[{"titre":"Brazil: Lula’s presidential win puts the brakes on the rise of the far right in Latin America","url":"https://theconversation.com/brazil-lulas-presidential-win-puts-the-brakes-on-the-rise-of-the-far-right-in-latin-america-295219","pubDate":"Tue, 27 Oct 2026 13:57:26 +0100","source":"The Conversation – Articles (FR)","description":"KEY TAKEAWAYS Social policies, such as support for small businesses, and a shorter working week without a loss of pay helped president Lula to turn around Brazil’s election. Street protests and social media strengthened Lula’s campaign amid allegations of election interference by Meta favouring Flávio Bolsonaro. Major challenges lie ahead as Lula faces a right-leaning Congress, opposition from the Bolsonaro movement and pressure from the Trump administration. Luiz Inácio Lula da Silva won Brazil’s presidential election with 51.79% of valid votes, unexpectedly reversing the first-round result won by Flávio Bolsonaro, a first in Brazilian presidential elections. Between the two rounds, he gained about 10.4 million additional votes. Defeated, right-wing challenger Flávio Bolsonaro announced that he would ask for the election to be annulled. The next day, his party, the Liberal Party (PL), acknowledged the result. Brazil’s nonalignment sounds a warning to the global far right Beyond halting the advance of Donald Trump’s and Secretary of State Marco Rubio’s influence in the region, Brazil’s election result points to strategies by which far right success in other countries can be contained. It is also a personal defeat for Trump, who invested energy and influence without openly declaring his support, but with the objective of returning the Bolsonaro family to power. Lula’s victory can be attributed to three equally important factors. The first is a package of social measures: an increase in Bolsa Família, the government’s flagship cash-transfer program; the announcement of measures benefiting individual microentrepreneurs (MEI), who account for nearly 70% of active businesses in Brazil; and, above all, the approval, during the second-round campaign, of the government’s bill reducing the working week from six to five days with no loss of pay . In a poll conducted four days before the vote, this legislation was the news item that mattered most in determining voters’ choice (17%). It was followed by reports of Supreme Federal Court (STF) justices’ involvement in the Banco Master corruption case (14%), politicians’ involvement in the same case (13%), and the Lula government’s lifting of the ban on online betting houses, known as “bets” (11%). Between the two rounds, Lula raised his government’s approval rating, particularly among higher-income voters (+6 p.p) and right-wing voters outside of bolsonarismo (+12 p.p), i.e. groups that make up Flávio’s voter base. Over the same period, fear of the Bolsonaro family’s return to power overtook fear of Lula’s reelection (44% to 42%) . Taking to the streets and digital power Such a turnaround was driven, in large part, by mass mobilisation of Lula’s supporters in the streets and on social media. Large rallies called by students and other mostly young people brought millions of people on the streets, breaking the chill seen in the preceding weeks . The largest rally in support of Lula took place in São Paulo on October 24. Demonstrators sang the Independence Anthem of Brazil, a clear reference to Brazil’s independence from Trump’s interventionist policy . Part of this interventionism was attributed to the actions of Meta, the parent company of Instagram, Facebook and WhatsApp. During the second-round campaign, allegations grew that the company had favoured Flávio Bolsonaro and other far-right candidates by manipulating its algorithms . While Meta denied any favouritism, blaming technical failures, internal messages revealed by Folha de S. Paulo revealed that Lula’s campaign had been unable to boost posts for nearly 24 hours in October. In reaction to the far right’s domination of the digital environment, one of the major landmarks of the second round was the creation of the “Lula’s Army”, a WhatsApp channel set up by a federal deputy that gathered more than 10 million","id":3244497},{"source":"FTC USA Business Blog Posts","description":"Root, root root for the regions lfair September 24, 2018 | 2:03PM Root, root root for the regions By Andrew Smith, Director, FTC Bureau of Consumer Protection T his year eight major league baseball teams are celebrating milestone anniversaries – and so are the FTC’s regional offices. In 1918, the Commission opened the first three of its regional offices. Today, eight regional offices continue to knock it out the park on behalf of America’s consumers. So it’s only fitting that on this momentous day we acknowledge the regional offices’ century of pennant-winning performances. According to the Commission’s 1918 Annual Report, “In order to expedite the greatly increased work of the Commission . . . small branch offices were established in New York, Chicago, and San Francisco.” Over time, the FTC has added other locations for a current total of eight offices in seven regions. Regional staff work with the Bureau of Consumer Protection and the Bureau of Competition on investigations and litigation. But they are in a unique position to host roundtables and workshops in their communities; to coordinate with local, state, and cross-border law enforcers; and to build partnerships with consumer groups and small business organizations within their region. According to the scouting report, there isn’t a pitch they can’t hit. Here’s a brief look at each region’s box score with a focus on just a few of their many MVP contributions to the FTC’s consumer protection mission. East Central Region . In 1918, the Cleveland Indians finished just out of pennant contention, but the FTC’s Cleveland-based office works hard to bring home the W for consumers and small businesses. For example, ECR has brought a number of cases over the past two decades