[{"description":"Recognize Data Privacy Day by protecting your small business from cybercriminals chundycz January 28, 2026 | 8:02AM Recognize Data Privacy Day by protecting your small business from cybercriminals Your small business likely has had many milestones. Hiring your first employee. Opening your doors for the first time. Making your first sale. But some milestones you’d probably rather avoid — like experiencing your first cyberattack. Think you’re too small to target? Think again. Cybercriminals target companies big and small, so this Data Privacy Day keep your business’s data (and your customers’ data) safe by reviewing the FTC’s updated resources at ftc.gov/cybersecurity . At  ftc.gov/cybersecurity , you’ll find the FTC’s updated article, Cybersecurity for Small Business, included in the FTC’s suite of small business materials at  ftc.gov/smallbusiness . This covers eight topics ranging from the importance of using email authentication technology and how to protect your business from phishing and ransomware, to questions to ask your vendors about their own cybersecurity practices. Whether these topics are new or familiar to you, reviewing the advice at  ftc.gov/cybersecurity and sharing it with your staff can help protect your business from cybercriminals. Here are some other ideas for how to help protect your business: Talk about the sections of  Cybersecurity for Small Business with your staff or fellow business owners.  Don’t have a lot of time? No problem. The article has clear, practical advice in plain language. Share advice about cybersecurity on your business’s social media page.  If some of this security guidance is new to you, it may be new to other small business owners too. Help them protect their business by sharing this advice. You can copy and paste information directly from the  article . Stay in the know with the FTC’s Business Blog.  Subscribe to get the latest guidance on how to protect your small business from cybercriminals, and more. Find more resources for small businesses at  ftc.gov/smallbusiness","id":3204248,"pubDate":"Thu, 08 Oct 2026 14:08:42 +0200","titre":"Recognize Data Privacy Day by protecting your small business from cybercriminals","url":"https://www.ftc.gov/business-guidance/blog/2026/01/recognize-data-privacy-day-protecting-your-small-business-cybercriminals","source":"FTC USA Business Blog Posts"},{"titre":"FTC consumer protection year in review offers 2020 vision for your business","id":3203247,"pubDate":"Thu, 08 Oct 2026 08:06:58 +0200","description":"FTC consumer protection year in review offers 2020 vision for your business lfair January 8, 2020 | 9:26AM FTC consumer protection year in review offers 2020 vision for your business By Lesley Fair They say hindsight is 20/20, but what about foresight? We’re not ones to prognosticate, but a look at notable FTC cases and initiatives from the past year suggests some topics likely to be top of mind in months to come. Here is a non-exhaustive list of issues in our 2019 rearview mirror and likely visible through the 2020 windshield. Consumer privacy. The FTC’s $5 billion enforcement action against Facebook made history and headlines, but the other notable part of the case is the monumental change the order mandates to Facebook’s privacy ecosystem. The Commission opinion in Cambridge Analytica reaffirms the proposition that like any other claim, a company’s privacy promises are viewed through the lens of established FTC consumer perception principles. A series of cases demonstrates the agency’s continued commitment to challenging false or misleading representations about businesses’ compliance with the EU-U.S. Privacy Shield Framework. Another important development is the FTC’s proposed settlement with Retina-X . It’s our first action against a marketer of stalking apps – software that allowed purchasers to monitor the mobile devices on which they’re installed, without users’ knowledge. COPPA. Congress passed the Children’s Online Privacy Protection Act to ensure that when it comes to the collection of kids’ personal information online, parents are in the driver’s seat. The FTC settlement with YouTube – brought in conjunction with the New York Attorney General – alleges that the company collected kids’ personal data without parental consent, in violation of the COPPA Rule . The $170 million civil penalty broke the record for the largest remedy in an FTC COPPA case, set months before in our $5.7 million settlement with Musical.ly , now known as TikTok. If you’re a YouTube channel owner, read a special Business Blog post for tips on determining if your content is directed to children. Data security. Is your company honoring its data security promises and taking reasonable steps to safeguard the sensitive information in its possession? The FTC, CFPB, and State AG actions against Equifax illustrate how consumers are injured when companies ignore reasonably foreseeable threats. The settlement, which totals between $575 million and $700 million – also reminds businesses that heeding warnings about known risks is more prudent (and cost-effective) than the alternative. Three threads tie together the FTC’s unrelated actions against LightYear Dealer Technologies and InfoTrax Systems . They both sell management