: Data Protection Day 2025! miriam Fri, 01/24/2025 - 14:55 Tue, 01/28/2025 - 12:00 Every year on 28 January, we celebrate Data Protection Day. This date marks the anniversary of the Council of Europe’s Convention 108, the first binding international law securing individuals' rights to protection of their personal data. Read our factsheets to learn more about your rights 1 Read our factsheets to learn more about your
: Happy Data Protection Day 2026! agnieszka Mon, 01/26/2026 - 15:55 Wed, 01/28/2026 - 12:00 Every year on 28 January, we celebrate Data Protection Day. This date marks the anniversary of the Council of Europe’s Convention 108, the first binding international law securing individuals' rights to protection of their personal data.
: Brussels, 27 April – Today marks the 10th anniversary of the GDPR’s adoption, the first comprehensive data protection framework spanning an entire continent, establishing clear rights for individuals and obligations for organisations across Europe. The moment that led to the creation of the EDPB The GDPR led to the establishment of the European Data Protection Board (EDPB) on 25 May 2018, replacing the Article 29 Working Party that was previously in charge of dealing with issues relating to the protection of personal data. The GDPR gave the Data Protection Authorities (DPAs) stronger enforcement powers and expanded the scope of their work from focusing mainly on national compliance complaints to routinely dealing with cross-border cases. In the past 10 years, the 31 European DPAs comprising the EDPB have worked together to ensure the consistent enforcement of the GDPR and a harmonised data protection approach across Europe. A key role in an evolving digital landscape Today, the GDPR is part of a broader an[...]
: Brussels, 20 January - The European Data Protection Board (EDPB) has adopted a report on the implementation of the right of access by controllers . The report summarises the outcome of a series of coordinated national actions carried out in 2024 under the Coordinated Enforcement Framework (CEF). It lists the issues that were observed for some controllers, along with a series of recommendations to help them implement the right of access. A central element is controllers’ awareness of the EDPB Guidelines 01/2022 on data subjects rights – Right of access and whether these guidelines were followed in practice. EDPB Deputy Chair Zdravko Vukíc said: “The CEF is a valuable initiative that helps strengthen the cooperation among Data Protection Authorities (DPAs): by tackling selected topics in a coordinated fashion, they achieve greater efficiency and more consistency. How controllers implement the right of access lies at the heart of data protection and it is one of the most frequently exercised data subject rights[...]
: Brussels, 12 September - During its September plenary meeting, the European Data Protection Board (EDPB) has adopted guidelines on the interplay between the Digital Services Act (DSA) and the General Data Protection Regulation (GDPR) . These are the first set of EDPB guidelines on the interplay between the GDPR and the EU’s recently adopted digital laws. The DSA aims to complement the rules of the GDPR to ensure the highest level of protection of fundamental rights in the digital space. Its main goal is to create a safer online environment in which the fundamental rights of all users, including the right to freedom of expression, are protected. It applies to online intermediary services , such as search engines and platforms. Several provisions included in the DSA entail the processing of personal data by intermediary service providers. The EDPB guidelines contribute to the consistent application of the DSA and of the GDPR, insofar as some provisions of the DSA concern the processing of personal data by inte[...]
: Brussels, 18 February - The European Data Protection Board (EDPB) has adopted a report on its Coordinated Enforcement Framework (CEF) action on the right to be forgotten (Art.17 GDPR) . The Board selected this topic as it is one of the most frequently exercised GDPR rights and one about which DPAs frequently receive complaints from individuals. The main objectives of this coordinated action are to ensure that the right to erasure is effectively exercised by individuals in Europe and understand how controllers comply with this right in practice. In addition, the EDPB identified good practices and the most important related challenges, with the aim of providing further guidance on this topic. Throughout 2025, 32 DPAs across Europe took part in this initiative. More specifically, 9 DPAs have initiated new formal investigations or have continued ongoing ones, and 23 DPAs carried out a fact-finding exercise. A total of 764 controllers across Europe responded to the action, ranging from small and medium-sized[...]
