GDPR
Filter by...
-
Greek Ministry of Asylum and Migration face a record-breaking €175,000 fine for the border management systems KENTAUROS & HYPERION
On 3 April, the Greek Data Protection Authority (DPA) slapped the Ministry of Asylum and Migration with a record-breaking €175,000 fine under the General Data Protection Regulation for the border management systems KENTAUROS and HYPERION. The DPA’s investigation started back in 2022, following a strategic complaint filed by the EDRi member Homo Digitalis and its partners in Greece.
Read more
-
Europe’s highest court delivers landmark judgment against IAB Europe in GDPR consent spam pop-ups case
The Court of Justice of the European Union's landmark decision on March 7, 2023, against the auctioning of personal data for advertising purposes under the General Data Protection Regulation (GDPR) challenges the legality of invasive tracking and profiling in the context of online advertising. It marks a significant victory for privacy advocates and sets a precedent for the protection of personal data in the digital era.
Read more
-
Open letter: Digital rights advocates unite against Meta’s “Pay or Okay”. Privacy and data protection are NOT for sale
In response to three Data Protection Authorities (DPAs) requesting a European Data Protection Board (EDPB) opinion on Meta's 'Pay or Consent' approach, Access Now, the EDRi office and other EDRi members have united in an open letter urging the Board to reject these subscription-based approaches unequivocally.
Read more
-
The privacy saga with Norwegian Social Service continues
We promised you an update to Janne Cecilie Thorenfeldt’s case taking the Norwegian Labour and Welfare Administration (NAV) on the European Court of Human Rights (ECHR). Since EDRi member Elektronisk Forpost Norge (EFN) reported about the massive GDPR violations of the Service, here is what happened.
Read more
-
GDPR enforcement: European Parliament must guarantee procedural rights to ensure people’s data protection
While it is a step forward in better enforcing the General Data Protection Regulation (GDPR), the European Parliament’s current GDPR Procedural Harmonisation Regulation text is still not enough to safeguard the fundamental rights of people. Today, February 15, the text was approved in the Committee for Civil Liberties, Justice and Home Affairs (LIBE), laying out the blueprints for enhanced procedures for cross-border GDPR complaints and ex-officio investigations.
Read more
-
Norwegian Social Service guilty of massive GDPR violations
Janne Cecilie Thorenfeldt, living in Norway, discovered that her employer which is also the Norwegian Social Service violated her data protection rights. So she took them to court. Read on to learn what happened.
Read more
-
The UK data bridge: a sneak peek at the UK privacy race to the bottom to come
The UK extension to the EU – US Transatlantic Data Privacy Framework will come into force on 12 October. Its adoption provides a sneak peek at the future of UK international data transfers, and the erosion of essential guarantees against surveillance measures that the UK data protection reform would bring.
Read more
-
Meta pledges to ask EU users for consent before showing behavioural ads
In a surprise announcement last Tuesday, Meta made the long overdue promise to finally ask its users for their consent before showing them behavioral ads – at least if they live in the European Union, EEA or Switzerland.
Read more
-
Spotify gets fine of € 5 Million for GDPR violations
Following an EDRi member noyb complaint and litigation over inactivity, the Swedish Data Protection Authoirty (IMY) has issued a fine of 58 Mln Swedish Crown (about € 5 Million) against Spotify.
Read more
-
Guarding health data privacy in Europe: The limits and challenges of current regulations
The GDPR demonstrates the capacity of the European Union to prioritise data protection and privacy. The collection and use of health data by private corporations makes privacy protections critically important. Taken together, the provided policy recommendations here create comprehensive steps forward.
Read more
-
Open letter: Improvements to the enforcement of the General Data Protection Regulation
EDRi has signed an open letter organised by consumer and civil society organisations to welcome the intention of the European Commission to improve the enforcement of the General Data Protection Regulation. We call on the Commission to ensure that the draft Regulation improves the efficiency of enforcement and ensures data subjects can exercise their rights in a fair, effective, and affordable manner.
Read more
-
Sex, religion and race are advertising taboos, except for power-hungry politicians
As the GDPR turns five, certain EU lawmakers want to rip out some of its protections, so they can use our deeply personal information to tailor political ads and tip political elections and campaigns in their favour.
Read more