[{"id":3241460,"description":"By: Susannah Tredwell , Manager of Library Services at DLA Piper (Canada) LLP and James Bachmann , Instructional Librarian, Law Library, University of British Columbia Since 1988, when CALL/ACBD’s Copyright Committee was first set up, CALL/ACBD has advocated for its members' interests in the area of copyright. While the primary focus of CALL/ACBD’s copyright advocacy over the last few years has been on Crown copyright and primary law, CALL/ACBD has also made submissions about such areas as fair dealing and licencing. CALL/ACBD sees this work as not only supporting the needs of its members but also as serving the interests of access to justice as a whole. Continuing this work, on January 18, 2022 CALL/ACBD, along with Library Futures Institute, will act as an intervener in the Supreme Court of Canada case Society of Composers, Authors and Music Publishers of Canada, et al. v. Entertainment Software Association, et al.   Kim Nayyer, CALL/ACBD’s President, and Robert Janes of JFK Law   will be representing CALL/ACBD and Library Futures. This case addresses the question of how the concepts of “communication to the public by telecommunication” and “making available on demand” as used in the Copyright Act should be understood. The outcome of this case has the potential to significantly impact various library activities, including controlled digital lending and possibly even the simple use of hyperlinks, particularly in light of the limited scope of current library and education exceptions in the Copyright Act . CALL/ACBD's submitted that the court refrain from broadly construing the terms “making available” and “Communication to the Public by Telecommunication” and that s. 2.4(1.1) of the act (\"Communication to the public by telecommunication\")   does not need to be understood as creating a new right.   You can find CALL/ACBD’s intervener's factum at https://www.scc-csc.ca/WebDocuments-DocumentsWeb/39418/FM050_Intervener_Canadian-Association-Law-Libraries-et-al.pdf . The other factums in this case are available at https://www.scc-csc.ca/case-dossier/info/af-ma-eng.aspx?cas=39418 .  CALL/ACBD has acted as an intervener at the Supreme Court of Canada on two other occasions. In Keatley Surveying Ltd. v. Teranet Inc. , which looked at Crown copyright, CALL/ACBD submitted   that “s. 12 Crown copyright does not extend to primary sources of law”. In York University v. Canadian Copyright Licensing Agency  (\"Access Copyright\"), CALL/ACBD submitted   that the SCC “should resist the temptation to modify or clarify the existing fair dealing test” stating that the existing test “is a flexible multifactorial test that allows libraries (and other institutions) to tailor access and appropriate copying policies that consider all relevant circumstances.” CALL/ACBD also made submissions to the 2018 review of the Copyright Act , R.S.C. 1985, c. C-42: one general submission   and <a","source":"Canadian Association of Law Libraries / L'Association canadienne des bibliothèques de droit CALL/ACBD Blog","pubDate":"Mon, 26 Oct 2026 07:55:47 +0100","titre":"Canadian Association of Law Libraries Intervention in Upcoming Supreme Court of Canada Copyright Case","url":"https://www.callacbd.ca/CALL-Blog/12242053"},{"source":"Arcom Textes juridiques","id":3233315,"description":"The French regulatory authority for audiovisual and digital communication (hereinafter ‘Arcom’), Having regard to Act No. 86-1067 of 30 September 1986, as amended, on freedom of communication, in particular Articles 3-1 and 48 thereof; Having regard to the Decree of 13 November 1987, as amended, approving the terms of reference and specifications of Radio France and the National Audiovisual Institute; Having regard to Decree No. 2009-79 of 23 June 2009, as amended, laying down the terms of reference for the national broadcaster France Télévisions; Having regard to Decree No. 2012-85 of 25 January 2012, as amended, laying down the terms of reference of the national broadcasting organisation responsible for France’s international audiovisual services (France Médias Monde); Having regard to the submission of a case before the court on 20 July 2026 concerning a draft decree amending the terms of reference and specifications of the national broadcasting organisations; Having deliberated on 27 July 2026, issues the following opinion: By letter dated 20 July 2026, the Government referred to Arcom a draft amendment to the decrees approving the terms of reference and conditions of France Télévisions, Radio France and the company responsible for France’s audiovisual services (France Médias Monde). These amendments are intended, in particular, to implement notices Nos. 1 to 4, 6 to 9 and 14 of the remit entrusted to Mr Bruno Lasserre, Honorary Vice-President of the Council of State, concerning the impartiality of the audiovisuel public service broadcasting, the conclusions of which were made public on 29 May 2026. In this regard, ARCOM welcomes the swift implementation of the proposals in the Lasserre report falling within its regulatory remit. The draft legislation submitted for its consideration makes it possible, in particular, to better define the scope of the requirement for impartiality and to enshrine it explicitly in the legislation setting out the obligations of public service broadcasters in the audiovisual sector. These new requirements will, however, necessitate the allocation of dedicated means, in particular to deal with the submission of cases before the court and to improve the functioning of the committees on integrity, independence and plurality of information and programmes (CHIPIP). The draft decree also summons ARCOM to make the following comments. I. – Provisions relating to the impartiality of public audiovisuel broadcasting Clarification of the requirement for impartiality and the obligations arising therefrom The draft decree clarifies the requirement for ‘impartiality in the public audiovisual industry’ set out in Article 3-1 of the Act of 30 September 1986, which is defined as ‘ an essential condition for building the necessary trust between the public, in all its diversity, and the public service, a common good that belongs to all”, implying “a duty to set an example in terms of transparency and honesty in reporting, as well as respect for the plurality of schools of thought and opinion ’ without hindering ‘the definition of an editorial line which, whilst implementing these principles, sets the services offered by the company apart’. The draft decree echoes the wording of the first notice of the Lasserre report and specifies in this regard that the requirement is to be assessed in a manner proportionate to the nature and format of the programmes and entails: the adoption, by each national broadcaster, of an editorial charter setting out the ethical rules applicable to news and the programmes that contribute to it; the establishment of proceedings for handling complaints regarding compliance with the charter; the publication of an annual report on the public’s perception of the impartiality of the services provided by the aforementioned broadcasters. As part of the monitoring of compliance with the terms of reference and specifications, Arcom, which is legally responsible for","pubDate":"Thu, 22 Oct 2026 08:04:53 +0200","titre":"Opinion of 27 July 2026 on the amendment of the terms of reference and specifications of the national programme companies France Télévisions, Radio France and France Médias Monde","url":"https://www.arcom.fr/en/find-out-more/legal-area/legal-resources/opinion-27-july-2026-amendment-terms-reference-and-specifications-national-programme-companies-france-televisions-radio-france-and-france-medias-monde"},{"pubDate":"Thu, 08 Oct 2026 08:06:59 +0200","url":"https://www.ftc.gov/business-guidance/blog/2019/04/i-dressup-data-security-mess","titre":"i-Dressup and a data security mess-up","source":"FTC USA Business Blog Posts","id":3203250,"description":"i-Dressup and a data security mess-up lfair April 24, 2019 | 3:08PM i-Dressup and a data security mess-up By Lesley Fair Kids love to play dress-up, but parents wouldn’t want them rummaging through the attic or climbing to the top shelf of the wardrobe without permission and proper supervision. The i-Dressup.com website offered users – including children – a virtual way to play dress-up and design clothes without those potential dangers. But according to an FTC complaint, Unixiz, Inc. , the company behind i-Dressup, violated the Children’s Online Privacy Protection Act in ways that created different kinds of risks. COPPA puts two separate sets of protections in place to help keep parents in control of personal information collected from their kids online. First, COPPA-covered companies must clearly disclose their information policies and get parental consent before collecting personal information from children under 13. Second, companies must provide reasonable and appropriate security for the data they collect. According to an FTC settlement, i-Dressup fell short on both COPPA requirements. The complaint alleges i-Dressup failed to provide sufficient notice on its site of the information it collected online from kids, how it used it, its disclosure practices, and other specifics required by the COPPA