-agreements-provided-article-l333-10-french-sports-code"},{"pubDate":"Sat, 25 Apr 2026 08:02:05 +0200","url":"https://anj.fr/uefa-european-football-championship-and-sports-betting-french-gambling-authority-anj","titre":"UEFA European Football Championship and sports betting: the French Gambling Authority (ANJ) gathers operators and announces a dynamic and structuring action plan","id":2847428,"description":"UEFA European Football Championship and sports betting: the French Gambling Authority (ANJ) gathers operators and announces a dynamic and structuring action plan admin lun 13/09/2021 - 16:45 On 20 July 2021, the French Gambling Authority (ANJ) gathered sports betting’s operators in order to make the overview of the European Football Championship that has been scarred by some abuses. Resulting from a constructive exchange, these operators have agreed on the necessity to proceed at a rebalancing of their practices in order to preserve the recreational model of the French gambling market. As such, the ANJ introduced an action plan that seeks to reinforce operators’ compliance, to adapt and complete existing tools and, where required, to use sanctioning procedures. English Questionable practices highlighted during the European Football Championship UEFA European Football Championship 2021 confirmed the growing place of sports bets in France with EUR 434 million of online stakes. The French team matches have aroused a strong popularity by totalling EUR 88 million of online bets, which means an average of EUR 22 million per match. This competition has underlined the existence of questionable practices around sports betting, such as the media hype, the targeting of young people or the excessive stimulation of the game. For the first time, the public debate has seized this very subject and has relayed serious concerns coming from various circles. According to a Harris Interactive inquiry* conducted for the ANJ during the European Football Championship, more than half of those who had seen sports betting ads feel that they are too many of them and close to eight out of ten French people who had seen these ads consider that they can contain a risk of addiction. *Inquiry conducted by Harris Interactive online from the 6 to the 8 July 2021 for the ANJ with a cross section of 1038 French population aged over 18 years old. The ANJ has brought gambling operators together in order to learn from the European Football Championship After having drew the attention of operators on several critical points since June, the ANJ has gathered them on the 20 July in order to do the review of the European Football Championship and to address them the following messages: A yellow line has been crossed in terms of advertising pressure during this competition, which leads to question the model of regulation in place for the past 10 years; it is important to drastically and immediately reduce the sports betting’s advertising pressure. The commercial communications targeting young adults and keeping the illusion of easy money are particularly problematic. As a result of these discussions, which took place in a constructive atmosphere, gambling operators have decided that they collectively share the concerns expressed by the regulator and are prepared to work alongside it in order to propose some improvements and to limit these commercial communications. The ANJ establish an action plan for games offer to remain recreational and well-balanced Given the shared objective of recovery practices between regulator and operators, the ANJ has announced the launch of 5 projects to fight the observed abuses and to clarify or complete the legal framework. These projects should be over by the end of the year.   Regarding advertisement: The ANJ","source":"ANJ"},{"pubDate":"Thu, 19 Mar 2026 14:12:59 +0100","titre":"CEF 2026: EDPB launches coordinated enforcement action on transparency and information obligations under the GDPR","url":"https://www.edpb.europa.eu/news/news/2026/cef-2026-edpb-launches-coordinated-enforcement-action-transparency-and-information_en","id":2769535,"description":"Brussels, 19 March - The EDPB has launched its Coordinated Enforcement Framework (CEF) action for 2026*. Following a year-long coordinated action on the right to erasure in 2025 , the CEF's focus this year will shift to compliance with the obligations of transparency and information under the GDPR . The GDPR ensures that individuals are informed when their data is being processed (under Art. 12, 13 and 14). This right to be informed is a core element of transparency and ensures that individuals have more control over their data. Next steps During 2026, 25 Data Protection Authorities (DPAs) across Europe will take part in this initiative. They will look closely to assess the compliance of controllers with their transparency obligations under the GDPR. Participating DPAs will soon contact controllers from different sectors across Europe, either through enforcement actions or fact-finding exercises. In the latter case, they might also decide to undertake additional follow-up actions if needed. During the second half of the year, participating DPAs