to protect small businesses in their area and around the country, including cramming, business directory, and unordered merchandise scams. Recently, ECR played a central role in Operation Main Street, the FTC’s recent initiative against scammers targeting small businesses. Midwest Region . Chicago fans may be divided in their loyalty to the Cubs and the White Sox, but consumers who lost money to scammers who used the services of a major money transfer company are united in their appreciation for the FTC-DOJ settlement that returned $586 million back to them. And just recently, MWR hosted the Commission’s workshop on cryptocurrency scams and took a lead role in Operation Tech Trap, a coordinated state, federal, and international effort to shut down tech support fraudsters. Northeast Region . Given New York’s connection to names like Huggins, Houk, Stengel, Berra, and Torre, it’s no wonder the FTC’s Northeast Region has particular expertise in coaching. But in NER’s case, it’s about companies that make deceptive “coaching” and money-making representations. The New York-based office also has been one of the FTC’s power hitters in addressing misleading practices in the affiliate marketing industry. And from their Big Apple location, NER has been a leader in educating consumers, particularly older Americans and small businesses. Northwest Region . Like their hometown Seattle Mariners, the FTC’s Northwest Region has a proven record of navigating the complexities on the field of play. NWR coordinated Operation Donate with Honor, a nationwide crackdown on fraudulent charities alleged to have conned consumers by falsely promising their contributions will help veterans and servicemembers. In addition, our team in Seattle regularly coordinates with Canadian counterparts to combat cross-border fraud. And they’ve been ahead of the curve on tech issues, bringing one of the FTC’s first internet cases in the 90s and more recently, an early online influencer action. Southeast Region . The Atlanta Braves boast a national fan base – and due to their expertise in fighting fraud, the FTC’s Southeast Region can be proud of its coast-to-coast impact,","id":3201877,"titre":"Root, root root for the regions","url":"https://www.ftc.gov/business-guidance/blog/2018/09/root-root-root-regions","pubDate":"Wed, 07 Oct 2026 14:05:07 +0200"},{"pubDate":"Mon, 05 Oct 2026 08:07:08 +0200","url":"https://www.ftc.gov/business-guidance/blog/2020/04/new-ftc-warning-letters-cite-unsupported-coronavirus-related-health-earnings-claims","titre":"New FTC warning letters cite unsupported Coronavirus-related health and earnings claims","id":3197413,"description":"New FTC warning letters cite unsupported Coronavirus-related health and earnings claims sgressin April 24, 2020 | 12:44PM New FTC warning letters cite unsupported Coronavirus-related health and earnings claims By Seena Gressin The FTC is not the pen pal you want if you operate a multi-level marketing company but aren’t closely monitoring your distributors. In its latest round of warning letters, the FTC warns ten MLM companies that they are responsible for the claims made by their participants. The letters direct the companies to report within 48 hours what actions they’ve taken to stop their distributors from claiming their products can treat or prevent Coronavirus disease, that MLM business opportunity participants are likely to earn substantial income, or both. The FTC says that the health and earnings claims are unsubstantiated and therefore violate truth-in-advertising laws. The products at issue are not scientifically proven to treat or prevent COVID-19, the disease that Coronavirus causes. The FTC previously has sent warning letters to companies about their Coronavirus-related health claims, but the new letters are the first to also target claims about potential business opportunity earnings. The letters come at a time when millions of people are out of work and facing financial challenges as a result of the pandemic. MLM companies rely on a network of independent distributors, sometimes called business opportunity participants, to buy and resell their products, often through direct person-to-person sales or online. MLMs typically offer participants a cut of the sales made by people the participant recruits to invest in the business opportunity. The new recruits then try to sell the products, and try to recruit more people to do the same. Most people who join MLMs make little or no money. According to the FTC, distributors of the MLM companies receiving the letters have posted promotional messages on Facebook, Instagram, and other social media sites. Health claims the FTC letters cite include: “STAY SAFE!! MAKE YOUR IMMUNE SYSTEM STRONG!!!” Standard coronavirus protection kit . #antiseptics and #immunity_support.” “HOW WILL YOU FIGHT OFF CORONA? USE NUTRABURST-CHAGA- .... #coronacure #coronaprevention ... #immunesupport #immunebooster ... #immunesystembooster” “Got the coronavirus heebeegeebees? Boost your immunity with this amazing deal!!!!” “... If interested to learn more or obtain oils or rollers Let me know A little extra protection can help #doterra #NursesCOVID19 #Dialysis #ImmunityBoosters #ImproveRespiratoryFunction” Earnings claims the FTC letters cite include: “...Living in quarantine and where 14 million people applied for unemployment just last week ... I’ll stick with the opportunity to change people’s lives ... turn a small investment into six figures .... #arbonne ... #quarantine #2020” “Need to make extra money? Find it difficult to pay your bills? Were you laid off/ #fired? Be your own Boss w/doTERRA essential oils. Msg me to achieve financial independence #laidoff #unemployed #cantpaymybills #cantpaymyrent #student #sales #sidehustle #makemoney #stayathomemom.” “[E]veryone’s getting stimulus checks right now... There is no better investment you could do... Take that money that you’re about to get back... figure out a way to make this happen tonight.” In the letters alleging