Rule. The company’s direct notices to parents were deficient, too. Among other things, they didn’t include the COPPA-required statement that if parents don’t provide consent within a reasonable time, i-Dressup will delete their online contact information from its records. Stick with the story because that failure turned out to be particularly troubling. In addition to letting users play online games, i-Dressup featured a community where they could “explore their creativity and fashion sense with unique personal profiles” and interact with others. To register, i-Dressup required people to submit a user name, password, birthdate, and email address. If the birthdate indicated the person was under 13, the email field changed to “Parent’s Email.” Once the under-13 user filled in the required fields and clicked “Join Now,” i-Dressup collected the personal information and sent a message to the address entered into the Parent’s Email field. The person receiving the email could consent by clicking the “Activate Now!” button. However, if the parent didn’t give consent, i-Dressup retained the personal information it had collected from the child online. The FTC says the company’s failure to delete that information violated Section 312.5(c)(1) of the COPPA Rule. In addition to violating COPPA’s parental consent provisions, i-Dressup allegedly violated the Rule’s data security requirements . According to the FTC, i-Dressup stored and transmitted users’ personal information (including passwords) in plain text. In addition, the company failed to perform network vulnerability testing of its network, even for well-known threats like SQL attacks; it didn’t implement an intrusion detection and prevention system; and it didn’t monitor for potential security incidents. The upshot? The company learned that a hacker had gained entry to its network and accessed information about 2.1 million users, including approximately 245,000 users who indicated they were under 13. To settle the case , i-Dressup and its owners will pay a $35,000 civil penalty. They’re also prohibited from violating COPPA in the future, and can’t sell, share, or collect any personal information until they implement a comprehensive data security program and get independent biennial assessments. In addition, they’ll have to provide the FTC with an annual certification of compliance. The message for sites and operators covered by COPPA is that an effective system of parental consent is only the first step toward compliance. Section 312.8 of the COPPA Rule also requires you to “establish and maintain reasonable"},{"titre":"FTC consumer protection year in review offers 2020 vision for your business","url":"https://www.ftc.gov/business-guidance/blog/2020/01/ftc-consumer-protection-year-review-offers-2020-vision-your-business","pubDate":"Thu, 08 Oct 2026 08:06:58 +0200","source":"FTC USA Business Blog Posts","description":"FTC consumer protection year in review offers 2020 vision for your business lfair January 8, 2020 | 9:26AM FTC consumer protection year in review offers 2020 vision for your business By Lesley Fair They say hindsight is 20/20, but what about foresight? We’re not ones to prognosticate, but a look at notable FTC cases and initiatives from the past year suggests some topics likely to be top of mind in months to come. Here is a non-exhaustive list of issues in our 2019 rearview mirror and likely visible through the 2020 windshield. Consumer privacy. The FTC’s $5 billion enforcement action against Facebook made history and headlines, but the other notable part of the case is the monumental change the order mandates to Facebook’s privacy ecosystem. The Commission opinion in Cambridge Analytica reaffirms the proposition that like any other claim, a company’s privacy promises are viewed through the lens of established FTC consumer perception principles. A series of cases demonstrates the agency’s continued commitment to challenging false or misleading representations about businesses’ compliance with the EU-U.S. Privacy Shield Framework. Another important development is the FTC’s proposed settlement with Retina-X . It’s our first action against a marketer of stalking apps – software that allowed purchasers to monitor the mobile devices on which they’re installed, without users’ knowledge. COPPA. Congress passed the Children’s Online Privacy Protection Act to ensure that when it comes to the collection of kids’ personal information online, parents are in the driver’s seat. The FTC settlement with YouTube – brought in conjunction with the New York Attorney General – alleges that the company collected kids’ personal data without parental consent, in violation of the COPPA Rule . The $170 million civil penalty broke the record for the largest remedy in an FTC COPPA case, set months before in our $5.7 million settlement with Musical.ly , now known as TikTok. If you’re a YouTube channel owner, read a special Business Blog post for tips on determining if your content is directed to children. Data security. Is your company honoring its data security promises and taking reasonable steps to safeguard the sensitive information in its possession? The FTC, CFPB, and State AG actions against Equifax illustrate how consumers are injured when companies ignore reasonably foreseeable threats. The settlement, which totals between $575 million and $700 million – also reminds businesses that heeding warnings about known risks is more prudent (and cost-effective) than the alternative. Three threads tie together the FTC’s unrelated actions against LightYear Dealer Technologies and InfoTrax Systems . They both sell management software to specific industries. They both allegedly failed to take reasonable steps to secure their networks, resulting in damaging data breaches. And they’re both covered by similar new orders the FTC has introduced in recent data security cases. If you or your clients are players in the Internet of Things, the settlement of the FTC’s litigation against connected device company D-Link sends an unmistakable message: The future of the IoT marketplace depends on secure software development. Endorsements, certifications, and influencers. Why is the FTC concerned about the accuracy of endorsements and certifications? Because they’re material to consumers. The FTC says Truly Organics’ claim that its personal care products were “certified organic” lathered up a double bubble of deception. First, its merchandise contained ingredients that weren’t organic. Second, the company falsely claimed that its products were certified by USDA’s National Organic Program. Other FTC developments focused on the use of endorsements in social media. The FTC’s action against Devumi alleges the company sold fake followers, phony subscribers, and bogus","id":3203247},{"pubDate":"Wed, 07 Oct 2026 14:05:06 +0200","titre":"A clothes look at the RN database: Q&A with FTC staff","url":"https://www.ftc.gov/business-guidance/blog/2017/10/clothes-look-rn-database-qa-ftc-staff","id":3201873,"description":"A clothes look at the RN database: Q&A with FTC staff lfair October 5, 2017 | 11:18AM A clothes look at the RN database: Q&A with FTC staff By Lesley Fair It’s not much bigger than a postage stamp, but the label on many textile, wool, and fur products provides important information, including fiber content, country of origin, and a company name or Registered Identification Number (RN). The FTC administers the RN system and industry members will want to check out recent upgrades to the RN website . With RNs and labels on our mind, we asked some common RN-related questions to attorney Josh Millard, whom we’d label as one of the FTC’s go-to people on the subject. First things first. What’s an RN? JOSH:   A Registered Identification Number (RN) is a numerical designation – the prefix RN followed by a set of digits – that identifies the company responsible for marketing, distributing or otherwise handling a product covered by the Textile, Wool, and Fur Acts.  Because some labels are small and some company names are long, the law allows U.S.-based businesses to use an RN as a “shorthand” identification. We think the upgrades to the RN website will make it even easier for businesses to use. How do I get an RN for my company? JOSH:   Apply online. FTC staff will review your application and email you typically within 1-3 business days. As soon as your application has been approved, you’ll receive your RN.  How much does it cost to get an RN? JOSH:   There’s no charge. Is it mandatory that companies use an RN on labels? JOSH:   No, you don’t have to use an RN. It’s perfectly acceptable to include your company name instead, but many companies prefer to use an RN because it takes up less space. The RN system has other benefits, too. For example, it lets people identify your business easily through the RN Search screen . Consumers or other industry members can type in the number and readily find your business. Our company doesn’t reside in the United States.  Can we get an RN? JOSH:   Only U.S.-based businesses can get an RN. If your foreign company manufactures or is involved in the advertising, distribution, or sale of a product covered by the Textile, Wool, and Fur Acts, put the company name on the label instead of an RN. Alternatively, you can label the product with the RN or business name of a U.S. company directly involved with importing, distributing, or selling the product when that’s the case. Going through our records we found we have multiple RNs.  