software to specific industries. They both allegedly failed to take reasonable steps to secure their networks, resulting in damaging data breaches. And they’re both covered by similar new orders the FTC has introduced in recent data security cases. If you or your clients are players in the Internet of Things, the settlement of the FTC’s litigation against connected device company D-Link sends an unmistakable message: The future of the IoT marketplace depends on secure software development. Endorsements, certifications, and influencers. Why is the FTC concerned about the accuracy of endorsements and certifications? Because they’re material to consumers. The FTC says Truly Organics’ claim that its personal care products were “certified organic” lathered up a double bubble of deception. First, its merchandise contained ingredients that weren’t organic. Second, the company falsely claimed that its products were certified by USDA’s National Organic Program. Other FTC developments focused on the use of endorsements in social media. The FTC’s action against Devumi alleges the company sold fake followers, phony subscribers, and bogus","source":"FTC USA Business Blog Posts","url":"https://www.ftc.gov/business-guidance/blog/2020/01/ftc-consumer-protection-year-review-offers-2020-vision-your-business"},{"url":"https://www.ftc.gov/business-guidance/blog/2018/03/ftc-recaps-consumer-complaint-data-2017-whos-list","source":"FTC USA Business Blog Posts","description":"FTC recaps consumer complaint data for 2017: Who’s on the list? lfair March 1, 2018 | 5:17PM FTC recaps consumer complaint data for 2017: Who’s on the list? By Lesley Fair Once bitten, twice shy. That fundamental principle of human behavior is why reputable businesses that work hard to earn consumers’ confidence should support the FTC’s ongoing efforts to fight fraud. According to the FTC’s 2017 Consumer Sentinel Data Book , consumers reported losing a total of $905 million to fraud last year. That’s close to a billion bucks people won’t be able to spend on legitimate products and services from credible companies. That figure is up $63 million from last year, although the total number of reports received from consumers is down from 2.98 million in 2016 to 2.68 million in 2017. Topping the list that no industry wants to be on is debt collection, making up 23% of the total number of complaints. But there are two caveats: 1) that number is down from 2016; and 2) the high number of debt collection reports was due in part to reports submitted by a data contributor who collects complaints via a mobile app. Second on the list is identity theft at 14%. The injury to consumers came in two equally unpalatable flavors. Credit card fraud was the most common manifestation. Tax fraud was next, but the glimmer of hope there is that the total number of tax-related identity theft complaints fell by 46%. Winners of the dubious bronze medal were imposter scams , with consumers reporting financial losses of a whopping $328 million. Imposters wear many masks: “I’m with [big-name tech company] and your computer is riddled with viruses,” “Help, Grampa! I’ve been arrested and need bail money,” and “We’re from [government agency] and we’ll arrest you if you don’t pay us today.” Nearly one in five consumers who reported an imposter scam said they lost money to the fraud. For the first time, the Consumer Sentinel Data Book breaks out fraud losses by reported age groups and here’s a result that may surprise you: Consumers in their 20s reported losing money to fraud more often than those over 70. Among 20-somethings who reported fraud, 40% said they lost money. Compare that with the over-70 crowd, only 18% of whom reported a financial loss. But there’s a troubling aspect to that surprising factoid. When older adults did report losing money to a scammer, the loss was much greater. For example, people 80 and older reported median losses of $1,092 compared to $400 for those in their 20s. Wire transfers continue to be scammers’ preferred payment method and in 70% of the complaints we received, the fraudster contacted the consumer by phone. The top states for reporting fraud were Florida, Georgia and Nevada, while Michigan, Florida and California had the most reports about identity theft, per capita. Stats cats tell us that they find our state-by-state data dive helpful, so we’ve created a new webpage to make it easier to evaluate the information. The bottom line for business people: Educate.   Use your status in the community to spread the word to employees, industry colleagues, and friends about the latest forms of fraud. One way to stay in the know: Sign up for scam alerts from the FTC. Cooperate.  If people you know suspect that their identity has been compromised, send them to identitytheft.gov to create a personal recovery plan. (And remember that your company may have a legal obligation to provide identity theft victims and law enforcers with transaction records related to ID theft.) Report.   When you spot a scam, report it to the FTC . We’re talking about fraud directed to consumers and questionable promotions targeting small businesses. Your reports have helped the FTC and other law enforcement agencies put together cases against the con artists behind bogus business directories, office supply flimflams, and other forms of B2B fraud. Consumer Sentinel is an online database available to civil","pubDate":"Tue, 06 Oct 2026 08:06:24 +0200","id":3199077,"titre":"FTC recaps consumer complaint data for 2017: Whoâs on the list?"