unsubstantiated health claims, FTC staff reminds the companies that, under the FTC Act, claims that a product can prevent, treat, or cure a serious disease require the support of well-controlled human clinical studies. Because “no such study is currently known to exist” for the advertised products, the FTC says the companies “must immediately cease making all such claims.” In the letters alleging deceptive earnings claims, FTC staff reminds the companies that under the FTC Act, “claims about the potential to achieve a wealthy lifestyle, career-level income, or significant","source":"FTC USA Business Blog Posts"},{"source":"FTC USA Business Blog Posts","description":"Company to pay $22 million for offering \"free\" credit scores that turned out to be not so free wfg-adm109 November 19, 2014 | 11:12AM Company to pay $22 million for offering \"free\" credit scores that turned out to be not so free By Lesley Fair We’ve brought law enforcement actions – dozens of ‘em. We’ve held workshops, issued reports, and sent warning letters. If it takes sky writing, tap dancing, and a float in a Thanksgiving Day parade, we’ll do that, too. But here’s what’s not going to happen. The FTC is not giving up until businesses get the message that: 1) Free means free; and 2) Key terms and conditions have to be clearly and conspicuously disclosed. A $22 million settlement announced by the FTC and the AGs of Illinois and Ohio with a national credit monitoring service advertising so-called “free” credit scores emphasizes that point. Another note for practitioners: It's the FTC's third case alleging violations of ROSCA . One Technologies and related outfits marketed their credit monitoring programs, MyCreditHealth and ScoreSense, through at least 50 sites, including FreeScore360.com, FreeScoreOnline.com and ScoreSense.com. Their strategy was simple. Buy advertising on search engines so their ads show up near the top when people look for phrases like “free credit report\" and then follow up with a persuasive pitch: “View your latest Credit Scores from All 3 Bureaus in 60 seconds for $0!” According to the lawsuit , the defendants failed to clearly tell consumers that if they availed themselves of those “free” services and didn’t cancel within seven days, the defendants would ding their credit cards for $29.95 a month over and over and over again. The complaint includes screen shots of the defendants’ sites, but before looking at them, take out your reading glasses because they’ll come in handy in trying to locate where the defendants chose to tell people about that $29.95 monthly fee. One line of fine print added in late 2012 said “Free 7-Day trial when you order your 3 Free Credit Scores. Membership is then just $29.95 per month until you call to cancel.” The first problem: The type was tiny – a fraction of the size of the defendants’ multiple use of the word “free.” The second problem: Why should consumers even have to be on the look-out for the cost, given that the defendants so prominently advertised it as “free”? A second purported disclosure appeared as an obscure hyperlink on the page where people typed in their Social Security number and birthdate.  Sandwiched between the logos of various security firms and a large color button that said CONTINUE was this less-than-crystal-clear statement: By clicking on the ‘Continue’ button, you agree to the Offer Details, to the Terms and Conditions, acknowledge receipt of our Privacy Policy and agree to its terms . . . The “Offer Details” link triggered a small pop-up that said, among other things, “At the end of the 7-day trial period, your credit/debit card will be charged $29.95 on a monthly basis until you call to cancel.” Another place the defendants put the information was on a side panel of the Payment Form in white letters on a grey background – a color combination one of the defendants’ own employees described as “known to cause seizures in lab rats.” According to the complaint, once people spotted the unauthorized charges on their accounts, the defendants didn’t make it easy to stop the billing.  And even when people asked for their money back because they hadn’t approved of the charges, the defendants denied refunds to many of them. The lawsuit alleges violations of the FTC Act, as well as the Illinois Consumer Fraud Act, the Ohio Consumer Sales Practices Act, and related state rules. In addition, the complaint is the third FTC action to charge violations of ROSCA, the Restore Online Shoppers’","id":3194913,"titre":"Company to pay $22 million for offering \"free\" credit scores that turned out to be not so free","url":"https://www.ftc.gov/business-guidance/blog/2014/11/company-pay-22-million-offering-free-credit-scores-turned-out-be-not-so-free","pubDate":"Sat, 03 Oct 2026 08:09:37 +0200"},{"description":"The Federal Trade Commission announced today that is considering whether to update its Rule on Impersonation of Government and Businesses or take other action to prevent online platforms from engaging in ad-optimization practices that may be furthering impersonation scams. In an Advance Notice of Proposed Rulemaking (ANPRM) to be published in the Federal Register , the FTC is seeking comment on the extent to which ad-optimization tools and services offered by social media, search engines and other digital marketplace platforms further efforts by scammers to impersonate legitimate businesses and government agencies using online ads.  “Free markets depend on trust, transparency and consumers’ ability to make informed choices. Impersonation scams—especially when amplified by digital platforms that profit from them—do more than rob Americans of their hard-earned money,” said Christopher Mufarrige, Director of the FTC’s Bureau of Consumer Protection. “They erode the very foundation that allows competitive markets to function. Today’s impersonation scams are no longer the work of isolated con artists; they are sophisticated, highly engineered operations powered by the same advertising and targeting tools that platforms sell to legitimate businesses. Consumers reported nearly $3.5 billion in losses to impersonation fraud last year, and the true cost is likely far higher. “The Commission’s mission has always been to safeguard the conditions under which competitive markets can thrive. Increasingly, consumers rely on a small number of dominant digital platforms for everyday transactions—from shopping, banking and travel bookings to accessing government services. Yet these platforms are the very places fraudsters seek out consumers, exploiting their trust while platforms profit from optimizing and disseminating scam ads. “Today’s advance notice of proposed rulemaking asks whether the Commission should require platforms to take concrete steps to prevent impersonation ads from ever reaching consumers. By exploring potential new obligations platforms would have to follow, the rulemaking aims to ensure that Americans participate in an online economy where truthful information guides consumer choice.”  Impersonation scams have topped the list of fraud complaints reported to the FTC by consumers in recent years. In 2025, the FTC received more than 1 million reports about imposter scams from consumers, who reported losing nearly $3.5 billion to such scams. In addition, online platforms play an important role in many scams. For example, nearly 30% of consumers who reported losing money to scammers in 2025 said they were first contacted on social media platforms, with reported losses reaching $2.1 billion. The ANPRM notes that impersonation scams have been amplified by search engines, social media and other digital marketplace platforms that profit from optimizing online ads for third parties, regardless of whether the third parties are legitimate. The ANPRM seeks comment on a wide range of topics related to the use of these ad-optimization tools and services and the proliferation of ads that impersonate businesses and government agencies including:  The financial incentives driving these platforms to offer ad-optimization tools and services, details on how each tool and service optimizes the content and delivery of the ad, and the steps platforms currently take to prevent the use of such tools and services for deceptive advertising The extent to which these platform ad-optimization tools and services constitute unfair or deceptive acts or practices by furthering impersonation scams Whether these unfair or deceptive acts or practices are prevalent in the marketplace and whether the Commission should address these acts or practices by amending the existing Impersonation Rule, proposing a new separate rule or implementing non-regulatory Measures Measures the Commission could consider in crafting any new regulations, including vetting","id":3176041,"source":"Federal Trade Commission - Protecting America's Consumers","titre":"FTC Seeks Public Comment on Whether to Update Rule on Impersonation of Government and Businesses to Address Platforms’ Role in Promoting Impersonation Scams","url":"https://www.ftc.gov/news-events/news/press-releases/2026/09/ftc-seeks-public-comment-whether-update-rule-impersonation-government-businesses-address-platforms","pubDate":"Fri, 25 Sep 2026 08:10:48 +0200"},{"pubDate":"Fri, 18 Sep 2026 08:08:58 +0200","url":"https://www.ftc.gov/news-events/news/press-releases/2026/09/fleetcor-agrees-pay-100-million-resolve-administrative-action-after-federal-court-finds-it-violated","titre":"FleetCor Agrees to Pay $100 Million to Resolve Administrative Action After Federal Court Finds that It Violated the FTC Act by Charging Unauthorized Fees","source":"Federal Trade Commission - Protecting America's Consumers","id":3160549,"description":"FleetCor and its CEO will pay $100 million to settle a Federal Trade Commission administrative action alleging that the company charged its customers, who overwhelmingly are small businesses, undisclosed fees in connection with their use of fuel cards that FleetCor falsely promised businesses would save them money. In a complaint first filed in federal court in 2019 , the FTC alleged that FleetCor Technologies Inc., now known as Corpay Inc., and its CEO Ronald Clarke imposed a broad array of unauthorized fees that its customers never knew about and did not agree to pay, totaling hundreds of millions of dollars and harming tens of thousands of customers.  In addition, FleetCor charged late fees to customers who had either paid on time or were prevented by FleetCor from paying on time. FleetCor also misrepresented the gas savings, fraud-control features, and fees associated with its fuel cards. “FleetCor deceived its small business customers by promising fuel savings that never materialized, while unfairly charging them hidden and unauthorized fees,” said Christopher Mufarrige, Director of the FTC’s Bureau of Consumer Protection. “In addition to the relief the FTC has obtained in federal court, this order will help return money to the customers the company took advantage of.” According to the complaint, FleetCor often waited to begin charging many fees until several billing cycles passed, making the fees less noticeable to consumers. The complaint also alleged that FleetCor’s invoices did not disclose that any fees were being charged, requiring customers to proactively view other account management reports. Even on those documents, many fees were obscured among other information or not listed at all. In 2023, a federal district court entered summary judgment for the FTC on all counts, finding that FleetCor had charged its customers hidden or otherwise unauthorized fees and misrepresented the gas savings and fees associated with FleetCor’s fuel cards. The court-imposed order permanently prohibits FleetCor from: billing a customer for any charge unless FleetCor has obtained the customer’s express informed consent and provided clear and unavoidable information about the charge; hiding material information about a charge behind a hyperlink; and making deceptive claims about its fuel cards. In 2026, a federal appeals court upheld the summary judgment against FleetCor on all counts and affirmed the permanent injunction against it.  