Is that a problem? JOSH:   It’s not prohibited, but we no longer issue multiple RNs to a single company and encourage companies to cancel any extra RNs to simplify recordkeeping. Our headquarters has moved since we applied for an RN.  Do we need to update our application? JOSH:   Yes. If there has been a change to your business name, address, or legal status, please update the information in your RN registration.  An RN can be cancelled if a business doesn’t keep its information up to date, so it’s wise to check. The good news is that the upgraded RN website makes that easier to do. What if we choose to use a company name on the label, rather than an RN? JOSH:   You must include the full name your company uses to do business – in other words, the name that appears on documents like purchase orders or invoices. It can’t be a trademark, trade name, brand, or designer name unless that’s also the name under which your company does business. What kind of guidance does the FTC have for industry members? JOSH:  Threading Your Way Through the Labeling Requirements Under the Textile and Wool Acts is a great place to start, and the FTC’s Clothing and Textiles page includes links to brochures, cases, workshops and other compliance resources.","source":"FTC USA Business Blog Posts"},{"id":3200011,"description":"We can’t go for that (no can do) lfair July 17, 2017 | 11:38AM We can’t go for that (no can do) By Lesley Fair Of course, phantom debt collection – the practice of pressuring people to pay “debts” they don’t owe – harms consumers. But as an FTC complaint demonstrates, when phantom debt collectors strike, they could affect your company, too. According to the FTC , a Florida-based outfit engaged in a scheme to defraud consumers through the collection of debts people didn’t actually owe or the company didn’t have the authority to collect. The complaint charges that the defendants – Hardco Holding Group, S & H Financial Group, Dequan M. Sicard, and Daryl M. Hall (no, not that Daryl Hall) – violated the FTC Act and Fair Debt Collection Practices Act. When contacting consumers, in many instances the defendants allegedly impersonated attorneys and threatened to have people thrown in jail if they didn’t pay up on delinquent payday loans – loans, remember, that many consumers didn’t take out in the first place and defendants didn’t have the right to collect. One tactic involved contacting people with a “case number” and directing them to dial a callback number. On the second call, the defendants allegedly said they were affiliated with named law firms and that the consumer had committed a felony, could go to prison, or faced arrest. According to the complaint , to boost the credibility of their threat of pending or imminent legal action, the defendants claimed to have the consumer’s Social Security number, bank account number, or contact information for family members. Afraid of legal repercussions, many consumers knuckled under to the demand for payment. The FTC says the defendants also told third parties that consumers owed money, a violation of the FDCPA. In addition, the complaint charges that the defendants didn’t disclose their identity to consumers, failed to provide proper validation notices, and used other false, misleading, and abusive tactics. Phantom debt collectors unquestionably injure consumers, but how could conduct like that affect your company? According to the lawsuit, when pressed to identify themselves, the defendants often gave the names or addresses of legitimate small businesses that had nothing to do with the purported debt or the debt collectors. When concerned consumers contacted those companies to complain, their employees got an understandably angry earful. From the FTC’s perspective, unrelated small businesses shouldn’t have their reputations sullied by others’ allegedly illegal tactics. A federal court in Orlando has temporarily halted the operation and frozen its assets. The FTC wants to stop the illegal practices once and for all. What can consumers do if they’re getting calls for debts they don’t owe ? File a complaint with the FTC. How can small businesses help protect their good names? Every now and then, do a selfie search with your company name and a word like “debt.” If you see consumer posts that suggest that a debt collector is illegally using your name – or if your employees are getting complaints about debt collection calls supposedly coming from your company – let the FTC know about it , too. In the meantime, businesses looking for FDCPA compliance resources can visit the FTC’s debt collection page for some – in the words of the other Daryl Hall (and let’s not forget John Oates) – “Adult Education.”","source":"FTC USA Business Blog Posts","pubDate":"Tue, 06 Oct 2026 14:06:39 +0200","titre":"We can’t go for that (no can do)","url":"https://www.ftc.gov/business-guidance/blog/2017/07/we-cant-go-no-can-do"},{"description":"Keep FCRA in the foreground when the subject is background screening chundycz April 9, 2014 | 12:13AM Keep FCRA in the foreground when the subject is background screening By Lesley Fair When the talk turns to Big Data, part of the conversation is about all the public information available about people's lives – and how companies market it to prospective employers, landlords, etc.  Two cases just announced by the FTC  serve as a cautionary reminder to members of the industry that what they do may be subject to the long-standing consumer protections of the  Fair Credit Reporting Act (FCRA) .  InfoTrack, an Illinois company, and San Diego-based Instant Checkmate will be paying civil penalties to settle FTC lawsuits that they violated the FCRA.  Is it time for an FCRA refresher at your business? Instant Checkmate marketed its reports as a way for prospective employers and landlords to investigate applicants.  For example, the company advertised that one of the “GOOD REASONS to get instant criminal checks on anyone right now” was to “check out tenants before they rent.”  It also used a Google Ad Words campaign to make sure its site appeared when people searched for background checks on nannies, babysitters, maids, and housekeepers.  What kind of information would buyers get?  Current and previous addresses, birth certificates, arrest histories, and marriage and divorce records, to name just a few examples. InfoTrack offered similar services to employers nationwide, including background screening reports with people’s driving records, education and employment information, criminal histories, and even records from sex offender registries. How does the FCRA come in?  The law defines a “consumer report” as a “communication of any information” by a consumer reporting agency (CRA) that bears on a person’s “credit worthiness, credit standing, credit capacity, character, general reputation, personal characteristics, or mode of living” which is used (or expected to be used) as a factor in establishing their eligibility for credit, insurance, employment, or other reasons outlined in the law. According to the FTC, what Instant Checkmate and InfoTrack were doing triggered the FCRA.  For example, companies covered by the law must follow procedures to assure their reports are as accurate as possible, must take steps to see that those using their reports have permissible purposes for accessing them, and must provide required User Notices explaining key protections for consumers.  The law imposes special requirements when CRAs provide reports containing public record information that could have an adverse effect on a person’s ability to get a job.  In that case, the CRA must either: 1) notify the consumer that it’s reporting the information in the public record; or 2) maintain “strict procedures” – that’s the language in the law – designed to ensure the reported public information is complete and up to date. You’ll want to read the complaints for specifics of where the FTC says the companies fell short, but one example cited in the lawsuit against InfoTrack offers an object lesson on why FCRA protections are so important to consumers – and how the consequences can be devastating when companies don’t live up to the law.  According to the FTC, the reports InfoTrack provided to prospective employers included information about whether a job applicant was on the National Sex Offender Registry.  The employer would provide the first and last name and the date of birth to help InfoTrack with its search.  The problem was that before the fall of 2011, no date of birth was available for many names on the Registry.  