[{"id":3260964,"description":"BEREC Study trip to Japan yannick.stephan Tue, 03/11/2026 - 10:27 Latest News From 26 to 30 October, BEREC’s leadership visited Japan on a study trip aimed at strengthening international relations and exchanging experience with key partners from government, industry, research and academia. The delegation was led by BEREC Chair Marko Mismas (AKOS, Slovenia) and was made up of Vice-Chairs Alejandra de Ituarriaga (CNMC, Spain), Michel Van Bellinghen (BIPT, Belgium), Sarah Jacquier-Pelissier (Arcep, France), Giacomo Lasorella (AGCOM, Italy), Klaus Steinmaurer (RTR, Austria) and Robert Mourik (ComReg, Ireland). The representative of participants without voting rights, Milan Radulovic (EKIP, Montenegro), and the Director of the BEREC Office, Verena Weber, also joined the delegation. The visit was part of BEREC’s broader efforts to deepen dialogue with international stakeholders and to gather first-hand insight into developments in advanced digital and telecommunications markets. Japan, as a global leader in connectivity, technology and research, offered an ideal setting for discussions on the future of electronic communications and digital policy. Exchanges with public institutions During the visit, BEREC’s delegation met with representatives of the European Union Delegation to Japan and the Ministry of Internal Affairs and Communications. Conversations focused on the broader policy and regulatory landscape, shared priorities in connectivity, digital transformation and emerging technologies, and EU–Japan trade links, with a particular emphasis on digital matters. Discussions with the Ministry of Internal Affairs and Communications covered developments in fixed broadband, including fibre deployment, digital infrastructure development and international submarine cables, as well as trends in Japan’s mobile communications policy, notably in relation to 5G and 6G. Developments in non-terrestrial networks, Japan’s policy approach to network resilience and AI governance, including the Hiroshima AI Process and the activities of the Friends Group, were also addressed. Dialogue with industry BEREC’s leadership also met with Sony, SoftBank, NTT, Rakuten and Ericsson. Discussions with industry provided an opportunity to exchange views on market developments, innovation in telecommunications and digital services, investment in network infrastructure, future network technologies, cloud-native solutions, Open RAN, and security and sustainability. At NTT, the company’s vision for the Innovative Optical and Wireless Network (IOWN) was also touched on, with developments in next-generation communications infrastructure and future network architecture highlighted. In addition to the meetings organised, the delegation visited a dedicated briefing facility at SoftBank’s headquarters, where guests were presented with advanced technologies and solutions developed by SoftBank and its partners. The visit included live demonstrations and interactive presentations, covering areas such as high-altitude platform stations (HAPS), non-terrestrial networks, artificial intelligence, 5G and digital transformation. Perspectives from academia and research The BEREC leadership also met with representatives from the University of Tokyo and the RIKEN Centre for Computational Science. These visits offered academic and research perspectives on emerging technologies, artificial intelligence, high-performance computing, data-driven innovation and the future development of digital ecosystems. The study trip underlined the importance of continued international engagement for BEREC, particularly amid rapid technological change and growing global interdependence in the electronic communications sector. The visit also reaffirmed BEREC’s commitment to exchanging knowledge and best practices with public authorities, market players and research institutions worldwide. <div","source":"BEREC Office","pubDate":"Tue, 03 Nov 2026 14:32:41 +0100","titre":"BEREC Study trip to Japan","url":"https://www.berec.europa.eu/en/news/latest-news/berec-study-trip-to-japan"},{"description":"By: Susannah Tredwell , Manager of Library Services at DLA Piper (Canada) LLP and James Bachmann , Instructional Librarian, Law Library, University of British Columbia Since 1988, when CALL/ACBD’s Copyright Committee was first set up, CALL/ACBD has advocated for its members' interests in the area of copyright. While the primary focus of CALL/ACBD’s copyright advocacy over the last few years has been on Crown copyright and primary law, CALL/ACBD has also made submissions about such areas as fair dealing and licencing. CALL/ACBD sees this work as not only supporting the needs of its members but also as serving the interests of access to justice as a whole. Continuing this work, on January 18, 2022 CALL/ACBD, along with Library Futures Institute, will act as an intervener in the Supreme Court of Canada case Society of Composers, Authors and Music Publishers of Canada, et al. v. Entertainment Software Association, et al.   Kim Nayyer, CALL/ACBD’s President, and Robert Janes of JFK Law   will be representing CALL/ACBD and Library Futures. This case addresses the question of how the concepts of “communication to the public by telecommunication” and “making available on demand” as used in the Copyright Act should be understood. The outcome of this case has the potential to significantly impact various library activities, including controlled digital lending and possibly even the simple use of hyperlinks, particularly in light of the limited scope of current library and education exceptions in the Copyright Act . CALL/ACBD's submitted that the court refrain from broadly construing the terms “making available” and “Communication to the Public by Telecommunication” and that s. 2.4(1.1) of the act (\"Communication to the public by telecommunication\")   does not need to be understood as creating a new right.   