The court affirmed the judgment against Clarke on all but one count and vacated the injunction as to Clarke.  As part of the settlement order with the FTC, FleetCor and Clarke will pay $100 million, which will be used to provide redress to the company’s business customers harmed by its practices. FleetCor and Clarke have also agreed not to oppose reimposition of a federal court injunction against Clarke.  The Commission vote to accept the consent agreement was 1-0-1. FTC Chairman Andrew N. Ferguson is recused. The FTC will publish a description of the consent agreement in the Federal Register soon. The agreement will be subject to public comment for 30 days after publication in the Federal Register after which the Commission will decide whether to make the proposed consent order final. Instructions for filing comments will appear in the published notice. Once processed, comments will be posted on Regulations.gov. NOTE: When the Commission issues a consent order on a final basis, it carries the force of law with respect to future actions. Each violation of such an order may result in a civil penalty of up to"},{"id":2959787,"description":"New data from the Federal Trade Commission reveal that people reported losing a staggering $3.5 billion to imposter scams in 2025, with reported losses increasing nearly three times since 2020. FTC data also show that people reported imposter scams more than any other fraud category in 2025—nearly one in three fraud reports were about imposter scams. These scams lured consumers through text, phone, email, social media, search engine results and other means. Some of the costliest impersonation scams start with a fake security alert, often from a bank. People are convinced to move money to “protect” it, with their losses often limited only by their available funds. Last year, people reported losing nearly $1 billion to business impersonators with the highest reported losses to bank impersonators—and about $920 million to government impersonators, up from $866 million and $789 million respectively in 2024. The FTC has seen a striking increase in reported fraud losses to all types of fraud—about $16 billion was reported lost in 2025, the highest on record and an increase of about 25% compared to the 2024 figure. “Consumers derive enormous benefits from competitive markets built on truthful information. But fraud undermines that foundation, impeding the market process and preventing markets from operating efficiently,” said Christopher Mufarrige, Director of the Bureau of Consumer Protection. “The FTC will use every tool available to combat one of the most pernicious forms of fraud—government and business impersonation—and to protect the integrity of the digital economy.” The data underscore the importance of the FTC’s work with the  Elder Justice Coordinating Council (EJCC) , which is working to help raise awareness of imposter scams and other scams impacting older adults as well as other consumers. This year, the FTC, along with the Department of Justice, Department of Health and Human Services and members of the EJCC, is leading the Never Ever campaign, a public-private coordinated consumer education effort to raise awareness of government and business imposter scams. In addition to the federal agency members of the EJCC , the campaign also includes private sector representatives such as the American Bankers Association, USTelecom, Google and Microsoft. To help the public spot imposter scams, EJCC members launched the Never Ever campaign, which is aimed at promoting messaging on the key actions that government and businesses will Never Ever take. The Never Ever campaign will run from June 15 to June 26, in conjunction with World Elder Abuse Awareness Day. This first-of-its-kind public-private partnership includes participants from a wide range of organizations and is aimed at directing consumers to a website that includes information and resources to help them avoid imposter scams and what to do if they spot one. Enforcement Actions To help combat impersonation scams, the FTC in 2024 finalized the Impersonation Rule. The Rule gives the agency stronger tools to combat and deter scammers who impersonate government agencies and businesses, enabling the FTC to file federal court cases seeking to get money back to injured consumers and civil penalties against rule violators. Since then, the FTC has vigorously enforced the rule and brought a dozen enforcement actions that have resulted in halting imposter schemes and obtained over $70 million in redress for consumers. In 2025, the FTC brought law enforcement actions under the Impersonation Rule against:  American Tax Service (IRS imposter scheme);  MediaAlpha (government imposter scheme to sell health insurance);  Click Profit (business imposter money making scam);  Blackstone Legal (phantom debt business imposter scheme) and  Accelerated Debt Settlement (government and business imposter scheme that targeted older adults for debt relief). More recently, the  FTC filed a complaint against Innovative Partners in April 2026 , alleging the operators","source":"Federal Trade Commission - Protecting America's Consumers","pubDate":"Tue, 16 Jun 2026 08:09:40 +0200","titre":"FTC Data Show People Reported Losing $3.5 Billion to Imposter Scams in 2025","url":"https://www.ftc.gov/news-events/news/press-releases/2026/06/ftc-data-show-people-reported-losing-3-point-5-billion-imposter-scams-2025"},{"source":"EDPB News","description":"Brussels, 19 March - The EDPB has launched its Coordinated Enforcement Framework (CEF) action for 2026*. Following a year-long coordinated action on the right to erasure in 2025 , the CEF's focus this year will shift to compliance with the obligations of transparency and information under the GDPR . The GDPR ensures that individuals are informed when their data is being processed (under Art. 