If InfoTrack’s search found more than one person with the same first and last name, it reported a “possible match” to employers and gave them reports that included several different people with the","id":3198181,"source":"FTC USA Business Blog Posts","url":"https://www.ftc.gov/business-guidance/blog/2014/04/keep-fcra-foreground-when-subject-background-screening","titre":"Keep FCRA in the foreground when the subject is background screening","pubDate":"Mon, 05 Oct 2026 14:07:46 +0200"},{"source":"FTC USA Business Blog Posts","description":"FTC, Florida AG to small business: Scrutinize “o-fishy-al” invoices lfair July 30, 2018 | 11:05AM FTC, Florida AG to small business: Scrutinize “o-fishy-al” invoices By Lesley Fair If it looks like a duck and quacks like a duck, it’s probably a duck. But the same can’t be said for a mailer that looks like an official invoice. It could be an “o- fishy -al” offer that deceptively mimics the appearance of a government document. A case filed by the FTC and the Florida Attorney General challenges the practice of sending mailers that allegedly create the false impression that small businesses are required to buy labor regulation posters from the sender. Consider what defendants Starwood Consulting, also doing business as Corporate Compliance Services, and company president Thomas Henry Fred, Jr., sent to small businesses. The mailers – which include a Washington, D.C., 202 area code – are titled “LABOR LAW COMPLIANCE REQUEST FORM” and include the warning “Failure to comply with posting regulations can lead to fines up to $17,000.” The mailers include a “Business ID” and instruct recipients to respond by a certain date. Small businesses can’t miss the purported consequences of ignoring the letter: Your business is required by federal law to post a current compliant labor law poster in the workplace. Federal law requires that this poster be placed on the property of the business. Whether you have 1 employee or 1,000 you must post current employment posters in the workplace. The poster must also include information about workers compensation benefits. Pursuant to federal law 29 USC Sec. 999(i) & 29 USC Sec. 2005 penalties and risks of non-compliance with posting regulations can lead to potential fines of $17,000 per instance, for failing to post federally required information. Further, lawsuits can be tolled based on failing to display mandatory posters. . . . To obtain your Federal employment labor law poster, please detach the above coupon and return it in the enclosed envelope with your document processing fee of $84.00. The mailer continues: “IMPORTANT! FOLLOW INSTRUCTIONS EXACTLY WHEN COMPLETING THIS FORM.” Those instructions include directions to detach the “payment coupon,” return it with the “document fee” of $84, and keep the bottom portion as the “official receipt.” The enclosed return envelope is addressed to “Corporate Compliance Services, Compliance Processing Center.” That’s a description of the mailer, but here are the facts, according to the FTC and the AG. First, the mailer isn’t from a government entity or affiliate. Starwood Consulting and its d/b/a Corporate Compliance Services are private companies in the business of selling those posters. In addition, despite the 202 area code, the defendants have no operations in Washington and posters similar to the ones the defendants peddle are available for free from the U.S. Department of Labor. What about those statutory provisions referring to “potential fines of $17,000 per instance”? In fact, neither of those citations has anything to do with labor posters. 29 U.S.C. § 999(i) refers to repealed provisions of the Young Adult Conservation Corps and 29 U.S.C. § 2005 addresses the Employee Polygraph Protection Act. According to the complaint , recipients of the mailer are often small businesses that have recently incorporated or established limited liability companies. What’s more, some businesses say they never received the posters they paid for. Others report they got second notices that they had to pay another $84 fee to get an updated poster. Despite a small “disclaimer” at the bottom of the reverse side of the mailer that “[t]his offer serves as a solicitation and not to be intended as a bill due,” the FTC and the AG say that business owners were misled and filed more than 250 complaints about the company. (According to the Better Business","id":3198177,"url":"https://www.ftc.gov/business-guidance/blog/2018/07/ftc-florida-ag-small-business-scrutinize-o-fishy-al-invoices","titre":"FTC, Florida AG to small business: Scrutinize “o-fishy-al” invoices","pubDate":"Mon, 05 Oct 2026 14:07:45 +0200"},{"url":"https://www.ftc.gov/business-guidance/blog/2025/09/first-inform-consumers-act-enforcement-case-filed-against-online-marketplace-temu","titre":"First INFORM Consumers Act enforcement case filed against online marketplace Temu","pubDate":"Mon, 05 Oct 2026 14:07:45 +0200","description":"First INFORM Consumers Act enforcement case filed against online marketplace Temu kkrown September 5, 2025 | 10:00AM First INFORM Consumers Act enforcement case filed against online marketplace Temu Online marketplaces and third party sellers looking for a refresher on the INFORM Consumers Act should look no further than the recent settlement with Whaleco, Inc., which operates the online marketplace Temu. The complaint alleges the company failed to provide online shoppers with required information and tools. This is the first case brought to enforce the INFORM Act. The INFORM Act, which went into effect in 2023, seeks to make online transactions more transparent. Among other things, the law requires online marketplaces to collect, verify, and disclose certain information about high-volume third party sellers. ( Informing Businesses about the INFORM Consumers Act  has more on how the law defines terms, what’s required of online marketplaces, and the substantial penalties the FTC and state law enforcers may seek if online marketplaces violate the law.) In 2022, Temu launched its online marketplace in the United States, where consumers can view product listings on Temu’s homepage, through search results, and in gamified shopping experiences on the platform. According to the complaint, Temu violated the INFORM Act by failing to offer a mechanism for consumers to report suspicious activity — electronically and by phone — on the gamified product listings of many high-volume third party sellers and by failing to offer a telephonic mechanism on non-gamified product listings. The complaint also alleges that Temu did not post required identifying information about sellers on its gamified product listings or mobile site, and that Temu’s disclosures, when made, were difficult to find. According to the settlement, Temu will pay a $2 million civil penalty, provide a telephonic mechanism for consumers to report suspicious activity on listings, and make other required disclosures. Is your business covered by the INFORM Act? Make sure you:  Review the provisions of the INFORM Act thoroughly . Make sure you fully understand — and have measures in place to comply with — each of its requirements. Make required disclosures easy for consumers to notice . Required disclosures should stand out from any surrounding material and use plain language. Minimize or eliminate steps consumers need to take to reach required disclosures. Ensure required disclosures are available across all iterations of your platform . The INFORM Act mandates disclosures on all interfaces with product listings. And as your platforms evolve, regularly assess and update your compliance efforts. If your business sells through online platforms, check out  What Third Party Sellers Need to Know About the INFORM Consumers Act . This covers what sellers are impacted by the INFORM Act, what you can expect online platforms to require of you, and what information platforms must disclose about you to consumers. It also answers some questions you may have about the law. And if you spot a violation of the INFORM Act, r­eport it to the FTC using this  dedicated link","id":3198178,"source":"FTC USA Business Blog Posts"},{"pubDate":"Sun, 04 Oct 2026 08:05:12 +0200","titre":"Made in USA? Avoiding a Yankee Doodle Don't","url":"https://www.ftc.gov/business-guidance/blog/2013/10/made-usa-avoiding-yankee-doodle-dont","source":"FTC USA Business Blog Posts","id":3196242,"description":"Made in USA? Avoiding a Yankee Doodle Don't wfg-adm109 October 21, 2013 | 11:17AM Made in USA? Avoiding a Yankee Doodle Don't By Lesley Fair There are lots of nifty phone accessories, bottle holders, tow straps, pet items, and lanyards out there.  So a label that says the product is Made in the USA may help make the decision for some consumers.  When it bears the American flag and says “TRULY MADE IN THE USA,” that just might seal the deal.  But according to an FTC lawsuit , a lot of the “Made in the USA” merchandise touted by Logan, Utah-based E.K. Ekcessories wasn’t really made in the USA – turning the company’s claims from a Yankee Doodle Do to a Yankee Doodle Don't. E.K. Ekcessories sells a variety of outdoor equipment through popular retailers and on its own site.  In addition to the labels, the company touted its products’ U.S. pedigree with statements like “For 28 years E.K. Ekcessories has been producing superior quality made accessories in our 60,000 sq. ft. facility in Logan, Utah,” and “Our source of pride and satisfaction abounds from a true ‘Made in USA’ product.” To say an item is made in the USA, all or virtually all of it has to be U.S.-made.  In other words, all significant parts and processing must be of U.S. origin, and the product should contain no – or negligible – foreign content. That’s the standard explained in the FTC’s 1997 Enforcement Policy Statement on U.S. Origin Claims.  