will share and discuss their findings together, with a view to aggregate the results of their national actions and generate deeper insight into the topic. A consolidated report will then be drafted and submitted for adoption by the EDPB, allowing for targeted follow-ups on both national and EU levels. Background The CEF is a key action of the EDPB under its 2024-2027 Strategy , aimed at streamlining enforcement and cooperation among DPAs. In 2023, the EDPB published the report on its first coordinated action on the use of cloud-based services by the public sector . In 2024, the EDPB also published the report on the outcome of the second coordinated action on the designation and position of Data Protection Officers . In 2025, the EDPB issued the report on its third coordination action on the implementation of the right of access . In 2026, the EDPB has adopted a report on its Coordinated Enforcement Framework (CEF) action on the right to be forgotten (Art.17 GDPR) .   Note to editors: *The Board selected this topic during its October 2025 plenary","source":"EDPB News"},{"url":"https://www.edpb.europa.eu/news/news/2026/edpb-identifies-challenges-hindering-full-implementation-right-erasure_en","titre":"EDPB identifies challenges hindering the full implementation of the right to erasure","pubDate":"Wed, 18 Feb 2026 15:27:14 +0100","description":"Brussels, 18 February - The European Data Protection Board (EDPB) has adopted a  report on its Coordinated Enforcement Framework (CEF) action on the right to be forgotten (Art.17 GDPR) .  The  Board selected this topic  as it is one of the most frequently exercised GDPR rights and one about which DPAs frequently receive complaints from individuals. The main objectives of this coordinated action are to ensure that the right to erasure is effectively exercised by individuals in Europe and understand how controllers comply with this right in practice. In addition, the EDPB identified good practices and the most important related challenges, with the aim of providing further guidance on this topic.  Throughout 2025, 32 DPAs across Europe took part in this initiative. More specifically, 9 DPAs have initiated new formal investigations or have continued ongoing ones, and 23 DPAs carried out a fact-finding exercise. A total of 764 controllers across Europe responded to the action, ranging from small and medium-sized enterprises (SMEs) to big companies active in many different industries and fields, as well as various types of public entities. The results of these national actions have been aggregated and analysed together allowing for targeted follow-up on both national and EU level.   Areas of improvement and main challenges The report lists the issues that were identified, along with a series of recommendations addressed to controllers, to help them implement the right to erasure. Seven recurring main challenges were identified by DPAs. The results confirmed some of the findings of the 2024 coordinated action on the right of access , for example when it comes to the lack of appropriate internal procedures to handle requests, or the lack of sufficient information provided to individuals. In addition, participating DPAs reported specific findings related to the reliance by some controllers on inefficient anonymisation techniques to handle erasure requests as an alternative to deletion. DPAs also noted inconsistent practices, and the difficulties faced by controllers regarding the determination of retention periods and the deletion of personal data in the context of back-ups. In addition, as the right to erasure is not an absolute right, some controllers face difficulties in assessing and applying the conditions for the exercise of this right, including in carrying out the different balancing tests between the right to erasure and other rights and freedoms.   Follow-up to help organisations comply  Extensive guidance, documents and templates exist at national level to help controllers comply with the right of erasure and help individuals exercise this right. In line with the Helsinki Statement’s objectives of making GDPR compliance easier and ensuring consistent interpretation and enforcement across Europe, the extensive guidance and templates already available at national level will be leveraged at EDPB level where appropriate.   Background and next steps The CEF is a key action of the EDPB under its 2024-2027 Strategy , aimed at streamlining enforcement and cooperation among DPAs.  In 2023, the EDPB published the report on its first coordinated action on the  use of cloud-based services by the public sector . In 2024, the EDPB also published the report on the outcome of the second coordinated action on the  designation and position of Data Protection Officers . In 2025, the EDPB issued the report on its third coordination action on the  implementation of the right of access . The CEF 2026 action will be on the  obligations of transparency and information under the GDPR .   