You can find CALL/ACBD’s intervener's factum at https://www.scc-csc.ca/WebDocuments-DocumentsWeb/39418/FM050_Intervener_Canadian-Association-Law-Libraries-et-al.pdf . The other factums in this case are available at https://www.scc-csc.ca/case-dossier/info/af-ma-eng.aspx?cas=39418 .  CALL/ACBD has acted as an intervener at the Supreme Court of Canada on two other occasions. In Keatley Surveying Ltd. v. Teranet Inc. , which looked at Crown copyright, CALL/ACBD submitted   that “s. 12 Crown copyright does not extend to primary sources of law”. In York University v. Canadian Copyright Licensing Agency  (\"Access Copyright\"), CALL/ACBD submitted   that the SCC “should resist the temptation to modify or clarify the existing fair dealing test” stating that the existing test “is a flexible multifactorial test that allows libraries (and other institutions) to tailor access and appropriate copying policies that consider all relevant circumstances.” CALL/ACBD also made submissions to the 2018 review of the Copyright Act , R.S.C. 1985, c. C-42: one general submission   and <a","id":3241460,"source":"Canadian Association of Law Libraries / L'Association canadienne des bibliothèques de droit CALL/ACBD Blog","url":"https://www.callacbd.ca/CALL-Blog/12242053","titre":"Canadian Association of Law Libraries Intervention in Upcoming Supreme Court of Canada Copyright Case","pubDate":"Mon, 26 Oct 2026 07:55:47 +0100"},{"pubDate":"Tue, 06 Oct 2026 08:06:23 +0200","titre":"Nixing the Fix: Warranties, Mag-Moss, and restrictions on repairs","url":"https://www.ftc.gov/business-guidance/blog/2019/03/nixing-fix-warranties-mag-moss-restrictions-repairs","id":3199073,"description":"Nixing the Fix: Warranties, Mag-Moss, and restrictions on repairs lfair March 18, 2019 | 10:24AM Nixing the Fix: Warranties, Mag-Moss, and restrictions on repairs By Lesley Fair First, the bad news: That nifty purchase needs a repair. Now the good news for consumers: It’s still under warranty. But where can they go to get it fixed? Can the manufacturer restrict a consumer’s ability to go to the independent repair shop of their choice? Can the manufacturer use glue, non-standard screws, and proprietary diagnostic software that make it difficult for independent repair shops to fix things? Do limitations like these affect consumers’ rights under the Magnuson-Moss Warranty Act ? That’s the topic of Nixing the Fix: A Workshop on Repair Restrictions , an FTC event scheduled for July 16, 2019 . Enforced by the FTC, the Magnuson-Moss Warranty Act helps consumers make informed buying decisions and gives them access to remedies if the widget starts to fidget during the warranty period. One key consumer protection under Mag-Moss is that the law prohibits manufacturers from conditioning warranty coverage on the use of particular products or services. Here are some of the questions FTC staff intends to ask at Nixing the Fix : What’s the interplay between repair restrictions and the Magnuson-Moss Warranty Act’s anti-tying provision, which establishes that manufacturers can’t condition coverage on the use of parts or services identified by brand, trade, or corporate name? Do repair restrictions affect the market for extended warranties and service agreements? What types of restrictions are consumers running into when they try to get their stuff repaired? Are manufacturers’ restrictions having an impact on small fix-it businesses? Are manufacturers using software that may render products obsolete or unfixable if consumers engage in DIY or go to a local repair shop? Are repair restrictions necessary to reduce the risk of physical injury or to protect manufacturers from liability for products improperly repaired by others? Do consumers understand the effects of repair restrictions? We’re also looking for empirical research and data about the prevalence and impact of manufacturers’ repair restrictions. For example, what can you tell us about code that disables products that have been repaired by someone other than the manufacturer, product designs that make third-party repairs difficult (like attaching batteries with glue only the manufacturer can remove), contractual post-sale or licensing restrictions, or proprietary diagnostic software and replacement parts? Please send us your research and data by April 30, 2019. Do you have suggestions about possible panelists? Email us at nixingthefix@ftc.gov . Nixing the Fix will take place on July 16th at the FTC’s Constitution Center conference facility, 400 7th Street, S.W., in Washington, DC. It’s free and open to the public. You can file public comments online and we’ll keep the record open until September 16, 2019. Follow the Business Blog for more information about the agenda and for watch-the-webcast instructions.","source":"FTC USA Business Blog Posts"},{"url":"https://www.ftc.gov/business-guidance/blog/2014/04/keep-fcra-foreground-when-subject-background-screening","titre":"Keep FCRA in the foreground when the subject is background screening","pubDate":"Mon, 05 Oct 2026 14:07:46 +0200","description":"Keep FCRA in the foreground when the subject is background screening chundycz April 9, 2014 | 12:13AM Keep FCRA in the foreground when the subject is background screening By Lesley Fair When the talk turns to Big Data, part of the conversation is about all the public information available about people's lives – and how companies market it to prospective employers, landlords, etc.  Two cases just announced by the FTC  serve as a cautionary reminder to members of the industry that what they do may be subject to the long-standing consumer protections of the  Fair Credit Reporting Act (FCRA) .  