But according to the complaint, in many cases, E.K. Ekcessories made “Made in USA” representations that were flat-out false.  In other instances, the FTC says the company slapped a label on a product without a reasonable basis for making the claim.  Both courses of conduct violate the FTC Act. Under the proposed order, the company can’t say a product is made in the USA unless all or virtually all of it really is made in the United States.  The order also bans other misleading claims about products’ country of origin. Given that other companies are selling the deceptively labeled merchandise, E.K. Ekcessories has to contact all distributors who bought or received products between January 1, 2010 and May 1, 2013, explaining the FTC’s lawsuit.  The retailers will be asked to pull marketing materials that say all E.K. Ekcessories stuff is U.S.-made or that describe a specific list of products as made in the United States, of U.S.-origin, or “Truly Made in the USA.”  For certain lines of products, they’ll get stickers to cover the inaccurate claims. You can file an online comment about the proposed settlement by November 21, 2013. The message for marketers?  First , it’s a good time to brush up on how to comply with Made in USA standards.  The Business Center has a dedicated Made in USA page to make that easier for you.  Second , given just how important many consumers take a Made in USA claim, companies that make that statement falsely or without a reasonable basis are risking law enforcement action.  Truly."},{"description":"Speaking of Spokeo: Part 2 — The company’s allegedly bogus endorsements wfg-adm109 June 13, 2012 | 12:25PM Speaking of Spokeo: Part 2 — The company’s allegedly bogus endorsements By Lesley Fair The lawsuit against data broker Spokeo is the FTC’s first Fair Credit Reporting Act case addressing the collection of online info — including data from social networking sites — when used in the context of employment screening.  But that’s not the only way the Spokeo settlement touches on social media.  The FTC also charged that Spokeo violated Section 5 by having employees post glowing recommendations of the company’s services on news and technology websites without disclosing their true identity. Perhaps just the work of a rogue cubicle occupant?  No, said the FTC.  According to the complaint , Spokeo directed its employees to write the comments.  Spokeo managers then edited what they wrote and had the staffers post the endorsements using account names provided by Spokeo.  The purpose, says the FTC, was to give readers the misleading impression that the laudatory words had been posted by independent consumers or business users of Spokeo. The FTC’s revisions to its Endorsement Guides made headlines a few years ago.  Ironically enough, the provision that seemed to attract the most attention is one that didn’t change.  It’s the law — and it’s always been the law under Section 5 — that consumers have a right to know when there’s a material connection between an advertiser and an endorser.  Here’s how the Guides put it:  \"When there exists a connection between the endorser and the seller of the advertised product that might materially affect the weight or credibility of the endorsement ( i.e., the connection is not reasonably expected by the audience), such connection must be fully disclosed.\" According to the FTC, by posting comments that conveyed the untruthful impression that they came from satisfied users of Spokeo’s services, Spokeo engaged in false and misleading practices.  To settle the endorsement count in the lawsuit, Spokeo has agreed that it won’t misrepresent, expressly or by implication, the status of any user of a product or service — for example, that someone is an independent, ordinary endorser if that’s not the case.  The company also will clearly and prominently disclose any material connection between an endorser and Spokeo (or any other entity advertising, selling, or promoting a product) when a connection exists.  What about the bogus endorsements already posted?  Spokeo has seven days to take all reasonable steps to pull them down. Looking for more about complying with the Endorsement Guides?  Read The FTC’s Revised Endorsement Guides: What People are Asking and watch this video: While you’re at it, share this post and those resources with your marketing staff, your ad agency, your PR firm, and anyone else who plays a role in your publicity and promotions. Next:  What the Spokeo settlement means for your business, your next ad campaign, and your job search","id":3195787,"source":"FTC USA Business Blog Posts","url":"https://www.ftc.gov/business-guidance/blog/2012/06/speaking-spokeo-part-2-companys-allegedly-bogus-endorsements","titre":"Speaking of Spokeo: Part 2 — The company’s allegedly bogus endorsements","pubDate":"Sat, 03 Oct 2026 14:06:13 +0200"},{"id":3194913,"description":"Company to pay $22 million for offering \"free\" credit scores that turned out to be not so free wfg-adm109 November 19, 2014 | 11:12AM Company to pay $22 million for offering \"free\" credit scores that turned out to be not so free By Lesley Fair We’ve brought law enforcement actions – dozens of ‘em. We’ve held workshops, issued reports, and sent warning letters. If it takes sky writing, tap dancing, and a float in a Thanksgiving Day parade, we’ll do that, too. But here’s what’s not going to happen. The FTC is not giving up until businesses get the message that: 1) Free means free; and 2) Key terms and conditions have to be clearly and conspicuously disclosed. A $22 million settlement announced by the FTC and the AGs of Illinois and Ohio with a national credit monitoring service advertising so-called “free” credit scores emphasizes that point. Another note for practitioners: It's the FTC's third case alleging violations of ROSCA . One Technologies and related outfits marketed their credit monitoring programs, MyCreditHealth and ScoreSense, through at least 50 sites, including FreeScore360.com, FreeScoreOnline.com and ScoreSense.com. Their strategy was simple. Buy advertising on search engines so their ads show up near the top when people look for phrases like “free credit report\" and then follow up with a persuasive pitch: “View your latest Credit Scores from All 3 Bureaus in 60 seconds for $0!” According to the lawsuit , the defendants failed to clearly tell consumers that if they availed themselves of those “free” services and didn’t cancel within seven days, the defendants would ding their credit cards for $29.95 a month over and over and over again. The complaint includes screen shots of the defendants’ sites, but before looking at them, take out your reading glasses because they’ll come in handy in trying to locate where the defendants chose to tell people about that $29.95 monthly fee. One line of fine print added in late 2012 said “Free 7-Day trial when you order your 3 Free Credit Scores. Membership is then just $29.95 per month until you call to cancel.” The first problem: The type was tiny – a fraction of the size of the defendants’ multiple use of the word “free.” The second problem: Why should consumers even have to be on the look-out for the cost, given that the defendants so prominently advertised it as “free”? A second purported disclosure appeared as an obscure hyperlink on the page where people typed in their Social Security number and birthdate.  Sandwiched between the logos of various security firms and a large color button that said CONTINUE was this less-than-crystal-clear statement: By clicking on the ‘Continue’ button, you agree to the Offer Details, to the Terms and Conditions, acknowledge receipt of our Privacy Policy and agree to its terms . . . The “Offer Details” link triggered a small pop-up that said, among other things, “At the end of the 7-day trial period, your credit/debit card will be charged $29.95 on a monthly basis until you call to cancel.” Another place the defendants put the information was on a side panel of the Payment Form in white letters on a grey background – a color combination one of the defendants’ own employees described as “known to cause seizures in lab rats.” According to the complaint, once people spotted the unauthorized charges on their accounts, the defendants didn’t make it easy to stop the billing.  