For further information: DA DPA:   EDPB vedtager rapport om dataansvarliges overholdelse af retten til sletning EL DPA: Ολοκλήρωση της συντονισμένης δράσης του","id":2703238,"source":"EDPB News"},{"url":"https://www.ftc.gov/news-events/news/press-releases/2025/12/ftc-will-require-illusory-systems-return-money-stolen-hackers-implement-information-security-program","titre":"FTC Will Require Illusory Systems to Return Money Stolen by Hackers and Implement an Information Security Program","pubDate":"Wed, 17 Dec 2025 09:50:37 +0100","source":"Federal Trade Commission - Protecting America's Consumers","description":"The Federal Trade Commission is taking action against Illusory Systems Inc. for failing to implement adequate data security measures, leading to a major security breach in which hackers stole $186 million from consumers. Under a proposed order settling the FTC’s allegations, Utah-based Illusory, which does business as Nomad, will be required to implement an information security program to address numerous alleged security failures and to return recovered money to affected consumers. “The FTC Act requires companies to take reasonable security measures,” said Christopher Mufarrige, Director of the FTC’s Bureau of Consumer Protection. “It’s important that companies live up to their security promises to consumers.” In its complaint , the FTC alleged that Nomad prominently touted its security in its advertising, claiming that it offered “security-first” services. The FTC, however, alleged that the company failed to live up to these promises by failing to: use secure coding practices; implement processes for receiving and addressing vulnerability reports and responding to security incidents; and utilize widely known technologies that might have helped mitigate consumer losses. According to the complaint, in June 2022, Nomad introduced inadequately tested code that included a significant vulnerability. Just over a month later, hackers began exploiting the vulnerability. The FTC alleged that Nomad failed to respond to the attack in time because of its inadequate security and incident response measures, which led to the loss of $186 million. The company was able to recover some money, but consumers lost approximately $100 million. Nomad was warned about the dangers of inadequate testing as well as the need to ensure it had adequate staff and security in place. The company, however, failed to implement basic safety measures that would mitigate consumer losses, the FTC alleged. Under the proposed order , Nomad will be prohibited from making misrepresentations about its security practices. In addition, the company will also be required to: Implement a comprehensive information security program that is designed to protect consumers from theft or other unauthorized access and address the security issues outlined in the FTC’s complaint; Obtain biennial assessments of its information security program by an independent third party and cooperate with the third-party assessor; and Return to consumers money recovered following the security breach that was not already returned to customers. The Commission voted 2-0 to accept the proposed complaint and order for public comment. The FTC will publish a description of the consent agreement package in the Federal Register soon. The agreement will be subject to public comment for 30 days after publication in the Federal Register after which the Commission will decide whether to make the proposed consent order final. Instructions for filing comments will appear in the published notice. Once processed, comments will be posted on Regulations.gov. NOTE:  The Commission issues an administrative complaint when it has “reason to believe” that the law has been or is being violated, and it appears to the Commission that a proceeding is in the public interest. When the Commission issues a consent order on a final basis, it carries the force of law with respect to future actions. Each violation of such an order may result in a civil penalty of up to $51,744. The lead staff attorneys on this matter are M. Hasan Aijaz and Julia Horwitz with the FTC’s Bureau of Consumer","id":2577895},{"titre":"Interplay between the DSA and the GDPR: EDPB adopts guidelines","url":"https://www.edpb.europa.eu/news/news/2025/interplay-between-dsa-and-gdpr-edpb-adopts-guidelines_en","pubDate":"Fri, 12 Sep 2025 15:51:31 +0200","source":"EDPB News","description":"Brussels, 12 September - During its September plenary meeting, the European Data Protection Board (EDPB) has adopted guidelines on the interplay between the Digital Services Act (DSA) and the General Data Protection Regulation (GDPR) . These are the first set of EDPB guidelines on the interplay between the GDPR and the EU’s recently adopted digital laws. The DSA aims to complement the rules of the GDPR to ensure the highest level of protection of fundamental rights in the digital space. Its main goal is to create a safer online environment in which the fundamental rights of all users, including the right to freedom of expression, are protected. It applies to online intermediary services , such as search engines and platforms. Several provisions included in the DSA entail the processing of personal data by intermediary service providers. The EDPB guidelines contribute to the consistent application of the DSA