InfoTrack, an Illinois company, and San Diego-based Instant Checkmate will be paying civil penalties to settle FTC lawsuits that they violated the FCRA.  Is it time for an FCRA refresher at your business? Instant Checkmate marketed its reports as a way for prospective employers and landlords to investigate applicants.  For example, the company advertised that one of the “GOOD REASONS to get instant criminal checks on anyone right now” was to “check out tenants before they rent.”  It also used a Google Ad Words campaign to make sure its site appeared when people searched for background checks on nannies, babysitters, maids, and housekeepers.  What kind of information would buyers get?  Current and previous addresses, birth certificates, arrest histories, and marriage and divorce records, to name just a few examples. InfoTrack offered similar services to employers nationwide, including background screening reports with people’s driving records, education and employment information, criminal histories, and even records from sex offender registries. How does the FCRA come in?  The law defines a “consumer report” as a “communication of any information” by a consumer reporting agency (CRA) that bears on a person’s “credit worthiness, credit standing, credit capacity, character, general reputation, personal characteristics, or mode of living” which is used (or expected to be used) as a factor in establishing their eligibility for credit, insurance, employment, or other reasons outlined in the law. According to the FTC, what Instant Checkmate and InfoTrack were doing triggered the FCRA.  For example, companies covered by the law must follow procedures to assure their reports are as accurate as possible, must take steps to see that those using their reports have permissible purposes for accessing them, and must provide required User Notices explaining key protections for consumers.  The law imposes special requirements when CRAs provide reports containing public record information that could have an adverse effect on a person’s ability to get a job.  In that case, the CRA must either: 1) notify the consumer that it’s reporting the information in the public record; or 2) maintain “strict procedures” – that’s the language in the law – designed to ensure the reported public information is complete and up to date. You’ll want to read the complaints for specifics of where the FTC says the companies fell short, but one example cited in the lawsuit against InfoTrack offers an object lesson on why FCRA protections are so important to consumers – and how the consequences can be devastating when companies don’t live up to the law.  According to the FTC, the reports InfoTrack provided to prospective employers included information about whether a job applicant was on the National Sex Offender Registry.  The employer would provide the first and last name and the date of birth to help InfoTrack with its search.  The problem was that before the fall of 2011, no date of birth was available for many names on the Registry.  If InfoTrack’s search found more than one person with the same first and last name, it reported a “possible match” to employers and gave them reports that included several different people with the","id":3198181,"source":"FTC USA Business Blog Posts"},{"pubDate":"Fri, 07 Aug 2026 14:03:33 +0200","titre":"RDS and Bayswater Support Group -v- Secretary of State for Health and Social Care (anonymity order)","url":"https://www.judiciary.uk/judgments/rds-and-bayswater-support-group-v-secretary-of-state-for-health-and-social-care-anonymity-order/","id":3081876,"description":"Case number: AC-2026-LON-002515 In the High Court of Justice King’s Bench Division Administrative Court In the matter of an application for judicial review 17 July 2026 Before: The Hon. Mr Justice Sheldon Between: The King on the application of (1) RDS (2) Bayswater Support Group (Claimants) -v- Secretary of State for Health and Social Care (Defendant) and NHS England (Interested Party) Order Notification of the Judge’s Decision (CPR 54.11, 54.12) Following consideration of the documents lodged by the Claimant, the Defendant’s Summary Grounds of Defence and the Claimant’s Reply ORDER BY THE HON. Mr Justice Sheldon (1) Anonymity a. Pursuant to CPR 39.2(4) and s. 6 of the Human Rights Act 1998: i. the names of the First Claimant, his children and his former spouse are to be withheld from the public and must not be disclosed in any proceedings in public; ii. the name of the chair of the Second Claimant, her children and any partner are to be withheld from the public and must not be disclosed in any proceedings in public. iii. the First Claimant and chair of the Second Claimant are to be referred to orally and in writing as ‘RDS’ and ‘RDA’ respectively. iv. The First Claimant and Chair of the Second Claimant are permitted to use ‘care of’ (c/o) addresses of the Claimants’ solicitors in the claim form and on any witness statements filed. b. Pursuant to s. 11 of the Contempt of Court Act 1981, there must be no publication of the identity of the First Claimant or Chair of the Second Claimant, or of any matter likely to lead to the identification of any of them, in any report of, or otherwise in connection with, these proceedings. c. Pursuant to CPR 5.4C(4): i. the parties must within 7 days file a redacted copy of any statement of case filed, omitting the name, address and any other information likely to lead to the identification of the said Claimants or any of the other individuals referred to in (a)(i) or (ii); ii. if any statement of case subsequently filed includes information likely to lead to the identification of the Claimants or to the identification of any of the other individuals referred to in (a)(i) or (ii), a redacted copy omitting that information must be filed at the same time; iii. unless the Court grants permission under CPR 5.4C(6), no