12, 13 and 14). This right to be informed is a core element of transparency and ensures that individuals have more control over their data. Next steps During 2026, 25 Data Protection Authorities (DPAs) across Europe will take part in this initiative. They will look closely to assess the compliance of controllers with their transparency obligations under the GDPR. Participating DPAs will soon contact controllers from different sectors across Europe, either through enforcement actions or fact-finding exercises. In the latter case, they might also decide to undertake additional follow-up actions if needed. During the second half of the year, participating DPAs will share and discuss their findings together, with a view to aggregate the results of their national actions and generate deeper insight into the topic. A consolidated report will then be drafted and submitted for adoption by the EDPB, allowing for targeted follow-ups on both national and EU levels. Background The CEF is a key action of the EDPB under its 2024-2027 Strategy , aimed at streamlining enforcement and cooperation among DPAs. In 2023, the EDPB published the report on its first coordinated action on the use of cloud-based services by the public sector . In 2024, the EDPB also published the report on the outcome of the second coordinated action on the designation and position of Data Protection Officers . In 2025, the EDPB issued the report on its third coordination action on the implementation of the right of access . In 2026, the EDPB has adopted a report on its Coordinated Enforcement Framework (CEF) action on the right to be forgotten (Art.17 GDPR) .   Note to editors: *The Board selected this topic during its October 2025 plenary","id":2769535,"url":"https://www.edpb.europa.eu/news/news/2026/cef-2026-edpb-launches-coordinated-enforcement-action-transparency-and-information_en","titre":"CEF 2026: EDPB launches coordinated enforcement action on transparency and information obligations under the GDPR","pubDate":"Thu, 19 Mar 2026 14:12:59 +0100"},{"pubDate":"Wed, 18 Feb 2026 15:27:14 +0100","titre":"EDPB identifies challenges hindering the full implementation of the right to erasure","url":"https://www.edpb.europa.eu/news/news/2026/edpb-identifies-challenges-hindering-full-implementation-right-erasure_en","source":"EDPB News","id":2703238,"description":"Brussels, 18 February - The European Data Protection Board (EDPB) has adopted a  report on its Coordinated Enforcement Framework (CEF) action on the right to be forgotten (Art.17 GDPR) .  The  Board selected this topic  as it is one of the most frequently exercised GDPR rights and one about which DPAs frequently receive complaints from individuals. The main objectives of this coordinated action are to ensure that the right to erasure is effectively exercised by individuals in Europe and understand how controllers comply with this right in practice. In addition, the EDPB identified good practices and the most important related challenges, with the aim of providing further guidance on this topic.  Throughout 2025, 32 DPAs across Europe took part in this initiative. More specifically, 9 DPAs have initiated new formal investigations or have continued ongoing ones, and 23 DPAs carried out a fact-finding exercise. A total of 764 controllers across Europe responded to the action, ranging from small and medium-sized enterprises (SMEs) to big companies active in many different industries and fields, as well as various types of public entities. The results of these national actions have been aggregated and analysed together allowing for targeted follow-up on both national and EU level.   Areas of improvement and main challenges The report lists the issues that were identified, along with a series of recommendations addressed to controllers, to help them implement the right to erasure. Seven recurring main challenges were identified by DPAs. The results confirmed some of the findings of the 2024 coordinated action on the right of access , for example when it comes to the lack of appropriate internal procedures to handle requests, or the lack of sufficient information provided to individuals. In addition, participating DPAs reported specific findings related to the reliance by some controllers on inefficient anonymisation techniques to handle erasure requests as an alternative to deletion. DPAs also noted inconsistent practices, and the difficulties faced by controllers regarding the determination of retention periods and the deletion of personal data in the context of back-ups. In addition, as the right to erasure is not an absolute right, some controllers face difficulties in assessing and applying the conditions for the exercise of this right, including in carrying out the different balancing tests between the right to erasure and other rights and freedoms.   Follow-up to help organisations comply  Extensive guidance, documents and templates exist at national level to help controllers comply with the right of erasure and help individuals exercise this right. In line with the Helsinki Statement’s objectives of making GDPR compliance easier and ensuring consistent interpretation and enforcement across Europe, the extensive guidance and templates already available at national level will be leveraged at EDPB level where appropriate.   Background and next steps The CEF is a key action of the EDPB under its 2024-2027 Strategy , aimed at streamlining enforcement and cooperation among DPAs.  In 2023, the EDPB published the report on its first coordinated action on the  use of cloud-based services by the public sector . In 2024, the EDPB also published the report on the outcome of the second coordinated action on the  designation and position of Data Protection Officers . In 2025, the EDPB issued the report on its third coordination action on the  implementation of the right of access . The CEF 2026 action will be on the  obligations of transparency and information under the GDPR .   