and of the GDPR, insofar as some provisions of the DSA concern the processing of personal data by intermediary service providers and include references to GDPR concepts and definitions. While it is up to the competent authorities under the DSA - with the support of the European Board for Digital Services and EU courts - to interpret the DSA, there are a number of provisions which relate to the GDPR. These include: notice-and-action systems that help individuals or entities report illegal content recommender systems used by online platforms to automatically present specific content to the users of the platform with a certain relative order or prominence the provisions to ensure a high level of privacy, safety, and security of minors and prohibiting that profile-based advertising using their data is presented to them transparency of advertising by online platforms prohibition of profiling-based advertising using special categories of data  The EDPB guidelines help to understand how the GDPR should be applied in the context of DSA obligations. The EDPB also provides practical guidance relating to the cross-regulatory cooperation between authorities to coordinate enforcement which will provide more legal certainty for intermediary service providers and ultimately to protect the rights and freedoms of individuals. The guidelines will be subject to public consultation, providing stakeholders with the opportunity to comment and provide feedback. EDPB Chair Anu Talus said: “By clarifying the interplay between the DSA and the GDPR, these guidelines mark a significant step towards ensuring a coherent and effective EU digital rulebook, and they will help uphold the fundamental rights and freedoms of individuals. I hope that stakeholders, including the competent authorities under the DSA, will make the most of the opportunity to contribute to the public consultation\". More work in the pipeline Following these first guidelines on the interplay between the GDPR and the DSA, further work is underway with other regulators to clarify the new cross-regulatory landscape and maintain coherent and consistent safeguards for the protection of personal data. In this regard, the EDPB is working on joint guidelines with the European Commission on the interplay between the Digital Markets Act (DMA) and the GDPR, as well as on joint guidelines on the interplay between the AI Act and EU data protection laws.","id":2368407},{"id":2298968,"description":"The Federal Trade Commission today moved to block medical device supplier Edwards Lifesciences Corp.’s (Edwards) proposed acquisition of JenaValve Technology, Inc. (JenaValve) due to concerns that the acquisition would limit patient access to lifesaving medical devices used to treat a potentially fatal heart condition. The FTC alleges that over the span of two days in July 2024, Edwards executed agreements to acquire both JenaValve and JC Medical, the two leading companies competing to bring to market transcatheter aortic valve replacement devices that treat a heart condition called aortic regurgitation (TAVR-AR devices). Edwards closed its acquisition of JC Medical in August 2024, and its proposed $945 million acquisition of JenaValve would combine the only two companies with ongoing clinical trials in the United States for a TAVR-AR device. The deal threatens to reduce competition in the TAVR-AR market, likely resulting in reduced innovation, diminished product quality, and potentially increased prices for consumers, according to the complaint. “ Edwards’ attempt to buy the U.S. market for TAVR-AR devices would eliminate the head-to-head competition that has spurred innovation for lifesaving artificial heart valves,” said Daniel Guarnera, Director of the FTC’s Bureau of Competition. “The FTC is taking action to stop this anticompetitive deal and ensure that JenaValve and Edwards’ JC Medical subsidiary continue competing to innovate, expand treatment eligibility, and keep down costs. Americans deserve all the benefits that come from competition between medical device makers, just as they do in other markets.” More than 8 million Americans suffer from aortic regurgitation, which occurs when the heart’s aortic valve does not close properly, causing blood to backflow into the heart. Currently, surgical valve replacement via open heart surgery is the only U.S. Food and Drug Administration (FDA) approved procedure to treat aortic regurgitation, and TAVR-AR devices offer a new and less invasive way to treat the condition. JenaValve is poised to become the first company to bring a TAVR-AR device, called Trilogy, to the commercial market in the United States. If Edwards acquires JenaValve, Edwards would gain control over the two most advanced TAVR-AR devices, the FTC complaint alleges. FDA approval or commercialization of any other TAVR-AR device in the United States by another company, aside from Edwards and JenaValve, is not expected for the foreseeable future. Direct head-to-head competition between Edwards, through its now-subsidiary JC Medical, and JenaValve has driven the two companies to accelerate the development of their TAVR-AR devices, the FTC’s complaint