},{"url":"https://www.ftc.gov/business-guidance/blog/2020/09/green-lights-red-flags-ftc-rules-road-business-rocks-cleveland","source":"FTC USA Business Blog Posts","description":"Green Lights & Red Flags: FTC Rules of the Road for Business rocks on in Cleveland sgressin September 21, 2020 | 12:03PM Green Lights & Red Flags: FTC Rules of the Road for Business rocks on in Cleveland By Seena Gressin Natives and fans heartily agree that “Cleveland Rocks!” That’s why the Federal Trade Commission and its Ohio partners are ready to roll with the next installment of Green Lights & Red Flags: FTC Rules of the Road for Business , set to make its online debut on October 29, 2020, from Cleveland. The free business workshop focuses on current topics in truth-in-advertising law, social media marketing, data security, business-to-business fraud, and more. Who should attend the virtual event? Ohio business owners, marketing and advertising professionals, attorneys — anyone who needs to know how established consumer protection principles apply in today’s fast-paced marketplace.  The Office of the Ohio Attorney General, Better Business Bureau Serving Greater Cleveland, and the Cuyahoga County Department of Consumer Affairs are joining the FTC in sponsoring Green Lights & Red Flags . Andrew Smith, Director of the FTC’s Bureau of Consumer Protection, is among the featured speakers, and a roster of Ohio experts will share practical insights. Visit our event page for details. This year’s Green Lights & Red Flags event continues the popular business workshop series that the FTC has held over the years with regional partners in cities across the county. Topics include: Protecting Small Business from Scams . What federal and state law enforcers and the Better Business Bureau are doing to protect your company from business-to-business fraud, and steps you can take to help protect yourself. The Truth About False Advertising. An introduction to truth-in-advertising law. Avoiding a Promotion Commotion. Social media marketing, consumer reviews, children’s online privacy, email marketing, and other timely topics. The Secure Entrepreneur. Data security basics and practical tips on responding to a cyberattack. Green Lights & Red Flags will run from 1 p.m. to 3:45 p.m. Eastern Time on October 29th. Space is limited and registration is on a first-come, first-served basis. To register, please use this link . We hope to see you there,","id":3197411,"pubDate":"Mon, 05 Oct 2026 08:07:08 +0200","titre":"Green Lights & Red Flags: FTC Rules of the Road for Business rocks on in Cleveland"},{"url":"https://www.ftc.gov/business-guidance/blog/2012/06/speaking-spokeo-part-2-companys-allegedly-bogus-endorsements","source":"FTC USA Business Blog Posts","pubDate":"Sat, 03 Oct 2026 14:06:13 +0200","id":3195787,"titre":"Speaking of Spokeo: Part 2 â The companyâs allegedly bogus endorsements","description":"Speaking of Spokeo: Part 2 — The company’s allegedly bogus endorsements wfg-adm109 June 13, 2012 | 12:25PM Speaking of Spokeo: Part 2 — The company’s allegedly bogus endorsements By Lesley Fair The lawsuit against data broker Spokeo is the FTC’s first Fair Credit Reporting Act case addressing the collection of online info — including data from social networking sites — when used in the context of employment screening.  But that’s not the only way the Spokeo settlement touches on social media.  The FTC also charged that Spokeo violated Section 5 by having employees post glowing recommendations of the company’s services on news and technology websites without disclosing their true identity. Perhaps just the work of a rogue cubicle occupant?  No, said the FTC.  According to the complaint , Spokeo directed its employees to write the comments.  Spokeo managers then edited what they wrote and had the staffers post the endorsements using account names provided by Spokeo.  The purpose, says the FTC, was to give readers the misleading impression that the laudatory words had been posted by independent consumers or business users of Spokeo. The FTC’s revisions to its Endorsement Guides made headlines a few years ago.  Ironically enough, the provision that seemed to attract the most attention is one that didn’t change.  It’s the law — and it’s always been the law under Section 5 — that consumers have a right to know when there’s a material connection between an advertiser and an endorser.  Here’s how the Guides put it:  \"When there exists a connection between the endorser and the seller of the advertised product that might materially affect the weight or credibility of the endorsement ( i.e., the connection is not reasonably expected by the audience), such connection must be fully disclosed.\" According to the FTC, by posting comments that conveyed the untruthful impression that they came from satisfied users of Spokeo’s services, Spokeo engaged in false and misleading practices.  