non-party many obtain a copy of any unredacted statement of case. iv. Any person wishing to vary or discharge this Order must make an application, served on each party. (2) Interested Party : NHS England, named in these proceedings as an Interested Party, shall be removed forthwith as a party to these proceedings. (3) Permission : Permission to apply for judicial review is refused. (4) Costs : The Claimants must pay the Defendant’s costs of preparing the Acknowledgement of Service and Summary Grounds of Defence, summarily assessed in the sum of £7,026.60. (5) Further provision as to costs : (a) Where the Claimants do not make a valid request for reconsideration of the decision to refuse permission to apply for judicial review (see notes below): (i) Within 14 days of the date of this Order, the Claimants may file and serve a notice of objection (maximum 3 pages) showing why the order in paragraph 4 should not be made. The notice should include any objections to the principle that costs should be paid and/or as to the amount assessed. (ii) If the Claimants do not file and serve a notice of objection within that period, paragraph 2 is a final order and the Claimants must pay the sum specified within 14 days of the date of this Order (in accordance with CPR 44.7(1)(a)). (iii) If the Claimants file and serve a notice of objection in accordance with (i) above: the other party may, within 14 days after the date on which the notice is served, file and serve submissions in response (maximum 3 pages); if the other party files and serves on the Claimants submissions in response, the Claimants may, within 7 days after the date on which the other party’s submissions in response are served, file and serve","source":"Judgement Courts Tribunals England Wales"},{"description":"The French regulatory authority for audiovisual and digital communication, Having regard to the French intellectual property code , in particular article L. 331-12 ; Having regard to the French Sports Code , in particular article L.333-10 ; After due deliberation, Adopts the following notice: The year 2025 marked a turning point in the fight against sports broadcasting piracy, with increased involvement of various types of intermediaries, under the impetus of sports rights holders, as part of the dynamic injunctions issued under article L. 333-10 of the French Sports Code . In addition to the legal actions involving Internet Service Providers (ISPs), which have been fully integrated into the scheme since 2022, and in order to strengthen the effectiveness of the blocking measures implemented, rights holders have extended their legal actions, from 2023, to search engine operators, who play a key role as central players in the diffusion of information on the internet and in directing users to sports-related contdnt. Search engine operators are now almost systematically involved in actions taken by rights holders to protect sports competitions. Between 2024 and 2025, the number of delisting measures ordered by the courts and the number of measures notified by Arcom in application of the orders issued has dubbed. In response to the misuse by some Internet users of domain name resolution services or virtual private networks (VPNs), rights holders then extended the scope of players taken to court to prevent access to services dedicated to the unlawful broadcasting of sports competitions. More than 5,000 blocking demands were notified to alternative DNS in 2025. As for virtual private network service providers, they were the subject of the first court verdicts, handed down on the basis of article L. 333-10 of the French Sports Code , in May 2025, and as such are receiving a growing number of blocking demands to update the measures ordered by the judge. Against this backdrop, strengthening cooperation between rights holders of sports-related content and the various intermediaries mentioned in the court orders would therefore appear to be desirable in order to give an even greater impact to the fight agains sports piracy. The parties are also invited to continue their exchanges with Arcom with a view to optimizing the provision of identification data and ensuring the simultaneous application of delisting and blocking measures by all technical intermediaries involved in preventing access to unlawful services. Article L. 331-12 of the French intellectual property code makes provision for the adoption of notices by the Authority for the protection and promotion of creation, with the aim of encouraging the signing of voluntary agreements likely to help remedy infringements of copyright and neighbor rights, or of the audiovisual exploitation rights mentioned in article L. 333-10 of the French Sports Code, on electronic communications networks used for the provision of online public communication services. In addition, under the terms of IV of article L. 333-10 of the French Sports Code, Arcom is responsible for adopting model agreements which the rights holders mentioned in I of the same article are invited to sign. The agreement concluded between the parties specifies, in particular, the measures that the parties undertake to take to put an end to any infringement of the exclusive audiovisual exploitation rights of the sports event or competition. The Autorité recommends that the rights holders mentioned in I of article L. 333-10 of the French Sports Code, on the one hand, and any intermediaries implementing measures ordered on the basis of II of article L. 333-10 of the same code, on the other (notably search engine operators, domain name resolution services and virtual private network providers), enter into discussions with a view to concluding agreements that would reflect their joint commitment to fight agains the unlawful diffusion of sports-related events and competitions as effectively