For further information: DA DPA:   EDPB vedtager rapport om dataansvarliges overholdelse af retten til sletning EL DPA: Ολοκλήρωση της συντονισμένης δράσης του"},{"pubDate":"Wed, 17 Dec 2025 09:50:37 +0100","url":"https://www.ftc.gov/news-events/news/press-releases/2025/12/ftc-will-require-illusory-systems-return-money-stolen-hackers-implement-information-security-program","titre":"FTC Will Require Illusory Systems to Return Money Stolen by Hackers and Implement an Information Security Program","id":2577895,"description":"The Federal Trade Commission is taking action against Illusory Systems Inc. for failing to implement adequate data security measures, leading to a major security breach in which hackers stole $186 million from consumers. Under a proposed order settling the FTC’s allegations, Utah-based Illusory, which does business as Nomad, will be required to implement an information security program to address numerous alleged security failures and to return recovered money to affected consumers. “The FTC Act requires companies to take reasonable security measures,” said Christopher Mufarrige, Director of the FTC’s Bureau of Consumer Protection. “It’s important that companies live up to their security promises to consumers.” In its complaint , the FTC alleged that Nomad prominently touted its security in its advertising, claiming that it offered “security-first” services. The FTC, however, alleged that the company failed to live up to these promises by failing to: use secure coding practices; implement processes for receiving and addressing vulnerability reports and responding to security incidents; and utilize widely known technologies that might have helped mitigate consumer losses. According to the complaint, in June 2022, Nomad introduced inadequately tested code that included a significant vulnerability. Just over a month later, hackers began exploiting the vulnerability. The FTC alleged that Nomad failed to respond to the attack in time because of its inadequate security and incident response measures, which led to the loss of $186 million. The company was able to recover some money, but consumers lost approximately $100 million. Nomad was warned about the dangers of inadequate testing as well as the need to ensure it had adequate staff and security in place. The company, however, failed to implement basic safety measures that would mitigate consumer losses, the FTC alleged. Under the proposed order , Nomad will be prohibited from making misrepresentations about its security practices. In addition, the company will also be required to: Implement a comprehensive information security program that is designed to protect consumers from theft or other unauthorized access and address the security issues outlined in the FTC’s complaint; Obtain biennial assessments of its information security program by an independent third party and cooperate with the third-party assessor; and Return to consumers money recovered following the security breach that was not already returned to customers. The Commission voted 2-0 to accept the proposed complaint and order for public comment. The FTC will publish a description of the consent agreement package in the Federal Register soon. The agreement will be subject to public comment for 30 days after publication in the Federal Register after which the Commission will decide whether to make the proposed consent order final. Instructions for filing comments will appear in the published notice. Once processed, comments will be posted on Regulations.gov. NOTE:  The Commission issues an administrative complaint when it has “reason to believe” that the law has been or is being violated, and it appears to the Commission that a proceeding is in the public interest. When the Commission issues a consent order on a final basis, it carries the force of law with respect to future actions. Each violation of such an order may result in a civil penalty of up to $51,744. The lead staff attorneys on this matter are M. Hasan Aijaz and Julia Horwitz with the FTC’s Bureau of Consumer","source":"Federal Trade Commission - Protecting America's Consumers"},{"pubDate":"Fri, 12 Sep 2025 15:51:31 +0200","titre":"Interplay between the DSA and the GDPR: EDPB adopts guidelines","url":"https://www.edpb.europa.eu/news/news/2025/interplay-between-dsa-and-gdpr-edpb-adopts-guidelines_en","source":"EDPB News","id":2368407,"description":"Brussels, 12 September - During its September plenary meeting, the European Data Protection Board (EDPB) has adopted guidelines on the interplay between the Digital Services Act (DSA) and the General Data Protection Regulation (GDPR) . These are the first set of EDPB guidelines on the interplay between the GDPR and the EU’s recently adopted digital laws. The DSA aims to complement the rules of the GDPR to ensure the highest level of protection of fundamental rights in the digital space. Its main goal is to create a safer online environment in which the fundamental rights of all users, including the right to freedom of expression, are protected. It applies to online intermediary services , such as search engines and platforms. Several provisions included in the DSA entail the processing of personal data by intermediary service providers. The EDPB guidelines contribute to the consistent application of the DSA and of the GDPR, insofar as some provisions of the DSA concern the processing of personal data by intermediary service providers and include references to GDPR concepts and definitions. While it is up to the competent authorities under the DSA - with the support of the European Board for Digital Services and EU courts - to interpret the DSA, there are a number of provisions which relate to the GDPR. These include: notice-and-action systems that help individuals or entities report illegal content recommender systems used by online platforms to automatically present specific content to the users of the platform with a certain relative order or prominence the provisions to ensure a high level of privacy, safety, and security of