To settle the endorsement count in the lawsuit, Spokeo has agreed that it won’t misrepresent, expressly or by implication, the status of any user of a product or service — for example, that someone is an independent, ordinary endorser if that’s not the case.  The company also will clearly and prominently disclose any material connection between an endorser and Spokeo (or any other entity advertising, selling, or promoting a product) when a connection exists.  What about the bogus endorsements already posted?  Spokeo has seven days to take all reasonable steps to pull them down. Looking for more about complying with the Endorsement Guides?  Read The FTC’s Revised Endorsement Guides: What People are Asking and watch this video: While you’re at it, share this post and those resources with your marketing staff, your ad agency, your PR firm, and anyone else who plays a role in your publicity and promotions. Next:  What the Spokeo settlement means for your business, your next ad campaign, and your job search"},{"description":"Is it amour – or scam-more? lfair February 11, 2021 | 12:17PM Is it amour – or scam-more? By Lesley Fair Online romance may begin with Panic! At The Disco’s High Hopes , but according to a new FTC Data Spotlight , all too often it ends with the conclusion that – to quote the J. Geils Band –  Love Stinks . Far be it from us to put a damper on Valentine’s Day, but reports to the Consumer Sentinel Network suggest that the injury inflicted by romance scams is on the rise. According to the new Data Spotlight , “For three years running, people have reported losing more money on romance scams than on any other fraud type identified in Sentinel. In 2020, reported losses to romance scams reached a record $304 million, up about 50% from 2019. For an individual, that meant a median dollar loss of $2,500.” Why the increase? The continued popularity of dating apps is part of the story, but the pandemic has played a part, too. For right now, the need for social distancing and masking makes the “meet cute” at the local coffee shop less likely. Of course, we’ve all heard heart-warming stories of romances that started on screen and blossomed IRL, but the Data Spotlight suggests that at least some of those digital dalliances may be hiding something more sinister. What does that have to do with you? We thought you’d never ask. Chances are that someone you know – a friend or family member perhaps – has a long-distance love they have yet to meet. A subtle word from you about the telltale signs of a romance scam could mean one less report to Consumer Sentinel in 2021 about a heart broken and a wallet emptied by a romance scammer. It can be a difficult topic to broach, but we have a sure-fire opener: “I just read the most fascinating thing on the website of the Federal Trade Commission, America’s consumer protection agency.” (What? That’s not your typical conversation starter? No Valentine for you!) Regardless of how you bring up the topic, Valentine’s Day offers a way to share some heart-to-heart hints. Romance scams can happen to anyone. According to the Data Spotlight, reports of money lost on romance scams increased for every age group in 2020. The 20-29 crowd saw the most notable spike, with the number of reports more than doubling since 2019. People between 40 and 69 were once again the most likely to report losing money to romance scams. And people 70+ reported the highest individual median losses at $9,475. Every picture tells a story, but some of those stories are fiction. Knowing that fetching photos can lure in a love, scammers routinely steal people’s snaps and pass themselves off as the person in the picture. To investigate their identity, try a reverse-image search of their profile picture or other photos they send you. If the picture is associated with another name or if the details don’t match up, you’re dealing with a scammer. Don’t mix romance with finance. We’ve always cautioned people not to wire money or send gift cards to online loves, but we have a new tip to add. Don’t let your guard down just because that special someone sends you money first. You can bet the money’s stolen. Next, they’ll want you to send it on for some cooked-up reason. This is how people become unwitting accomplices to money laundering. As soon as the requests for money start, it’s time to – depending on your musical generation – Go Your Own Way , bid them Bye Bye Bye , or make it clear that We Are Never Ever Getting Back Together . The FTC has more advice on how to spot a romance scam . ","titre":"Is it amour â or scam-more?","pubDate":"Thu, 01 Oct 2026 14:10:47 +0200","id":3191273,"source":"FTC USA Business Blog Posts","url":"https://www.ftc.gov/business-guidance/blog/2021/02/it-amour-or-scam-more"},{"url":"https://www.arthurperret.fr/blog/2023-11-01-document-theory-and-document-design.html","source":"Blog d'Arthur Perret","description":"<p>This paper reports on an experiment which connects document design with document theory. Document design is about what documents should do. We use the example of document graphs and of Cosma, a visualization program created during the HyperOtlet research programme, to show how theory can inform design decisions and help conceptualize results. This paper is currently under peer review.</p> <hr/> <section id=\"document-design-or-information-design\" class=\"level1\"> <h1>Document design or information design?