: Brussels, 09 October - The European Data Protection Board (EDPB) and the European Commission endorsed joint guidelines on the interplay between the Digital Markets Act (DMA) and the General Data Protection Regulation (GDPR) . These are the first joint guidelines by the Board and the European Commission. In line with its 2024-2027 Strategy and the recent Helsinki Statement’s objectives to make GDPR compliance easier and strengthen consistency, the EDPB has cooperated with the European Commission, each within their respective mandates, to facilitate the coherent application of the DMA*and GDPR and to increase legal certainty for gatekeepers, business users, beneficiaries and individuals. EDPB Chair Anu Talus said: “These joint guidelines are the result of a fruitful cooperation between the EDPB and the European Commission. This is the first time that the EDPB and the European Commission prepare guidelines jointly. This approach maximises usefulness of the guidance by simplifying compliance for businesses and[...]
: Key Drivers Behind the Rising Demand for Virtual CISOs Wednesday, April 22,2026 Businesses are navigating the challenges of a digital-first environment, which is driving an increased demand for expert-driven cybersecurity solutions. The virtual chief information security officer (vCISO) has become essential for organizations seeking to enhance their cybersecurity resilience while managing costs effectively. Effective security leadership is more crucial than ever, particularly in light of the evolving threat landscape, which includes ransomware attacks and data breaches. Addressing Cybersecurity Challenges Organizations face a significant escalation in cyberattacks as hackers continually evolve their tactics. This dynamic landscape makes it challenging for businesses to maintain effective defenses. A vCISO plays a pivotal role by providing specialized guidance in threat intelligence, risk management, and incident response. By working with a vCISO, companies can proactively identify vulnerabilities and impleme[...]
: Brussels, 20 January - The European Data Protection Board (EDPB) has adopted a report on the implementation of the right of access by controllers . The report summarises the outcome of a series of coordinated national actions carried out in 2024 under the Coordinated Enforcement Framework (CEF). It lists the issues that were observed for some controllers, along with a series of recommendations to help them implement the right of access. A central element is controllers’ awareness of the EDPB Guidelines 01/2022 on data subjects rights – Right of access and whether these guidelines were followed in practice. EDPB Deputy Chair Zdravko Vukíc said: “The CEF is a valuable initiative that helps strengthen the cooperation among Data Protection Authorities (DPAs): by tackling selected topics in a coordinated fashion, they achieve greater efficiency and more consistency. How controllers implement the right of access lies at the heart of data protection and it is one of the most frequently exercised data subject rights[...]
: Brussels, 18 February - The European Data Protection Board (EDPB) has adopted a report on its Coordinated Enforcement Framework (CEF) action on the right to be forgotten (Art.17 GDPR) . The Board selected this topic as it is one of the most frequently exercised GDPR rights and one about which DPAs frequently receive complaints from individuals. The main objectives of this coordinated action are to ensure that the right to erasure is effectively exercised by individuals in Europe and understand how controllers comply with this right in practice. In addition, the EDPB identified good practices and the most important related challenges, with the aim of providing further guidance on this topic. Throughout 2025, 32 DPAs across Europe took part in this initiative. More specifically, 9 DPAs have initiated new formal investigations or have continued ongoing ones, and 23 DPAs carried out a fact-finding exercise. A total of 764 controllers across Europe responded to the action, ranging from small and medium-sized[...]
: The Federal Trade Commission issued a policy statement today announcing that the Commission will not bring an enforcement action under the Children’s Online Privacy Protection Rule (COPPA Rule) against certain website and online service operators that collect, use, and disclose personal information for the sole purpose of determining a user’s age via age verification technologies. The COPPA Rule requires operators of commercial websites or online services directed to children under 13, and operators with actual knowledge they are collecting personal information from a child, to provide notice of their information practices to parents and to obtain verifiable parental consent before collecting, using, or disclosing personal information collected from a child under 13. Age verification technologies play a critical role in helping parents as they monitor their children’s online activities. Since COPPA was enacted in 1998, there’s been an explosion in the use of internet-connected technologies by children. To he[...]
: Buckle up for a two-lane look at car buying lfair July 30, 2020 | 1:04PM Buckle up for a two-lane look at car buying By Lesley Fair It’s one of the biggest purchases people make, but two new FTC staff reports examine some common pitfalls when consumers are in the market for a car. Buckle down and read the Bureau of Consumer Protection’s Buckle Up: Navigating Auto Sales and Financing , which focuses on the challenges buyers face in getting accurate, understandable information when shopping for a vehicle. Not in the auto business? Not so fast. The deep-dive analysis of Buckle Up and an accompanying report by BCP staff and the Bureau of Economics – The Auto Buyer Study: Lessons From In-Depth Consumer Interviews And Related Research – offer insights into the perception and behavior of consumers in the study that can apply to other industries. The FTC’s interest in auto-related transactions goes back decades. (Check out Volume 1 of Federal Trade Commission Decisions for a 1919 case regarding deception in the s[...]