alleges. Ultimately, patients will benefit if JenaValve and Edwards continue to directly compete to complete their separate TAVR-AR device clinical trials, product improvements, and commercialization plans. The competition concerns caused by Edwards’ dual acquisition strategy are predicated on Edwards owning both JenaValve and JC Medical simultaneously, but Edwards has elected to attempt to buy JenaValve while retaining its ownership of JC Medical. Edwards has not been willing to engage on divesting JC Medical to resolve the competition concerns with the proposed JenaValve acquisition, according to the complaint. The Commission vote to issue an administrative complaint and authorize staff to seek a temporary restraining order and a preliminary injunction was 3-0. The federal court complaint and request for preliminary relief was filed in the U.S. District Court for the District of Columbia to halt the transaction pending an administrative proceeding. NOTE : The Commission issues an administrative complaint when it has “reason to believe” that the law has been or is being violated, and it appears to the Commission that a proceeding is in the public interest. The issuance of the administrative complaint marks the beginning of a proceeding in which the allegations will be tried in a formal","source":"Federal Trade Commission Concurrence communiqués","pubDate":"Thu, 07 Aug 2025 09:48:21 +0200","titre":"FTC Challenges Anticompetitive Medical Device Deal","url":"https://www.ftc.gov/news-events/news/press-releases/2025/08/ftc-challenges-anticompetitive-medical-device-deal"},{"source":"EDPB News","description":"Brussels, 20 January - The European Data Protection Board (EDPB) has adopted a report on the implementation of the right of access by controllers . The report summarises the outcome of a series of coordinated national actions carried out in 2024 under the Coordinated Enforcement Framework (CEF). It lists the issues that were observed for some controllers, along with a series of recommendations to help them implement the right of access. A central element is controllers’ awareness of the EDPB Guidelines 01/2022 on data subjects rights – Right of access and whether these guidelines were followed in practice. EDPB Deputy Chair Zdravko Vukíc said: “The CEF is a valuable initiative that helps strengthen the cooperation among Data Protection Authorities (DPAs): by tackling selected topics in a coordinated fashion, they achieve greater efficiency and more consistency. How controllers implement the right of access lies at the heart of data protection and it is one of the most frequently exercised data subject rights.” Throughout 2024, 30 DPAs across Europe launched coordinated investigations into the compliance of controllers with the right of access, by opening formal investigations, assessing whether a formal investigation was warranted and/or carrying out fact-finding exercises.  A total of 1,185 controllers, consisting of small and medium-sized enterprises (SMEs) and big companies active in different industries and fields, as well as various types of public entities, responded to the action. Areas of improvement and main challenges The results suggest that more awareness raising about Guidelines 01/2022 is necessary , both at national and EU level, as the guidelines help controllers implement the right of access, explain how exercising this right can be made easier, and list the exceptions and limitations of the right to access. As a result of the 2024 CEF action, seven challenges were identified. One of them is the lack of documented internal procedures to handle access requests. In addition, inconsistent and excessive interpretations of the limits to the right of access were also observed, such as overly relying on certain exceptions to automatically refuse access requests. Another example is the barriers that individuals could encounter when exercising their right of access, such as  formal requirements or being requested to provide excessive identification documents. For each challenge identified, the report provides a list of non-binding recommendations to be taken into account by controllers and DPAs. Positive findings Despite the existing challenges, two thirds of participating DPAs evaluated the level of compliance of responding controllers with respect to the right of access from ‘average’ to ‘high’. One important factor identified as having an impact on the level of compliance was the volume of access requests received by controllers, as well as the size of the organisation. More specifically, large-sized controllers or controllers receiving more requests were more likely to reach a higher level of compliance than small organisations with less resources. Positive findings were observed across Europe. These include the implementation of best practices by controllers, such as user-friendly online forms enabling individuals to submit an access request easily as well as self-service systems to allow individuals to autonomously download their personal data in a few clicks and at any time. Background and next steps The CEF is a key action of the EDPB under its 2024-2027 Strategy, aimed at streamlining enforcement and cooperation among DPAs.  