as possible. To this end, Arcom is","id":2900811,"source":"Arcom Textes juridiques","titre":"Arcom's notice of May 6, 2026 accompanying the publication of model agreements provided for in article L333-10 of the French Sports Code.","url":"https://www.arcom.fr/en/find-out-more/legal-area/legal-resources/arcoms-notice-may-6-2026-accompanying-publication-model-agreements-provided-article-l333-10-french-sports-code","pubDate":"Fri, 22 May 2026 14:08:22 +0200"},{"pubDate":"Thu, 09 Apr 2026 14:14:02 +0200","titre":"EDPB annual report 2025: supporting stakeholders through guidance and dialogue","url":"https://www.edpb.europa.eu/news/news/2026/edpb-annual-report-2025-supporting-stakeholders-through-guidance-and-dialogue_en","source":"EDPB News","id":2816021,"description":"Brussels, 09 April - The European Data Protection Board (EDPB) has published its  2025 Annual Report . The report provides an overview of the EDPB work carried out in 2025 and reflects on important milestones, such as the adoption of the  Helsinki Statement on Enhanced Clarity, Support, and Engagement . “In 2025, we saw the data protection landscape change significantly. The rapid expansion of the EU’s digital regulatory framework has added complexity to the data protection ecosystem. To help organisations navigate this complexity and support compliance, the EDPB focused on enhancing legal certainty, making compliance more achievable in practice, and strengthening cooperation, both among Data Protection Authorities and with other regulators.  We also prioritised meaningful dialogue with stakeholders to ensure our work reflected real-world needs. Our achievements support economic growth while continuing to protect individuals’ fundamental rights to privacy and data protection.” EDPB Chair, Anu Talus   The Helsinki’s statement initiatives leading the way In 2025, the EDPB worked actively to address the demand for regulatory simplification to support innovation and economic growth, while ensuring the protection of individuals’ personal data.  With this in mind, the Board adopted the  Helsinki Statement on Enhanced Clarity, Support, and Engagement , which outlines new initiatives to  make GDPR compliance easier, strengthen consistency, enhance the dialogue and improve transparency with stakeholders and boost cross-regulatory cooperation .   For example, the Board launched a public consultation to ask organisations which templates would be most useful, organised several stakeholder events to consult organisations on upcoming guidelines and systematically published reports on stakeholder input.    Easing compliance for organisations and providing legal advice In the context of ongoing discussions on regulatory simplification at EU level, the EDPB actively contributed to legislative initiatives aimed at reducing administrative burden and streamlining requirements. The Board adopted a  joint opinion with the European Data Protection Supervisor (EDPS) on the Commission’s Proposal for a Regulation amending certain regulations, including the GDPR.  In addition, the Board held important discussions on this matter during plenary meetings, which subsequently informed the  EPDB/EDPS joint opinions on the Commission’s proposals on the  Digital Omnibus and on the  Digital Omnibus on AI adopted at the beginning of 2026. The Board also delivered five adequacy-related opinions concerning United Kingdom, Brazil and the European Patent Organisation (EPO).  In addition, the Board adopted  Recommendations on the legal basis for requiring the creation of user accounts on e-commerce websites , and  Recommendations on the 2027 WADA World Anti-Doping Code  upon request from the Commission.   Strengthening cross-regulatory cooperation Cross-regulatory cooperation was a key focus for the EDPB last year. The EDPB worked together with the European Commission to clarify how data protection and digital laws interact and to address legal and practical challenges in cross-sectoral cases. In 2025, the EDPB adopted its first set of  joint guidelines with the Commission on the interplay between the Digital Markets Act (DMA) and the GDPR . The Board also worked with the Commission on joint guidelines on the interplay between the AI act and EU data protection laws for adoption in 2026.  In addition, the EDPB adopted  guidelines on the interplay between the Digital Services Act (DSA) and the GDPR .   Placing stakeholders at the heart of the EDPB work In 2025, a public consultation was launched on the  joint guidelines with the Commission on the DMA and the GDPR . The Board has also organised public consultations on the EDPB guidelines on  DSA and GDPR"},{"url":"https://www.edpb.europa.eu/news/news/2026/cef-2026-edpb-launches-coordinated-enforcement-action-transparency-and-information_en","titre":"CEF 2026: EDPB launches coordinated enforcement action on transparency and information obligations under the GDPR","pubDate":"Thu, 19 Mar 2026 14:12:59 +0100","description":"Brussels, 19 March - The EDPB has launched its Coordinated Enforcement Framework (CEF) action for 2026*. Following a year-long coordinated action on the right to erasure in 2025 , the CEF's focus this year will shift to compliance with the obligations of transparency and information under the GDPR . The GDPR ensures that individuals are informed when their data is being processed (under Art. 12, 13 and 14). This right to be informed is a core element of transparency and ensures that individuals have more control over their data. Next steps During 2026, 25 Data Protection Authorities (DPAs) across Europe will take part in this initiative. They will look closely to assess the compliance of controllers with their transparency obligations under the GDPR. Participating DPAs will soon contact controllers from different sectors across Europe, either through