</h1> <p><span class=\"citation\" data-cites=\"findeli2015\">Findeli (2015)</span> defines design as diagnostic and prescriptive, an example of “projective” epistemology: designers view the world as a project to realize, rather than an object to know. This definition of design implies that document design is less about what documents <em>are</em> and more about what they <em>should do</em>. This aligns with the evolution of document theory from an ontic view of documents to a functional one, which was pioneered by the European documentation movement in the first half of the twentieth century and reintroduced as “neo-documentation” in the literature during the 1990s.</p> <p>Currently in the literature, document design is mostly considered to be a part of information design.<a href=\"#fn1\" class=\"footnote-ref\" id=\"fnref1\" role=\"doc-noteref\"><sup>1</sup></a> The purpose of information design is to create effective communications <span class=\"citation\" data-cites=\"renkema2006 pettersson2002\">(Renkema 2006 ; see also Pettersson 2002)</span>. Document design is usually taught within communications programs ; in the US, in either English or fine arts departments <span class=\"citation\" data-cites=\"schriver1997\">(Schriver 1997, p. 92‑93)</span> ; in France, in Information and Communication Science departments.</p> <p>Research on information design has very few connections with documentation. It has been criticized for its lack of theory: <span class=\"citation\" data-cites=\"carliner2006\">Carliner (2006, p. 10–14)</span> warned about the field’s tendency to generalize findings despite shaky conceptual foundations and a limited understanding of topics such as the World Wide Web.<a href=\"#fn2\" class=\"footnote-ref\" id=\"fnref2\" role=\"doc-noteref\"><sup>2</sup></a> We believe document theory can help address some of these challenges and bring perspective to information design.</p> <p><span class=\"citation\" data-cites=\"zacklad2019a\">Zacklad (2019)</span> gives us an example of this. He draws from document theory to define information design as the interplay between textualization (creating content information), documentarization (shaping the medium) and auctorialization (creating author identities). Zacklad puts documentarization at the heart of information design (see fig. <a href=\"#fig:zacklad2019\">1</a>). Documentarization can be internal (the organization of fragments into documents) or external (the relational organization of documents, e.g. classification); it can involve different roles or positions (author, editor, printer/programmer, distributor, reader); it implies significant differences between designing the systems that involve documents (“system-oriented design”) and designing the documents themselves (“author design”).</p> <figure id=\"fig:zacklad2019\"> <img src=\"https://www.arthurperret.fr/img/2023-docam-zacklad2019.png\" class=\"fullwidth\" alt=\"Information design according to","pubDate":"Thu, 23 Jul 2026 10:17:34 +0200","id":3047509,"titre":"[Article] Document theory and document design"},{"url":"https://www.ftc.gov/news-events/news/press-releases/2026/06/ftc-data-show-people-reported-losing-3-point-5-billion-imposter-scams-2025","source":"Federal Trade Commission - Protecting America's Consumers","description":"New data from the Federal Trade Commission reveal that people reported losing a staggering $3.5 billion to imposter scams in 2025, with reported losses increasing nearly three times since 2020. FTC data also show that people reported imposter scams more than any other fraud category in 2025—nearly one in three fraud reports were about imposter scams. These scams lured consumers through text, phone, email, social media, search engine results and other means. Some of the costliest impersonation scams start with a fake security alert, often from a bank. People are convinced to move money to “protect” it, with their losses often limited only by their available funds. Last year, people reported losing nearly $1 billion to business impersonators with the highest reported losses to bank impersonators—and about $920 million to government impersonators, up from $866 million and $789 million respectively in 2024. The FTC has seen a striking increase in reported fraud losses to all types of fraud—about $16 billion was reported lost in 2025, the highest on record and an increase of about 25% compared to the 2024 figure. “Consumers derive enormous benefits from competitive markets built on truthful information. But fraud undermines that foundation, impeding the market process and preventing markets from operating efficiently,” said Christopher Mufarrige, Director of the Bureau of Consumer Protection. “The FTC will use every tool available to combat one of the most pernicious forms of fraud—government and business impersonation—and to protect the integrity of the digital economy.” The data underscore the importance of the FTC’s work with the  Elder Justice Coordinating Council (EJCC) , which is working to help raise awareness of imposter scams and other scams impacting older adults as well as other consumers. This year, the FTC, along with the Department of Justice, Department of Health and Human Services and members of the EJCC, is leading the Never