: Brussels, 16 April – During its latest plenary, the EDPB has adopted Guidelines on processing of personal data for scientific research purposes . In addition, the Board has created a team to speed up the finalisation of the guidelines on anonymisation. The EDPB has also adopted two opinions on the two sets of the Europrivacy certification criteria for approval as European Data Protection Seals, one of which to be used as a tool for transfers. Many areas of scientific research rely on the processing of individuals’ personal data, and this has driven significant scientific breakthroughs that benefit society. The rise of new technologies, such as artificial intelligence, also contributes to scientific progress by enabling researchers to use and analyse data in innovative ways. The main objective of the EDPB guidelines on scientific research is to provide more clarity for researchers and make GDPR compliance easier , while ensuring the protection of individuals’ fundamental rights . “Scientific research can driv[...]
: Brussels, 09 October - The European Data Protection Board (EDPB) and the European Commission endorsed joint guidelines on the interplay between the Digital Markets Act (DMA) and the General Data Protection Regulation (GDPR) . These are the first joint guidelines by the Board and the European Commission. In line with its 2024-2027 Strategy and the recent Helsinki Statement’s objectives to make GDPR compliance easier and strengthen consistency, the EDPB has cooperated with the European Commission, each within their respective mandates, to facilitate the coherent application of the DMA*and GDPR and to increase legal certainty for gatekeepers, business users, beneficiaries and individuals. EDPB Chair Anu Talus said: “These joint guidelines are the result of a fruitful cooperation between the EDPB and the European Commission. This is the first time that the EDPB and the European Commission prepare guidelines jointly. This approach maximises usefulness of the guidance by simplifying compliance for businesses and[...]
: Brussels, 19 March - The EDPB has launched its Coordinated Enforcement Framework (CEF) action for 2026*. Following a year-long coordinated action on the right to erasure in 2025 , the CEF's focus this year will shift to compliance with the obligations of transparency and information under the GDPR . The GDPR ensures that individuals are informed when their data is being processed (under Art. 12, 13 and 14). This right to be informed is a core element of transparency and ensures that individuals have more control over their data. Next steps During 2026, 25 Data Protection Authorities (DPAs) across Europe will take part in this initiative. They will look closely to assess the compliance of controllers with their transparency obligations under the GDPR. Participating DPAs will soon contact controllers from different sectors across Europe, either through enforcement actions or fact-finding exercises. In the latter case, they might also decide to undertake additional follow-up actions if needed. During the second[...]
: Brussels, 18 December - The European Data Protection Board (EDPB) has adopted an opinion* on the use of personal data for the development and deployment of AI models . This opinion looks at 1) when and how AI models can be considered anonymous, 2) whether and how legitimate interest can be used as a legal basis for developing or using AI models, and 3) what happens if an AI model is developed using personal data that was processed unlawfully. It also considers the use of first and third party data. The opinion was requested by the Irish Data Protection Authority (DPA) with a view to seeking Europe-wide regulatory harmonisation. To gather input for this opinion, which deals with fast-moving technologies that have an important impact on society, the EDPB organised a stakeholders’ event and had an exchange with the EU AI Office. EDPB Chair Talus said: “AI technologies may bring many opportunities and benefits to different industries and areas of life. We need to ensure these innovations are done ethically, safe[...]
: Brussels, 06 May - During its latest plenary, the European Data Protection Board (EDPB) adopted an opinion on the European Commission’s draft adequacy decision under the GDPR concerning the European Patent Organisation (EPO) . In addition, the Board adopted an opinion on the European Commission’s proposal to extend the validity of the UK adequacy decisions under the GDPR and the Law Enforcement Directive (LED) . Finally, the EDPB agreed to grant the status of observer to the Personal Data Protection Agency of Bosnia and Herzegovina. Adequate protection of personal data by the EPO At the European Commission’s request, the Board adopted an opinion on the Commission’s draft adequacy decision regarding the European Patent Organisation (EPO). Once formally adopted by the Commission, this will be the first adequacy decision concerning an international organisation and not a country or a region. An adequacy decision is a key-mechanism in EU data protection legislation which allows the European Commission to deter[...]