enforcement actions or fact-finding exercises. In the latter case, they might also decide to undertake additional follow-up actions if needed. During the second half of the year, participating DPAs will share and discuss their findings together, with a view to aggregate the results of their national actions and generate deeper insight into the topic. A consolidated report will then be drafted and submitted for adoption by the EDPB, allowing for targeted follow-ups on both national and EU levels. Background The CEF is a key action of the EDPB under its 2024-2027 Strategy , aimed at streamlining enforcement and cooperation among DPAs. In 2023, the EDPB published the report on its first coordinated action on the use of cloud-based services by the public sector . In 2024, the EDPB also published the report on the outcome of the second coordinated action on the designation and position of Data Protection Officers . In 2025, the EDPB issued the report on its third coordination action on the implementation of the right of access . In 2026, the EDPB has adopted a report on its Coordinated Enforcement Framework (CEF) action on the right to be forgotten (Art.17 GDPR) .   Note to editors: *The Board selected this topic during its October 2025 plenary","id":2769535,"source":"EDPB News"},{"url":"https://www.edpb.europa.eu/news/news/2026/edpb-identifies-challenges-hindering-full-implementation-right-erasure_en","titre":"EDPB identifies challenges hindering the full implementation of the right to erasure","pubDate":"Wed, 18 Feb 2026 15:27:14 +0100","description":"Brussels, 18 February - The European Data Protection Board (EDPB) has adopted a  report on its Coordinated Enforcement Framework (CEF) action on the right to be forgotten (Art.17 GDPR) .  The  Board selected this topic  as it is one of the most frequently exercised GDPR rights and one about which DPAs frequently receive complaints from individuals. The main objectives of this coordinated action are to ensure that the right to erasure is effectively exercised by individuals in Europe and understand how controllers comply with this right in practice. In addition, the EDPB identified good practices and the most important related challenges, with the aim of providing further guidance on this topic.  Throughout 2025, 32 DPAs across Europe took part in this initiative. More specifically, 9 DPAs have initiated new formal investigations or have continued ongoing ones, and 23 DPAs carried out a fact-finding exercise. A total of 764 controllers across Europe responded to the action, ranging from small and medium-sized enterprises (SMEs) to big companies active in many different industries and fields, as well as various types of public entities. The results of these national actions have been aggregated and analysed together allowing for targeted follow-up on both national and EU level.   Areas of improvement and main challenges The report lists the issues that were identified, along with a series of recommendations addressed to controllers, to help them implement the right to erasure. Seven recurring main challenges were identified by DPAs. The results confirmed some of the findings of the 2024 coordinated action on the right of access , for example when it comes to the lack of appropriate internal procedures to handle requests, or the lack of sufficient information provided to individuals. In addition, participating DPAs reported specific findings related to the reliance by some controllers on inefficient anonymisation techniques to handle erasure requests as an alternative to deletion. DPAs also noted inconsistent practices, and the difficulties faced by controllers regarding the determination of retention periods and the deletion of personal data in the context of back-ups. In addition, as the right to erasure is not an absolute right, some controllers face difficulties in assessing and applying the conditions for the exercise of this right, including in carrying out the different balancing tests between the right to erasure and other rights and freedoms.   Follow-up to help organisations comply  Extensive guidance, documents and templates exist at national level to help controllers comply with the right of erasure and help individuals exercise this right. In line with the Helsinki Statement’s objectives of making GDPR compliance easier and ensuring consistent interpretation and enforcement across Europe, the extensive guidance and templates already available at national level will be leveraged at EDPB level where appropriate.   Background and next steps The CEF is a key action of the EDPB under its 2024-2027 Strategy , aimed at streamlining enforcement and cooperation among DPAs.  In 2023, the EDPB published the report on its first coordinated action on the  use of cloud-based services by the public sector . In 2024, the EDPB also published the report on the outcome of the second coordinated action on the  designation and position of Data Protection Officers . In 2025, the EDPB issued the report on its third coordination action on the  implementation of the right of access . The CEF 2026 action will be on the  obligations of transparency and information under the GDPR .   For further information: DA DPA:   EDPB vedtager rapport om dataansvarliges overholdelse af retten til sletning EL DPA: Ολοκλήρωση της συντονισμένης δράσης του","id":2703238,"source":"EDPB News"},{"description":"Brussels, 09 October - The European Data Protection Board (EDPB) and the European Commission endorsed joint guidelines on the interplay between the Digital Markets Act (DMA) and the General Data Protection Regulation (GDPR) . These are the first joint guidelines by the Board and the European Commission. In line with its 2024-2027 Strategy and the recent Helsinki Statement’s objectives to make GDPR compliance easier and strengthen consistency, the EDPB has cooperated with the European Commission, each within their respective mandates, to facilitate the coherent application of the DMA*and GDPR and to increase legal certainty for gatekeepers, business users, beneficiaries and individuals. EDPB Chair Anu Talus said:   “These joint guidelines are the result of a fruitful cooperation between the EDPB and the European Commission. This is the first time that the EDPB and the European Commission prepare guidelines jointly. This approach maximises usefulness of the guidance by simplifying compliance for businesses and bringing enhanced legal certainty to them.  