: Brussels, 27 April – Today marks the 10th anniversary of the GDPR’s adoption, the first comprehensive dataprotection framework spanning an entire continent, establishing clear rights for individuals and obligations for organisations across Europe. The moment that led to the creation of the EDPB The GDPR led to the establishment of the European DataProtection Board (EDPB) on 25 May 2018, replacing the Article 29 Working Party that was previously in charge of dealing with issues relating to the protection of personal data. The GDPR gave the DataProtection Authorities (DPAs) stronger enforcement powers and expanded the scope of their work from focusing mainly on national compliance complaints to routinely dealing with cross-border cases. In the past 10 years, the 31 European DPAs comprising the EDPB have worked together to ensure the consistent enforcement of the GDPR and a harmonised dataprotection approach across Europe. A key role in an evolving digital landscape Today, the GDPR is part of a broader an[...]
: Brussels, 09 April - The European DataProtection Board (EDPB) has published its 2025 Annual Report . The report provides an overview of the EDPB work carried out in 2025 and reflects on important milestones, such as the adoption of the Helsinki Statement on Enhanced Clarity, Support, and Engagement . “In 2025, we saw the dataprotection landscape change significantly. The rapid expansion of the EU’s digital regulatory framework has added complexity to the dataprotection ecosystem. To help organisations navigate this complexity and support compliance, the EDPB focused on enhancing legal certainty, making compliance more achievable in practice, and strengthening cooperation, both among DataProtection Authorities and with other regulators. We also prioritised meaningful dialogue with stakeholders to ensure our work reflected real-world needs. Our achievements support economic growth while continuing to protect individuals’ fundamental rights to privacy and dataprotection.” EDPB Chair, Anu Talus The Hel[...]
: Brussels, 28 November - The EDPB launched a call for expression of interest to establish a new reserve list for the Support Pool of Experts (SPE) programme . The objective is set up a reserve list of legal and technical experts. The legal expertise sought includes a wide range of fields, such as dataprotection, policy monitoring, technology, cybersecurity, competition, healthcare, online intermediary services and content moderation . As for the technical expertise , the relevant areas include IT auditing, website security, mobile OS and apps, Internet of Things, cloud-computing, behavioural advertising, anonymisation techniques, cryptology, artificial intelligence, User experience (UX) design, fintech , data science, social science (incl. economics, sociology, psychology), and development of applications and software . Bring your expertise to the table Don’t miss this opportunity to participate in this EDPB’s key strategic initiative. Your work will help DataProtection Authorities (DPAs) across Europe incr[...]
: Federal Trade Commission Chairman Andrew N. Ferguson today announced he has appointed Taylor C. Hoogendoorn as Deputy Director of the Bureau of Competition and Katherine White as Deputy Director of the Bureau of Consumer Protection. Hoogendoorn is a talented litigator with expertise in a wide range of litigation, including antitrust, tort, contractual, energy, and intellectual property matters. Hoogendoorn joins the FTC after spending time in private practice at a law firm in Houston. He clerked for the Hon. Samuel A. Alito Jr. on the Supreme Court of the United States; the Hon. Gregory G. Katsas on the United States Court of Appeals for the D.C. Circuit; and the Hon. J. Harvie Wilkinson III on the United States Court of Appeals for the Fourth Circuit. Hoogendoorn holds a J.D. from Yale Law School, where he won the Morris Tyler Moot Court of Appeals and served on the Yale Law Journal, and a B.B.A. with majors in Economics, Finance, Mathematics, and Business Fellows from Baylor University. While at Baylor, h[...]
: Brussels, 20 January - The European DataProtection Board (EDPB) has adopted a report on the implementation of the right of access by controllers . The report summarises the outcome of a series of coordinated national actions carried out in 2024 under the Coordinated Enforcement Framework (CEF). It lists the issues that were observed for some controllers, along with a series of recommendations to help them implement the right of access. A central element is controllers’ awareness of the EDPB Guidelines 01/2022 on data subjects rights – Right of access and whether these guidelines were followed in practice. EDPB Deputy Chair Zdravko Vukíc said: “The CEF is a valuable initiative that helps strengthen the cooperation among DataProtection Authorities (DPAs): by tackling selected topics in a coordinated fashion, they achieve greater efficiency and more consistency. How controllers implement the right of access lies at the heart of dataprotection and it is one of the most frequently exercised data subject rights[...]
: Practice Fusion case suggests 6 health privacy pointers lfair June 8, 2016 | 9:01AM Practice Fusion case suggests 6 health privacy pointers By Lesley Fair Combine two of the most talked-about consumer protection topics – health privacy and consumer-generated online content – and what do you get? A proposed FTC settlement with Practice Fusion, the largest cloud-based electronic health records company in the country, and six compliance tips for others in the industry. One of San Francisco-based Practice Fusion’s primary products is an electronic records system for outpatient providers. In 2009, the company launched “Patient Fusion,” an online portal where patients whose providers were already using Practice Fusion could view or download their health information or transmit it to another provider. Patient Fusion also let patients send and receive secure messages from their providers. Fast forward several years and the company decided to expand Patient Fusion to include a public directory where current and prosp[...]
: New data from the Federal Trade Commission reveal that people reported losing a staggering $3.5 billion to imposter scams in 2025, with reported losses increasing nearly three times since 2020. FTC data also show that people reported imposter scams more than any other fraud category in 2025—nearly one in three fraud reports were about imposter scams. These scams lured consumers through text, phone, email, social media, search engine results and other means. Some of the costliest impersonation scams start with a fake security alert, often from a bank. People are convinced to move money to “protect” it, with their losses often limited only by their available funds. Last year, people reported losing nearly $1 billion to business impersonators with the highest reported losses to bank impersonators—and about $920 million to government impersonators, up from $866 million and $789 million respectively in 2024. The FTC has seen a striking increase in reported fraud losses to all types of fraud—about $16 billion was [...]