: Brussels, 28 November - The EDPB launched a call for expression of interest to establish a new reserve list for the Support Pool of Experts (SPE) programme . The objective is set up a reserve list of legal and technical experts. The legal expertise sought includes a wide range of fields, such as data protection, policy monitoring, technology, cybersecurity, competition, healthcare, online intermediary services and content moderation . As for the technical expertise , the relevant areas include IT auditing, website security, mobile OS and apps, Internet of Things, cloud-computing, behavioural advertising, anonymisation techniques, cryptology, artificial intelligence, User experience (UX) design, fintech , data science, social science (incl. economics, sociology, psychology), and development of applications and software . Bring your expertise to the table Don’t miss this opportunity to participate in this EDPB’s key strategic initiative. Your work will help Data Protection Authorities (DPAs) across Europe incr[...]
: The French regulatory authority for audiovisual and digital communication, Having regard to the French intellectual property code , in particular article L. 331-12 ; Having regard to the French Sports Code , in particular article L.333-10 ; After due deliberation, Adopts the following notice: The year 2025 marked a turning point in the fight against sports broadcasting piracy, with increased involvement of various types of intermediaries, under the impetus of sports rights holders, as part of the dynamic injunctions issued under article L. 333-10 of the French Sports Code . In addition to the legal actions involving Internet Service Providers (ISPs), which have been fully integrated into the scheme since 2022, and in order to strengthen the effectiveness of the blocking measures implemented, rights holders have extended their legal actions, from 2023, to search engine operators, who play a key role as central players in the diffusion of information on the internet and in directing users to sports-related con[...]
: Brussels, 09 April - The European Data Protection Board (EDPB) has published its 2025 Annual Report . The report provides an overview of the EDPB work carried out in 2025 and reflects on important milestones, such as the adoption of the Helsinki Statement on Enhanced Clarity, Support, and Engagement . “In 2025, we saw the data protection landscape change significantly. The rapid expansion of the EU’s digital regulatory framework has added complexity to the data protection ecosystem. To help organisations navigate this complexity and support compliance, the EDPB focused on enhancing legal certainty, making compliance more achievable in practice, and strengthening cooperation, both among Data Protection Authorities and with other regulators. We also prioritised meaningful dialogue with stakeholders to ensure our work reflected real-world needs. Our achievements support economic growth while continuing to protect individuals’ fundamental rights to privacy and data protection.” EDPB Chair, Anu Talus The Hel[...]
: This work is aimed at initiating of discussion and developing a general theory of privacy law. The author suggests beginning with classification of legal relationships arising in privacy sphere, as a first step toward identifying the flaws in privacy rulemaking and law application. The relational theory of law, underlying this work, explains why each privacy legal relationship will take its own direction and will form an object in a unique way. The method used in this work is classification of legal relationships using the bases adopted from theory of civil law. The work identifies at least nine types of privacy legal relationships, interpret them, shows them as a correlated system, highlights the patterns of their existence and draws parallels between some institutions of civil law and privacy law. Also, the concept of legal relationships discovers many mysteries of theory privacy law and teaches us what is the object of subjective privacy right, what subjective obligations actually has a data controller an[...]
: Une activité qui se consolide sans un redémarrage affirmé À fin août 2025, le marché résidentiel francilien confirme la tendance observée depuis le printemps : une amélioration des volumes de ventes, mais inférieurs aux niveaux d’avant-crise . De juin à août 2025, 3 3 170 transactions de logements anciens ont été enregistrées en Île-de-France, soit une hausse de 11% sur un an , après celle de 8% constatée le mois dernier. L’activité reste toutefois inférieure de 5% à celle de l’été 2023, traduisant une reprise encore fragile. La dynamique des ventes observée sur les trois derniers mois connus demeure plus soutenue pour les maisons (+17% en un an) que pour les appartements (+8%), confirmant l’attrait persistant pour les biens offrant davantage d’espace, notamment en Grande Couronne où les ventes de maisons progressent de 18%. Des prix globalement stabilisés, avec des inflexions sectorielles L’évolution des prix reste modérée, confirmant la phase de consolidation engagée depuis le printemps. En un an, d’août[...]