And even when people asked for their money back because they hadn’t approved of the charges, the defendants denied refunds to many of them. The lawsuit alleges violations of the FTC Act, as well as the Illinois Consumer Fraud Act, the Ohio Consumer Sales Practices Act, and related state rules. In addition, the complaint is the third FTC action to charge violations of ROSCA, the Restore Online Shoppers’","source":"FTC USA Business Blog Posts","pubDate":"Sat, 03 Oct 2026 08:09:37 +0200","url":"https://www.ftc.gov/business-guidance/blog/2014/11/company-pay-22-million-offering-free-credit-scores-turned-out-be-not-so-free","titre":"Company to pay $22 million for offering \"free\" credit scores that turned out to be not so free"},{"description":"Pink slip slip-up: First FTC cases challenging deceptive car title loans lfair January 30, 2015 | 9:12AM Pink slip slip-up: First FTC cases challenging deceptive car title loans By Lesley Fair She’s got a competition clutch with four on the floor And she purrs like a kitten ‘til the lake pipes roar. And if that ain’t enough to make you flip your lid, There's one more thing. I got the pink slip, Daddy. Back in the days of the Beach Boys’ “Little Deuce Coupe,” the only risk to a car title – the pink slip – was when hot rodders bet them on drag races.The FTC just announced its first two settlements with car title lenders that underscore additional risks to consumers’ pink slips and wallets. What should other companies consider if they want to avoid crossing the yellow line? The complaints challenge allegedly illegal practices by First American Title Lending of Georgia, which operates over 30 locations in that state, and Finance Select, which does business as Fast Cash Title Pawn at five Georgia locations and two in Alabama. What’s a car title loan? It’s typically a high-cost, short-term loan secured with a consumer’s free-and-clear car title. The lender holds on to the title as long as payments keep coming in. Of course, if consumers don’t pay, the lender takes the car. Car title loans tend to run between $1,000 and $10,000. They have high interest rates – the typical APR can be a whopping 300% – and short repayment periods, sometimes only 30 days. Each payment after that first month is called a “renewal.” Given that many consumers who take out car title loans are in financial distress, it’s not surprising that loans may extend over a much longer period. According to the FTC, the average is more like eight renewals. In addition to holding the consumer’s car title, the lender charges monthly fees, sometimes as much as 25% of the amount borrowed per month. That means that after eight renewals, a consumer taking out a $1,000 loan could wind up paying $2,000 in fees. The FTC says the companies’ ads lured consumers in with promises of “zero” interest, but then failed to clearly and conspicuously disclose hidden conditions attached to those eye-catching deals. For example, First American Title Lending touted “0% interest” in big headlines on websites, billboards, newspaper ads, yard signs, and elsewhere. What consumers weren’t clearly told was that they’d only get the 0% rate if they were new customers, if they paid by money order or certified funds, and if they paid in full within 30 days. If it took them longer to pay – the norm in the industry – consumers would have to pony up hefty finance charges calculated back to Day 1 of that \"0% interest\" loan, as well as the fees that started on Day 31. According to the complaint, Fast Cash Title Pawn similarly advertised “0% Title Loans,” sometimes adding “1st 30 days 0%,” without clearly and conspicuously disclosing the substantial strings that were attached – including that if the consumer didn’t pay in full within 30 days, they’d have to pay the finance charge for the first 30 days in addition to charges that kicked in on Day 31.  The lawsuits allege that the companies’ practices violate the FTC Act.  The FTC says First American Title Lending also violated the Truth in Lending Act and Reg Z. Under the proposed settlements, the companies will have to clearly disclose all the qualifying terms associated with getting a loan at the advertised rate and what the finance charge would be after an introductory period ends. The orders also prohibit misrepresentations about material terms of any loan agreement. The FTC’s message to members of the industry is that they’re not flying (driving?) under the radar. Truth-in-advertising standards apply to car title loans, too. What's more, companies will be held to well-established principles of","id":3192605,"source":"FTC USA Business Blog Posts","url":"https://www.ftc.gov/business-guidance/blog/2015/01/pink-slip-slip-first-ftc-cases-challenging-deceptive-car-title-loans","titre":"Pink slip slip-up: First FTC cases challenging deceptive car title loans","pubDate":"Fri, 02 Oct 2026 08:12:17 +0200"},{"pubDate":"Wed, 01 Jul 2026 08:09:43 +0200","url":"https://www.ftc.gov/news-events/news/press-releases/2026/06/ftc-requires-amazon-pay-225-million-resolve-charges-it-knowingly-violated-fair-credit-reporting-act","titre":"FTC Requires Amazon to Pay $2.25 Million to Resolve Charges It Knowingly Violated the Fair Credit Reporting Act","id":2997627,"description":"Amazon will pay $2.25 million in civil penalties to settle Federal Trade Commission allegations that the online retail giant knowingly violated the Fair Credit Reporting Act (FCRA) by refusing to provide transaction records to consumers whose personal information was used by identity thieves to commit fraud. The complaint , filed by the Department of Justice upon notification and referral from the FTC, alleged that in numerous instances, Amazon.com Inc. failed to comply with Section 609(e) of the FCRA, which requires companies to, within 30 days of a consumer’s request, provide victims of identity theft with application and business transaction records about fraudulent transactions made in their names. According to the complaint, Amazon had no written policy to respond to Section 609(e) requests until early 2025, after it learned of the FTC’s investigation, despite prior outreach from FTC staff advising the company to review its compliance with Section 609(e). “Amazon often put identity theft victims through a Kafkaesque ordeal by demanding they identify the thief who stole their information before Amazon would release the records the law entitles them to—records that could help victims protect themselves and recover from the fraudulent conduct,” said Christopher Mufarrige, Director of the FTC’s Bureau of Consumer Protection. “The FTC will not allow companies to simply ignore their legal obligations, especially those designed to support and protect identity theft victims.” Many consumers who contacted Amazon to report fraud were told by its customer service agents that they could not provide the requested records for “security” or “privacy” reasons, the complaint alleged. For example, one consumer reported that when they contacted Amazon seeking business records related to unauthorized charges stemming from a fraudulent account, a company representative said they could not share details about the other account that had used the consumer’s credit card for “security reasons” unless the consumer guessed the name on the account (the name used by the identity thief), which the consumer was unable to do after making 30 attempts. The complaint alleged that in other instances, Amazon agents told consumers they were not able to access the requested records. Amazon even refused to provide application and business transaction records to law enforcement agencies who had been authorized to, and who did, submit requests to Amazon on behalf of consumers who were victims of identity theft. Some frustrated consumers resorted to sending copies of the FCRA and FTC guidance to Amazon in hopes of receiving the requested records, but Amazon still failed to comply with the law. The complaint also alleged that in some cases where Amazon ultimately provided requested records, it failed to respond to consumers within the 30-day timeframe required by the FCRA. In addition to the $2.25 million civil penalty—a record for a Section 609(e) violation—the proposed order will prohibit Amazon from failing to comply with Section 609(e) of the FCRA, requiring the company to provide the records lawfully requested by identity theft victims and law enforcement agencies acting on their behalf. The order also requires Amazon to provide notice to consumers about how identity theft victims can request records under the FCRA. The company must also contact consumers who had requested records since April 2024 from Amazon but did not receive them to inform these consumers that it may have additional records and that the consumers may request those records from Amazon. This is the second case the FTC has brought using its authority under Section 609(e) of the FCRA. The FTC announced its first case involving a violation of Section 609(e) of the FCRA in 2020 against Kohl’s Department Stores Inc . The Commission voted 2-0 to authorize the staff to refer the complaint to the DOJ and to approve the proposed stipulated order. The DOJ filed the complaint and final","source":"Federal Trade Commission - Protecting America's Consumers"},{"source":"EDPB News","description":"Brussels, 27 April – Today marks the 10th anniversary of the GDPR’s adoption, the first comprehensive data protection framework spanning an entire continent, establishing clear rights for individuals and obligations for organisations across Europe. The moment that led to the creation of the EDPB The GDPR led to the establishment of the European Data Protection Board (EDPB) on 25 May 2018, replacing the Article 29 Working Party that was previously in charge of dealing with issues relating to the protection of personal data. The GDPR gave the Data Protection Authorities (DPAs) stronger enforcement powers and expanded the scope of their work from focusing mainly on national compliance complaints to routinely dealing with cross-border cases. In the past 10 years, the 31 European DPAs comprising the EDPB have worked together to ensure the consistent enforcement of the GDPR and a harmonised data protection approach across Europe.   