minors and prohibiting that profile-based advertising using their data is presented to them transparency of advertising by online platforms prohibition of profiling-based advertising using special categories of data  The EDPB guidelines help to understand how the GDPR should be applied in the context of DSA obligations. The EDPB also provides practical guidance relating to the cross-regulatory cooperation between authorities to coordinate enforcement which will provide more legal certainty for intermediary service providers and ultimately to protect the rights and freedoms of individuals. The guidelines will be subject to public consultation, providing stakeholders with the opportunity to comment and provide feedback. EDPB Chair Anu Talus said: “By clarifying the interplay between the DSA and the GDPR, these guidelines mark a significant step towards ensuring a coherent and effective EU digital rulebook, and they will help uphold the fundamental rights and freedoms of individuals. I hope that stakeholders, including the competent authorities under the DSA, will make the most of the opportunity to contribute to the public consultation\". More work in the pipeline Following these first guidelines on the interplay between the GDPR and the DSA, further work is underway with other regulators to clarify the new cross-regulatory landscape and maintain coherent and consistent safeguards for the protection of personal data. In this regard, the EDPB is working on joint guidelines with the European Commission on the interplay between the Digital Markets Act (DMA) and the GDPR, as well as on joint guidelines on the interplay between the AI Act and EU data protection laws."},{"source":"EDPB News","description":"Brussels, 20 January - The European Data Protection Board (EDPB) has adopted a report on the implementation of the right of access by controllers . The report summarises the outcome of a series of coordinated national actions carried out in 2024 under the Coordinated Enforcement Framework (CEF). It lists the issues that were observed for some controllers, along with a series of recommendations to help them implement the right of access. A central element is controllers’ awareness of the EDPB Guidelines 01/2022 on data subjects rights – Right of access and whether these guidelines were followed in practice. EDPB Deputy Chair Zdravko Vukíc said: “The CEF is a valuable initiative that helps strengthen the cooperation among Data Protection Authorities (DPAs): by tackling selected topics in a coordinated fashion, they achieve greater efficiency and more consistency. How controllers implement the right of access lies at the heart of data protection and it is one of the most frequently exercised data subject rights.” Throughout 2024, 30 DPAs across Europe launched coordinated investigations into the compliance of controllers with the right of access, by opening formal investigations, assessing whether a formal investigation was warranted and/or carrying out fact-finding exercises.  A total of 1,185 controllers, consisting of small and medium-sized enterprises (SMEs) and big companies active in different industries and fields, as well as various types of public entities, responded to the action. Areas of improvement and main challenges The results suggest that more awareness raising about Guidelines 01/2022 is necessary , both at national and EU level, as the guidelines help controllers implement the right of access, explain how exercising this right can be made easier, and list the exceptions and limitations of the right to access. As a result of the 2024 CEF action, seven challenges were identified. One of them is the lack of documented internal procedures to handle access requests. In addition, inconsistent and excessive interpretations of the limits to the right of access were also observed, such as overly relying on certain exceptions to automatically refuse access requests. Another example is the barriers that individuals could encounter when exercising their right of access, such as  formal requirements or being requested to provide excessive identification documents. For each challenge identified, the report provides a list of non-binding recommendations to be taken into account by controllers and DPAs. Positive findings Despite the existing challenges, two thirds of participating DPAs evaluated the level of compliance of responding controllers with respect to the right of access from ‘average’ to ‘high’. One important factor identified as having an impact on the level of compliance was the volume of access requests received by controllers, as well as the size of the organisation. More specifically, large-sized controllers or controllers receiving more requests were more likely to reach a higher level of compliance than small organisations with less resources. Positive findings were observed across Europe. These include the implementation of best practices by controllers, such as user-friendly online forms enabling individuals to submit an access request easily as well as self-service systems to allow individuals to autonomously download their personal data in a few clicks and at any time. Background and next steps The CEF is a key action of the EDPB under its 2024-2027 Strategy, aimed at streamlining enforcement and cooperation among DPAs.  In the past three years, two previous CEF actions were carried out. The results of these national actions are aggregated and analysed together to generate deeper insight into the topic and allowing for targeted follow-up on both national and EU level. In 2023, the EDPB published the report on its first coordinated action on the use of cloud-based services by the public sector . In 2024, the EDPB also published the","id":1857297,"titre":"CEF 2024: EDPB identifies challenges to the full implementation of the right of access","url":"https://www.edpb.europa.eu/news/news/2025/cef-2024-edpb-identifies-challenges-full-implementation-right-access_en","pubDate":"Mon, 20 Jan 2025 15:49:16 +0100"}]