: CONJONCTURE IMMOBILIÈRE EN ILE-DE-FRANCE : Un marché en voie de stabilisation tant pour les volumes de ventes que pour les prix ? La correction de l’activité semble désormais enrayée, le marché ayant retrouvé un peu d’air gr'ce à l’amélioration graduelle de la solvabilité des ménages. Au 4e trimestre 2024 en Ile-de-France, les volumes de ventes de logements anciens se sont stabilisés (-2% par rapport au 4e trimestre 2023). Cette consolidation de l’activité succède à une longue phase de baisse continue des volumes de ventes qui s’est progressivement atténuée. Cependant, l’année 2024 dans son ensemble reste marquée par un recul des ventes de 13% par rapport à 2023 et surtout de 36% par rapport à 2022. Pour la seule région Ile-de-France, on a perdu 58 000 ventes de logements anciens en 2024 comparé à 2022. Parallèlement à la consolidation des volumes des ventes, les évolutions annuelles de prix se sont modérées dans un mouvement qui se prolongerait ce printemps. Se pose désormais la question du nouveau rythme d[...]
: Les volumes de ventes se consolident en Ile-de-France Après une phase pendant laquelle l’activité s’est dégradée de plus en plus sévèrement, s’est ouverte une période où les volumes de ventes ont continué de reculer mais à un rythme moins rapide. L’activité s’est désormais stabilisée avec 27 520 logements anciens vendus en Ile-de-France de septembre à novembre 2024 (-1% par rapport à septembre-novembre 2023 et ses 27 710 ventes). Des différences entre les marchés persistent : le nombre de ventes d’appartements recule de 3% tandis que celui des maisons progresse de 5% pendant la période. Les volumes de ventes restent situés à de très faibles niveaux historiques et encore 30% endessous de ceux observ/p pstrongDes /strong/p pEn Ile-de-France sur un an, de novembre 2023 nbsp;500 nbsp;apr/p pD/p /div /div /div div class=field--item div class=paragraph paragraph--type--pg-docs-to-download paragraph--view-mode--default div class=field field--name-field-pg-docs field--type-file field--label-hidden field--items div c[...]
: Is it amour – or scam-more? lfair February 11, 2021 | 12:17PM Is it amour – or scam-more? By Lesley Fair Online romance may begin with Panic! At The Disco’s High Hopes , but according to a new FTC Data Spotlight , all too often it ends with the conclusion that – to quote the J. Geils Band – Love Stinks . Far be it from us to put a damper on Valentine’s Day, but reports to the Consumer Sentinel Network suggest that the injury inflicted by romance scams is on the rise. According to the new Data Spotlight , “For three years running, people have reported losing more money on romance scams than on any other fraud type identified in Sentinel. In 2020, reported losses to romance scams reached a record $304 million, up about 50% from 2019. For an individual, that meant a median dollar loss of $2,500.” Why the increase? The continued popularity of dating apps is part of the story, but the pandemic has played a part, too. For right now, the need for social distancing and masking makes the “meet cute” at the local cof[...]
: Speaking of Spokeo: Part 2 — The company’s allegedly bogus endorsements wfg-adm109 June 13, 2012 | 12:25PM Speaking of Spokeo: Part 2 — The company’s allegedly bogus endorsements By Lesley Fair The lawsuit against data broker Spokeo is the FTC’s first Fair Credit Reporting Act case addressing the collection of online info — including data from social networking sites — when used in the context of employment screening. But that’s not the only way the Spokeo settlement touches on social media. The FTC also charged that Spokeo violated Section 5 by having employees post glowing recommendations of the company’s services on news and technology websites without disclosing their true identity. Perhaps just the work of a rogue cubicle occupant? No, said the FTC. According to the complaint , Spokeo directed its employees to write the comments. Spokeo managers then edited what they wrote and had the staffers post the endorsements using account names provided by Spokeo. The purpose, says the FTC, was to give read[...]