A key role in an evolving digital landscape Today, the GDPR is part of a broader and evolving European digital framework, alongside other digital laws such as the Digital Services Act, the Digital Markets Act, and the AI Act . In a world shaped by artificial intelligence, platform economies, and increasing data-driven innovation, the GDPR ensures that technological progress goes hand in hand with the protection of individuals’ fundamental rights . An inspiration for the rest of the world The impact of the GDPR has extended far beyond Europe’s borders, inspiring similar frameworks across the globe and contributing to a growing international recognition of privacy as a fundamental right .   How the GDPR has shaped the data protection landscape: insights from Data Protection Authorities Have you ever wondered what the data protection landscape looked like before the GDPR and how DPAs prepared for its entry into force? How has life for Europeans changed since its adoption? Watch the video for insights and testimonies from Data Protection Authorities which contributed to the shaping of the data protection landscape in Europe.   Sorry, your browser doesn't support embedded","id":2850552,"titre":"Marking 10 years of the GDPR: the evolution of the European data protection landscape","url":"https://www.edpb.europa.eu/news/news/2026/marking-10-years-gdpr-evolution-european-data-protection-landscape_en","pubDate":"Mon, 27 Apr 2026 14:14:32 +0200"},{"pubDate":"Wed, 15 Apr 2026 08:10:57 +0200","url":"https://www.ftc.gov/news-events/news/press-releases/2026/04/ftc-seeks-public-comment-unfair-deceptive-fee-practices-online-food-grocery-delivery-services","titre":"FTC Seeks Public Comment on Unfair and Deceptive Fee Practices in Online Food and Grocery Delivery Services","source":"Federal Trade Commission - Protecting America's Consumers","id":2826725,"description":"The Federal Trade Commission today announced it is seeking public comment on whether a rule is needed to address unfair or deceptive fee practices in connection with the services provided by online food and grocery delivery platforms nationwide. As detailed in an Advance Notice of Proposed Rulemaking (ANPRM) to be published shortly in the Federal Register, the FTC is seeking written comments, including data, evidence, analyses, and arguments, to help determine how best to prevent unfair or deceptive acts or practices and to ensure that the agency addresses concerns from both consumers and industry. “Online grocery fees that are unclear, inconsistently disclosed, or revealed only at the last moment before consumers make a purchase distort competition and harm consumers,” said Christopher Mufarrige, Director of the FTC’s Bureau of Consumer Protection. “Clear and truthful pricing is essential to competitive markets. The Commission’s enforcement track record suggests that consumers continue to face a suite of fees that prevent them from making informed comparisons. The Trump-Vance FTC is committed to addressing unlawful grocery delivery pricing that obscures the true cost of groceries.” Unfair or deceptive fee practices violate the FTC Act. The Commission recently brought several actions against online food delivery platforms for unfair or deceptive practices that violated the FTC Act. For example, in December 2025, the FTC announced a $60 million settlement with  Instacart over allegations it falsely advertised “free delivery” on consumers’ first three orders on the platform and then charged them service fees that were not disclosed until checkout. And, in December 2024, the FTC obtained a $25 million settlement with  GrubHub over allegations it misled consumers about the cost of delivery on its platform. These cases illustrate that hidden and misleading fees and charges are a recurring problem related to online delivery platforms, despite enforcement actions to protect consumers’ interests. Also, while numerous states have recently adopted laws requiring food and grocery delivery platforms to more clearly disclose fees and include all mandatory fees in advertised prices, they have not adopted uniform rules that apply to all food delivery platforms across the country. The ANPRM asks the public to comment on whether a rule is needed to prevent unfair or deceptive fee practices in connection with online food delivery services including: Total Price. Do food delivery platforms clearly and conspicuously disclose the total price for food or grocery items ordered for local delivery or pickup? Fees and Charges. Do online food delivery platforms clearly and conspicuously disclose the existence, nature, purpose, refundability, or recipient of any fees, charges, or other costs for a delivery or pickup order? Variable or Contingent Fees . Do online food delivery platforms clearly and conspicuously disclose factors used to determine any fees, charges, or other costs that are variable or contingent on consumer selections, such as number or type of items bought or delivery location? Material Restrictions. Do online food delivery platforms clearly and conspicuously disclose whether fees, charges, or other costs are mandatory or optional, or any material restrictions, limitations, or restrictions that may result in additional charges or that may diminish the consumer’s use of the good or service? Price Differentials. Do online food delivery platforms clearly and conspicuously disclose whether the prices of items ordered are the same as, or different from, the prices of the same items offered in the store or restaurant? Personalized Pricing.  Do online food delivery platforms clearly and conspicuously disclose whether the prices of items ordered are the same as, or different from, the prices of the same items offered to other consumers on the platform? Discounts or Promotions. Do online food delivery platforms clearly and conspicuously disclose material"},{"source":"EDPB News","id":2816021,"description":"Brussels, 09 April - The European Data Protection Board (EDPB) has published its  2025 Annual Report . The report provides an overview of the EDPB work carried out in 2025 and reflects on important milestones, such as the adoption of the  Helsinki Statement on Enhanced Clarity, Support, and Engagement . “In 2025, we saw the data protection landscape change significantly. The rapid expansion of the EU’s digital regulatory framework has added complexity to the data protection ecosystem. To help organisations navigate this complexity and support compliance, the EDPB focused on enhancing legal certainty, making compliance more achievable in practice, and strengthening cooperation, both among Data Protection Authorities and with other regulators.  We also prioritised meaningful dialogue with stakeholders to ensure our work reflected real-world needs. Our achievements support economic growth while continuing to protect individuals’ fundamental rights to privacy and data protection.” EDPB Chair, Anu Talus   The Helsinki’s statement initiatives leading the way In 2025, the EDPB worked actively to address the demand for regulatory simplification to support innovation and economic growth, while ensuring the protection of individuals’ personal data.  With this in mind, the Board adopted the  Helsinki Statement on Enhanced Clarity, Support, and Engagement , which outlines new initiatives to  make GDPR compliance easier, strengthen consistency, enhance the dialogue and improve transparency with stakeholders and boost cross-regulatory cooperation .   For example, the Board launched a public consultation to ask organisations which templates would be most useful, organised several stakeholder events to consult organisations on upcoming guidelines and systematically published reports on stakeholder input.    Easing compliance for organisations and providing legal advice In the context of ongoing discussions on regulatory simplification at EU level, the EDPB actively contributed to legislative initiatives aimed at reducing administrative burden and streamlining requirements. The Board adopted a  joint opinion with the European Data Protection Supervisor (EDPS) on the Commission’s Proposal for a Regulation amending certain regulations, including the GDPR.  In addition, the Board held important discussions on this matter during plenary meetings, which subsequently informed the  EPDB/EDPS joint opinions on the Commission’s proposals on the  Digital Omnibus and on the  Digital Omnibus on AI adopted at the beginning of 2026. The Board also delivered five adequacy-related opinions concerning United Kingdom, Brazil and the European Patent Organisation (EPO).  In addition, the Board adopted  Recommendations on the legal basis for requiring the creation of user accounts on e-commerce websites , and  Recommendations on the 2027 WADA World Anti-Doping Code  upon request from the Commission.   Strengthening cross-regulatory cooperation Cross-regulatory cooperation was a key focus for the EDPB last year. The EDPB worked together with the European Commission to clarify how data protection and digital laws interact and to address legal and practical challenges in cross-sectoral cases. In 2025, the EDPB adopted its first set of  joint guidelines with the Commission on the interplay between the Digital Markets Act (DMA) and the GDPR . The Board also worked with the Commission on joint guidelines on the interplay between the AI act and EU data protection laws for adoption in 2026.  