The guidelines will help gatekeepers, business users and individuals to better understand their obligations and rights under the DMA, and ensure a consistent, effective and complementary application of the DMA and EU data protection law.” How the DMA and the GDPR interact The DMA and the GDPR both protect individuals in the digital landscape , but their goals are complementary as they address interconnected challenges: individual rights and privacy in case of the GDPR and fairness and contestability of digital markets under the DMA.    Several activities regulated by the DMA entail the processing of personal data by gatekeepers and, in several provisions, the DMA explicitly refers to definitions and concepts included in the GDPR. The joint guidelines clarify how gatekeepers can implement these DMA provisions in accordance with EU data protection law . For example, the EDPB and the Commission specify which elements gatekeepers should consider in order to comply with the requirements of specific choice and valid consent under Art. 5(2) DMA and the GDPR, and thus to lawfully combine or cross-use personal data in core platform services. The EDPB and the Commission also address other provisions including those related to the distribution of third party apps and stores, data portability, data access requests and interoperability of messaging services.   Next steps The Board and the Commission have just launched a joint public consultation on the first version of the guidelines which will be open until 4 December 2025 .  This will be an opportunity for stakeholders to comment and provide feedback. All submissions will be published on the DMA website to which a link will be included on the EDPB website, after the consultation period has closed. The final text, incorporating input received during the consultation, will be prepared jointly by the Board and the Commission, and will be adopted by the EDPB and European Commission.   More guidelines on the way Following these first joint guidelines with the Commission, further work is underway to clarify the new cross-regulatory landscape and maintain coherent and consistent safeguards for the protection of personal data. In this regard, the EDPB is working with the Commission, specifically with the AI Office, on joint guidelines on the interplay between the AI Act and EU data protection laws. Note to editors: The Digital Markets Act is one of the first regulatory tools that aims to tackle unfair practices of gatekeepers in digital markets. Gatekeepers are large digital platforms providing core platform services, such as online search engines, app stores, and messenger services. The main objective of the DMA is to make the markets in the digital sector fairer and more contestable. ","id":2425502,"source":"EDPB News","titre":"DMA and GDPR: EDPB and European Commission endorse joint guidelines to clarify common touchpoints","url":"https://www.edpb.europa.eu/news/news/2025/dma-and-gdpr-edpb-and-european-commission-endorse-joint-guidelines-clarify-common_en","pubDate":"Thu, 09 Oct 2025 15:53:21 +0200"},{"description":"Brussels, 12 September - During its September plenary meeting, the European Data Protection Board (EDPB) has adopted guidelines on the interplay between the Digital Services Act (DSA) and the General Data Protection Regulation (GDPR) . These are the first set of EDPB guidelines on the interplay between the GDPR and the EU’s recently adopted digital laws. The DSA aims to complement the rules of the GDPR to ensure the highest level of protection of fundamental rights in the digital space. Its main goal is to create a safer online environment in which the fundamental rights of all users, including the right to freedom of expression, are protected. It applies to online intermediary services , such as search engines and platforms. Several provisions included in the DSA entail the processing of personal data by intermediary service providers. The EDPB guidelines contribute to the consistent application of the DSA and of the GDPR, insofar as some provisions of the DSA concern the processing of personal data by intermediary service providers and include references to GDPR concepts and definitions. While it is up to the competent authorities under the DSA - with the support of the European Board for Digital Services and EU courts - to interpret the DSA, there are a number of provisions which relate to the GDPR. These include: notice-and-action systems that help individuals or entities report illegal content recommender systems used by online platforms to automatically present specific content to the users of the platform with a certain relative order or prominence the provisions to ensure a high level of privacy, safety, and security of minors and prohibiting that profile-based advertising using their data is presented to them transparency of advertising by online platforms prohibition of profiling-based advertising using special categories of data  The EDPB guidelines help to understand how the GDPR should be applied in the context of DSA obligations. The EDPB also provides practical guidance relating to the cross-regulatory cooperation between authorities to coordinate