Ever campaign, a public-private coordinated consumer education effort to raise awareness of government and business imposter scams. In addition to the federal agency members of the EJCC , the campaign also includes private sector representatives such as the American Bankers Association, USTelecom, Google and Microsoft. To help the public spot imposter scams, EJCC members launched the Never Ever campaign, which is aimed at promoting messaging on the key actions that government and businesses will Never Ever take. The Never Ever campaign will run from June 15 to June 26, in conjunction with World Elder Abuse Awareness Day. This first-of-its-kind public-private partnership includes participants from a wide range of organizations and is aimed at directing consumers to a website that includes information and resources to help them avoid imposter scams and what to do if they spot one. Enforcement Actions To help combat impersonation scams, the FTC in 2024 finalized the Impersonation Rule. The Rule gives the agency stronger tools to combat and deter scammers who impersonate government agencies and businesses, enabling the FTC to file federal court cases seeking to get money back to injured consumers and civil penalties against rule violators. Since then, the FTC has vigorously enforced the rule and brought a dozen enforcement actions that have resulted in halting imposter schemes and obtained over $70 million in redress for consumers. In 2025, the FTC brought law enforcement actions under the Impersonation Rule against:  American Tax Service (IRS imposter scheme);  MediaAlpha (government imposter scheme to sell health insurance);  Click Profit (business imposter money making scam);  Blackstone Legal (phantom debt business imposter scheme) and  Accelerated Debt Settlement (government and business imposter scheme that targeted older adults for debt relief). More recently, the  FTC filed a complaint against Innovative Partners in April 2026 , alleging the operators","id":2959787,"pubDate":"Tue, 16 Jun 2026 08:09:40 +0200","titre":"FTC Data Show People Reported Losing $3.5 Billion to Imposter Scams in 2025"},{"description":"Brussels, 18 February - The European Data Protection Board (EDPB) has adopted a  report on its Coordinated Enforcement Framework (CEF) action on the right to be forgotten (Art.17 GDPR) .  The  Board selected this topic  as it is one of the most frequently exercised GDPR rights and one about which DPAs frequently receive complaints from individuals. The main objectives of this coordinated action are to ensure that the right to erasure is effectively exercised by individuals in Europe and understand how controllers comply with this right in practice. In addition, the EDPB identified good practices and the most important related challenges, with the aim of providing further guidance on this topic.  Throughout 2025, 32 DPAs across Europe took part in this initiative. More specifically, 9 DPAs have initiated new formal investigations or have continued ongoing ones, and 23 DPAs carried out a fact-finding exercise. A total of 764 controllers across Europe responded to the action, ranging from small and medium-sized enterprises (SMEs) to big companies active in many different industries and fields, as well as various types of public entities. The results of these national actions have been aggregated and analysed together allowing for targeted follow-up on both national and EU level.   Areas of improvement and main challenges The report lists the issues that were identified, along with a series of recommendations addressed to controllers, to help them implement the right to erasure. Seven recurring main challenges were identified by DPAs. The results confirmed some of the findings of the 2024 coordinated action on the right of access , for example when it comes to the lack of appropriate internal procedures to handle requests, or the lack of sufficient information provided to individuals. In addition, participating DPAs reported specific findings related to the reliance by some controllers on inefficient anonymisation techniques to handle erasure requests as an alternative to deletion. DPAs also noted inconsistent practices, and the difficulties faced by controllers regarding the determination of retention periods and the deletion of personal data in the context of back-ups. In addition, as the right to erasure is not an absolute right, some controllers face difficulties in assessing and applying the conditions for the exercise of this right, including in carrying out the different balancing tests between the right to erasure and other rights and freedoms.   Follow-up to help organisations comply  Extensive guidance, documents and templates exist at national level to help controllers comply with the right of erasure and help individuals exercise this right. In line with the Helsinki Statement’s objectives of making GDPR compliance easier and ensuring consistent interpretation and enforcement across Europe, the extensive guidance and templates already available at national level will be leveraged at EDPB level where appropriate.   Background and next steps The CEF is a key action of the EDPB under its 2024-2027 Strategy , aimed at streamlining enforcement and cooperation among DPAs.  