In addition, the EDPB adopted  guidelines on the interplay between the Digital Services Act (DSA) and the GDPR .   Placing stakeholders at the heart of the EDPB work In 2025, a public consultation was launched on the  joint guidelines with the Commission on the DMA and the GDPR . The Board has also organised public consultations on the EDPB guidelines on  DSA and GDPR","pubDate":"Thu, 09 Apr 2026 14:14:02 +0200","titre":"EDPB annual report 2025: supporting stakeholders through guidance and dialogue","url":"https://www.edpb.europa.eu/news/news/2026/edpb-annual-report-2025-supporting-stakeholders-through-guidance-and-dialogue_en"},{"titre":"BEREC Provides Early Assessment of the Digital Networks Act, Welcoming Ambition While Highlighting Areas for Improvement","url":"https://www.berec.europa.eu/en/news/press-releases/berec-provides-early-assessment-of-the-digital-networks-act-welcoming-ambition-while-highlighting-areas-for-improvement","pubDate":"Mon, 30 Mar 2026 19:33:01 +0200","description":"BEREC Provides Early Assessment of the Digital Networks Act, Welcoming Ambition While Highlighting Areas for Improvement yannick.stephan Mon, 30/03/2026 - 12:57 Press Releases The Body of European Regulators for Electronic Communications (BEREC) today published its early assessment of the European Commission’s proposal for a Digital Networks Act (DNA). BEREC welcomes the overarching ambition to modernise the regulatory framework for Europe’s connectivity sector and to support resilient, sustainable and high quality digital networks. At the same time, BEREC identifies important areas where further refinement is needed to ensure that the DNA strengthens, rather than complicates, Europe’s internal market for electronic communications. BEREC stands ready to provide its regulatory expertise in order to avoid undue complexity or uncertainty and to ensure that the final framework delivers a competitive, connected and resilient digital Europe. BEREC welcomes the updated objectives introduced by the DNA , including resilience, sustainability, in addition to the existing objectives addressed by the European Electronic Communications Code. While BEREC supports the ambition to strengthen the competitiveness of the EU digital sector, it highlights that this can only be achieved through an effective and robust competition framework. It further notes that the proposal introduces elements of greater centralisation that require further clarification to ensure they contribute effectively to a well functioning internal market. While BEREC recognises the Commission’s intention to streamline the General Authorisation procedures, the proposed Single Passport mechanism raises concerns from several perspectives. In particular, by concentrating significant enforcement responsibilities in the Member State of first notification, the system risks forum shopping, uneven supervisory burdens and slower enforcement. Overall, BEREC considers that the proposal could introduce greater operational complexity, administrative burden and legal uncertainty, without offering clear benefits over the current straightforward authorisation regime. BEREC also notes that the DNA proposes major changes to spectrum management , including treating spectrum as an EU‑level resource and introducing common rules for fees, long‑duration rights and satellite authorisation. While these measures aim at harmonisation, BEREC warns that the proposed single market procedure, which includes a Commission veto, signifies a notable trend towards centralisation and raises certain concerns. BEREC also cautions that some proposals in particular the introduction of unlimited license duration and automatic renewals, risk favouring existing rights holders and reducing market contestability. On the other hand, it welcomes it proposed role in the market shaping aspects of spectrum assignment. On satellite authorisation, BEREC supports EU coordination but stresses the need for alignment with ITU‑R rules. The DNA’s move to treat numbering resources as a common Union asset introduces a more centralised approach, and while BEREC sees potential benefits in greater harmonisation, it notes that key concepts—such as an EU wide numbering plan and pan European numbering ranges—require further clarification. BEREC also considers that additional analysis of demand, use cases and operational impacts would help ensure that any new framework is aligned with the needs of end users, operators and regulators. BEREC welcomes the preservation of the Significant Market Power regime, a cornerstone of the EU regulatory model, alongside the continued availability of symmetric access tools . Nonetheless, several DNA proposals, including new sequencing rules for remedies, the potential removal of the Recommendation on Relevant Markets, and expanded Commission veto powers could reduce the ability of NRAs to address national market needs. BEREC supports the goal of enabling a smooth transition from copper to fibre networks and recognises improvements made to","id":2793006,"source":"BEREC Office"},{"pubDate":"Thu, 09 Oct 2025 15:53:21 +0200","titre":"DMA and GDPR: EDPB and European Commission endorse joint guidelines to clarify common touchpoints","url":"https://www.edpb.europa.eu/news/news/2025/dma-and-gdpr-edpb-and-european-commission-endorse-joint-guidelines-clarify-common_en","source":"EDPB News","id":2425502,"description":"Brussels, 09 October - The European Data Protection Board (EDPB) and the European Commission endorsed joint guidelines on the interplay between the Digital Markets Act (DMA) and the General Data Protection Regulation (GDPR) . These are the first joint guidelines by the Board and the European Commission. In line with its 2024-2027 Strategy and the recent Helsinki Statement’s objectives to make GDPR compliance easier and strengthen consistency, the EDPB has cooperated with the European Commission, each within their respective mandates, to facilitate the coherent application of the DMA*and GDPR and to increase legal certainty for gatekeepers, business users, beneficiaries and individuals. EDPB Chair Anu Talus said:   “These joint guidelines are the result of a fruitful cooperation between the EDPB and the European Commission. This is the first time that the EDPB and the European Commission prepare guidelines jointly. This approach maximises usefulness of the guidance by simplifying compliance for businesses and bringing enhanced legal certainty to them.  The guidelines will help gatekeepers, business users and individuals to better understand their obligations and rights under the DMA, and ensure a consistent, effective and complementary application of the DMA and EU data protection law.” How the DMA and the GDPR interact The DMA and the GDPR both protect individuals in the digital landscape , but their goals are complementary as they address interconnected challenges: individual rights and privacy in case of the GDPR and fairness and contestability of digital markets under the DMA.    Several activities regulated by the DMA entail the processing of personal data by gatekeepers and, in several provisions, the DMA explicitly refers to definitions and concepts included in the GDPR. The joint guidelines clarify how gatekeepers can implement these DMA provisions in accordance with EU data protection law . For example, the EDPB and the Commission specify which elements gatekeepers should consider in order to comply with the requirements of specific choice and valid consent under Art. 5(2) DMA and the GDPR, and thus to lawfully combine or cross-use personal data in core platform services. The EDPB and the Commission also address other provisions including those related to the distribution of third party apps and stores, data portability, data access requests and interoperability of messaging services.   Next steps The Board and the Commission have just launched a joint public consultation on the first version of the guidelines which will be open until 4 December 2025 .  This will be an opportunity for stakeholders to comment and provide feedback. All submissions will be published on the DMA website to which a link will be included on the EDPB website, after the consultation period has closed. The final text, incorporating input received during the consultation, will be prepared jointly by the Board and the Commission, and will be adopted by the EDPB and European Commission.   More guidelines on the way Following these first joint guidelines with the Commission, further work is underway to clarify the new cross-regulatory landscape and maintain coherent and consistent safeguards for the protection of personal data. In this regard, the EDPB is working with the Commission, specifically with the AI Office, on joint guidelines on the interplay between the AI Act and EU data protection laws. Note to editors: The Digital Markets Act is one of the first regulatory tools that aims to tackle unfair practices of gatekeepers in digital markets. Gatekeepers are large digital platforms providing core platform services, such as online search engines, app stores, and messenger services. The main objective of the DMA is to make the markets in the digital sector fairer and more contestable. "}]