enforcement which will provide more legal certainty for intermediary service providers and ultimately to protect the rights and freedoms of individuals. The guidelines will be subject to public consultation, providing stakeholders with the opportunity to comment and provide feedback. EDPB Chair Anu Talus said: “By clarifying the interplay between the DSA and the GDPR, these guidelines mark a significant step towards ensuring a coherent and effective EU digital rulebook, and they will help uphold the fundamental rights and freedoms of individuals. I hope that stakeholders, including the competent authorities under the DSA, will make the most of the opportunity to contribute to the public consultation\". More work in the pipeline Following these first guidelines on the interplay between the GDPR and the DSA, further work is underway with other regulators to clarify the new cross-regulatory landscape and maintain coherent and consistent safeguards for the protection of personal data. In this regard, the EDPB is working on joint guidelines with the European Commission on the interplay between the Digital Markets Act (DMA) and the GDPR, as well as on joint guidelines on the interplay between the AI Act and EU data protection laws.","id":2368407,"source":"EDPB News","url":"https://www.edpb.europa.eu/news/news/2025/interplay-between-dsa-and-gdpr-edpb-adopts-guidelines_en","titre":"Interplay between the DSA and the GDPR: EDPB adopts guidelines","pubDate":"Fri, 12 Sep 2025 15:51:31 +0200"},{"description":"Brussels, 20 January - The European Data Protection Board (EDPB) has adopted a report on the implementation of the right of access by controllers . The report summarises the outcome of a series of coordinated national actions carried out in 2024 under the Coordinated Enforcement Framework (CEF). It lists the issues that were observed for some controllers, along with a series of recommendations to help them implement the right of access. A central element is controllers’ awareness of the EDPB Guidelines 01/2022 on data subjects rights – Right of access and whether these guidelines were followed in practice. EDPB Deputy Chair Zdravko Vukíc said: “The CEF is a valuable initiative that helps strengthen the cooperation among Data Protection Authorities (DPAs): by tackling selected topics in a coordinated fashion, they achieve greater efficiency and more consistency. How controllers implement the right of access lies at the heart of data protection and it is one of the most frequently exercised data subject rights.” Throughout 2024, 30 DPAs across Europe launched coordinated investigations into the compliance of controllers with the right of access, by opening formal investigations, assessing whether a formal investigation was warranted and/or carrying out fact-finding exercises.  A total of 1,185 controllers, consisting of small and medium-sized enterprises (SMEs) and big companies active in different industries and fields, as well as various types of public entities, responded to the action. Areas of improvement and main challenges The results suggest that more awareness raising about Guidelines 01/2022 is necessary , both at national and EU level, as the guidelines help controllers implement the right of access, explain how exercising this right can be made easier, and list the exceptions and limitations of the right to access. As a result of the 2024 CEF action, seven challenges were identified. One of them is the lack of documented internal procedures to handle access requests. In addition, inconsistent and excessive interpretations of the limits to the right of access were also observed, such as overly relying on certain exceptions to automatically refuse access requests. Another example is the barriers that individuals could encounter when exercising their right of access, such as  formal requirements or being requested to provide excessive identification documents. For each challenge identified, the report provides a list of non-binding recommendations to be taken into account by controllers and DPAs. Positive findings Despite the existing challenges, two thirds of participating DPAs evaluated the level of compliance of responding controllers with respect to the right of access from ‘average’ to ‘high’. One important factor identified as having an impact on the level of compliance was the volume of access requests received by controllers, as well as the size of the organisation. More specifically, large-sized controllers or controllers receiving more requests were more likely to reach a higher level of compliance than small organisations with less resources. Positive findings were observed across Europe. These include the implementation of best practices by controllers, such as user-friendly online forms enabling individuals to submit an access request easily as well as self-service systems to allow individuals to autonomously download their personal data in a few clicks and at any time. Background and next steps The CEF is a key action of the EDPB under its 2024-2027 Strategy, aimed at streamlining enforcement and cooperation among DPAs.  In the past three years, two previous CEF actions were carried out. The results of these national actions are aggregated and analysed together to generate deeper insight into the topic and allowing for targeted follow-up on both national and EU level. In 2023, the EDPB published the report on its first coordinated action on the use of cloud-based services by the public sector . In 2024, the EDPB also published the","id":1857297,"source":"EDPB News","titre":"CEF 2024: EDPB identifies challenges to the full implementation of the right of access","url":"https://www.edpb.europa.eu/news/news/2025/cef-2024-edpb-identifies-challenges-full-implementation-right-access_en","pubDate":"Mon, 20 Jan 2025 15:49:16 +0100"}]