In the past three years, two previous CEF actions were carried out. The results of these national actions are aggregated and analysed together to generate deeper insight into the topic and allowing for targeted follow-up on both national and EU level. In 2023, the EDPB published the report on its first coordinated action on the use of cloud-based services by the public sector . In 2024, the EDPB also published the","id":1857297,"url":"https://www.edpb.europa.eu/news/news/2025/cef-2024-edpb-identifies-challenges-full-implementation-right-access_en","titre":"CEF 2024: EDPB identifies challenges to the full implementation of the right of access","pubDate":"Mon, 20 Jan 2025 15:49:16 +0100"},{"source":"ANJ","description":"UEFA European Football Championship and sports betting: the French Gambling Authority (ANJ) gathers operators and announces a dynamic and structuring action plan admin lun 13/09/2021 - 16:45 On 20 July 2021, the French Gambling Authority (ANJ) gathered sports betting’s operators in order to make the overview of the European Football Championship that has been scarred by some abuses. Resulting from a constructive exchange, these operators have agreed on the necessity to proceed at a rebalancing of their practices in order to preserve the recreational model of the French gambling market. As such, the ANJ introduced an action plan that seeks to reinforce operators’ compliance, to adapt and complete existing tools and, where required, to use sanctioning procedures. English Questionable practices highlighted during the European Football Championship UEFA European Football Championship 2021 confirmed the growing place of sports bets in France with EUR 434 million of online stakes. The French team matches have aroused a strong popularity by totalling EUR 88 million of online bets, which means an average of EUR 22 million per match. This competition has underlined the existence of questionable practices around sports betting, such as the media hype, the targeting of young people or the excessive stimulation of the game. For the first time, the public debate has seized this very subject and has relayed serious concerns coming from various circles. According to a Harris Interactive inquiry* conducted for the ANJ during the European Football Championship, more than half of those who had seen sports betting ads feel that they are too many of them and close to eight out of ten French people who had seen these ads consider that they can contain a risk of addiction. *Inquiry conducted by Harris Interactive online from the 6 to the 8 July 2021 for the ANJ with a cross section of 1038 French population aged over 18 years old. The ANJ has brought gambling operators together in order to learn from the European Football Championship After having drew the attention of operators on several critical points since June, the ANJ has gathered them on the 20 July in order to do the review of the European Football Championship and to address them the following messages: A yellow line has been crossed in terms of advertising pressure during this competition, which leads to question the model of regulation in place for the past 10 years; it is important to drastically and immediately reduce the sports betting’s advertising pressure. The commercial communications targeting young adults and keeping the illusion of easy money are particularly problematic. As a result of these discussions, which took place in a constructive atmosphere, gambling operators have decided that they collectively share the concerns expressed by the regulator and are prepared to work alongside it in order to propose some improvements and to limit these commercial communications. The ANJ establish an action plan for games offer to remain recreational and well-balanced Given the shared objective of recovery practices between regulator and operators, the ANJ has announced the launch of 5 projects to fight the observed abuses and to clarify or complete the legal framework. These projects should be over by the end of the year. Regarding advertisement: The ANJ has asked operators for a mid-term review of implementation of their promotional strategies as approved by the ANJ’s Board in January 2021 and reserves the right, after examination of these reviews, to initiate sanctions procedures in the event of noncompliance. The ANJ will launch a consultation of stakeholders on advertising in September. This will allow the ANJ to address recommendations to these stakeholders, and if necessary, to propose new tools of intervention. A partnership is initiated with the ARPP (Self-Regulatory Body of Advertising Professionals) in order to decline regulatory restrictions into concrete recommendations for operators. The objective is to issue precise and operational","id":719780,"url":"http://anj.fr/uefa-european-football-championship-and-sports-betting-french-gambling-authority-anj","titre":"UEFA European Football Championship and sports betting: the French Gambling Authority (ANJ) gathers operators and announces a dynamic and structuring action plan","pubDate":"Sun, 28 May 2023 19:23:47 +0200"}]