: Nixing the Fix: Warranties, Mag-Moss, and restrictions on repairs lfair March 18, 2019 | 10:24AM Nixing the Fix: Warranties, Mag-Moss, and restrictions on repairs By Lesley Fair First, the bad news: That nifty purchase needs a repair. Now the good news for consumers: It’s still under warranty. But where can they go to get it fixed? Can the manufacturer restrict a consumer’s ability to go to the independent repair shop of their choice? Can the manufacturer use glue, non-standard screws, and proprietary diagnostic software that make it difficult for independent repair shops to fix things? Do limitations like these affect consumers’ rights under the Magnuson-Moss Warranty Act ? That’s the topic of Nixing the Fix: A Workshop on Repair Restrictions , an FTC event scheduled for July 16, 2019 . Enforced by the FTC, the Magnuson-Moss Warranty Act helps consumers make informed buying decisions and gives them access to remedies if the widget starts to fidget during the warranty period. One key consumer protection unde[...]
: By Erin Clupp, Research Librarian in Norton Rose Fulbright’s Vancouver office. Congratulations! You’ve successfully completed library school and are a freshly minted information professional. What is an exciting time in your life can also be overshadowed by what comes next: the dreaded job hunt, heightened by the fact that we are still struggling through the COVID-19 pandemic. Despite this being a challenging and unprecedented time to enter the workforce, there are still many exciting opportunities that await you. Here are some tips and words of advice that I hope are helpful and comforting as you navigate through this next phase of your career: 1) Manage your expectations but be kind to yourself First and foremost, job hunting can really suck. It’s important to acknowledge this and understand there will be periods of frustration, self-doubt, and worry (especially when we have bills to pay). This is normal! Rejection can be painful, and sending applications into that black hole where resumes seem to go can b[...]
: Keep FCRA in the foreground when the subject is background screening chundycz April 9, 2014 | 12:13AM Keep FCRA in the foreground when the subject is background screening By Lesley Fair When the talk turns to Big Data, part of the conversation is about all the public information available about people's lives – and how companies market it to prospective employers, landlords, etc. Two cases just announced by the FTC serve as a cautionary reminder to members of the industry that what they do may be subject to the long-standing consumer protections of the Fair Credit Reporting Act (FCRA) . InfoTrack, an Illinois company, and San Diego-based Instant Checkmate will be paying civil penalties to settle FTC lawsuits that they violated the FCRA. Is it time for an FCRA refresher at your business? Instant Checkmate marketed its reports as a way for prospective employers and landlords to investigate applicants. For example, the company advertised that one of the “GOOD REASONS to get instant criminal checks on anyo[...]
: BEREC Study trip to Japan yannick.stephan Tue, 03/11/2026 - 10:27 Latest News From 26 to 30 October, BEREC’s leadership visited Japan on a study trip aimed at strengthening international relations and exchanging experience with key partners from government, industry, research and academia. The delegation was led by BEREC Chair Marko Mismas (AKOS, Slovenia) and was made up of Vice-Chairs Alejandra de Ituarriaga (CNMC, Spain), Michel Van Bellinghen (BIPT, Belgium), Sarah Jacquier-Pelissier (Arcep, France), Giacomo Lasorella (AGCOM, Italy), Klaus Steinmaurer (RTR, Austria) and Robert Mourik (ComReg, Ireland). The representative of participants without voting rights, Milan Radulovic (EKIP, Montenegro), and the Director of the BEREC Office, Verena Weber, also joined the delegation. The visit was part of BEREC’s broader efforts to deepen dialogue with international stakeholders and to gather first-hand insight into developments in advanced digital and telecommunications markets. Japan, as a global leader in connec[...]