In 2023, the EDPB published the report on its first coordinated action on the  use of cloud-based services by the public sector . In 2024, the EDPB also published the report on the outcome of the second coordinated action on the  designation and position of Data Protection Officers . In 2025, the EDPB issued the report on its third coordination action on the  implementation of the right of access . The CEF 2026 action will be on the  obligations of transparency and information under the GDPR .   For further information: DA DPA:   EDPB vedtager rapport om dataansvarliges overholdelse af retten til sletning EL DPA: Ολοκλήρωση της συντονισμένης δράσης του","id":2703238,"pubDate":"Wed, 18 Feb 2026 15:27:14 +0100","titre":"EDPB identifies challenges hindering the full implementation of the right to erasure","url":"https://www.edpb.europa.eu/news/news/2026/edpb-identifies-challenges-hindering-full-implementation-right-erasure_en","source":"EDPB News"},{"url":"https://www.edpb.europa.eu/news/news/2025/cef-2024-edpb-identifies-challenges-full-implementation-right-access_en","source":"EDPB News","pubDate":"Mon, 20 Jan 2025 15:49:16 +0100","id":1857297,"titre":"CEF 2024: EDPB identifies challenges to the full implementation of the right of access","description":"Brussels, 20 January - The European Data Protection Board (EDPB) has adopted a report on the implementation of the right of access by controllers . The report summarises the outcome of a series of coordinated national actions carried out in 2024 under the Coordinated Enforcement Framework (CEF). It lists the issues that were observed for some controllers, along with a series of recommendations to help them implement the right of access. A central element is controllers’ awareness of the EDPB Guidelines 01/2022 on data subjects rights – Right of access and whether these guidelines were followed in practice. EDPB Deputy Chair Zdravko Vukíc said: “The CEF is a valuable initiative that helps strengthen the cooperation among Data Protection Authorities (DPAs): by tackling selected topics in a coordinated fashion, they achieve greater efficiency and more consistency. How controllers implement the right of access lies at the heart of data protection and it is one of the most frequently exercised data subject rights.” Throughout 2024, 30 DPAs across Europe launched coordinated investigations into the compliance of controllers with the right of access, by opening formal investigations, assessing whether a formal investigation was warranted and/or carrying out fact-finding exercises.  A total of 1,185 controllers, consisting of small and medium-sized enterprises (SMEs) and big companies active in different industries and fields, as well as various types of public entities, responded to the action. Areas of improvement and main challenges The results suggest that more awareness raising about Guidelines 01/2022 is necessary , both at national and EU level, as the guidelines help controllers implement the right of access, explain how exercising this right can be made easier, and list the exceptions and limitations of the right to access. As a result of the 2024 CEF action, seven challenges were identified. One of them is the lack of documented internal procedures to handle access requests. In addition, inconsistent and excessive interpretations of the limits to the right of access were also observed, such as overly relying on certain exceptions to automatically refuse access requests. Another example is the barriers that individuals could encounter when exercising their right of access, such as  formal requirements or being requested to provide excessive identification documents. For each challenge identified, the report provides a list of non-binding recommendations to be taken into account by controllers and DPAs. Positive findings Despite the existing challenges, two thirds of participating DPAs evaluated the level of compliance of responding controllers with respect to the right of access from ‘average’ to ‘high’. One important factor identified as having an impact on the level of compliance was the volume of access requests received by controllers, as well as the size of the organisation. More specifically, large-sized controllers or controllers receiving more requests were more likely to reach a higher level of compliance than small organisations with less resources. Positive findings were observed across Europe. These include the implementation of best practices by controllers, such as user-friendly online forms enabling individuals to submit an access request easily as well as self-service systems to allow individuals to autonomously download their personal data in a few clicks and at any time. Background and next steps The CEF is a key action of the EDPB under its 2024-2027 Strategy, aimed at streamlining enforcement and cooperation among DPAs.  In the past three years, two previous CEF actions were carried out. The results of these national actions are aggregated and analysed together to generate deeper insight into the topic and allowing for targeted follow-up on both national and EU level. In 2023, the EDPB published the report on its first coordinated action on the use of cloud-based services by the public sector . In 2024, the EDPB also published the"}]