GDPR
General Data Protection Regulation · European Parliament / European Data Protection Board (EDPB) · Official site
EU regulation on data protection and privacy for all individuals within the European Union and European Economic Area. Compliance shaped by EDPB guidelines and enforcement decisions; 2026 coordinated enforcement focuses on transparency.
Timeline
The French Data Protection Authority (CNIL) issued an administrative fine of €300,000 to EXTIA on 21 July 2026 for breaches of Articles 12 and 17 of the GDPR concerning data subject rights. Of 265 er…
The French Data Protection Authority (CNIL) fined Hôpital Privé de la Loire 500,000 EUR for GDPR violations following a summer 2025 data breach that exposed the personal and health data of 524,867 pa…
The Data Protection Commission has issued a final decision against the Health Service Executive (HSE) following an inquiry into two unauthorised access incidents to paper medical records stored in ex…
The French Data Protection Authority (CNIL) fined MOBIUS SOLUTIONS LTD €1 million on 11 December 2025 following a data breach notification from DEEZER in November 2022 that exposed over 46 million us…
The CNIL fined NEXPUBLICA FRANCE €1.7 million for breaching Article 32 of the GDPR by failing to implement adequate technical and organizational security measures for its PCRM software used in social…
The CNIL issued combined fines of €42 million against FREE MOBILE and FREE following a January 2026 decision regarding an October 2024 data breach that exposed personal data of 24 million subscriber …
France Travail, a French public employment service, was fined €5 million by CNIL for inadequate technical and organisational security measures that failed to prevent a 2024 data breach. Hackers explo…
The EDPB issued a binding decision requiring the Belgian DPA to assess a complaint about VRT's cookie banners on its substantive merits instead of dismissing it on procedural grounds. The complaint, …
The European Data Protection Board has adopted three sets of guidelines: on anonymisation (with clarity on what constitutes anonymous data following CJEU ruling C-413/23 P), on web scraping in genera…
The European Data Protection Board (EDPB) and Anti-Money Laundering Authority (AMLA) are jointly developing guidelines to clarify information sharing practices under Article 75 of the AML Regulation,…
The European Commission proposes the Digital Omnibus Regulation to amend multiple EU digital laws including GDPR and the NIS 2 Directive, alongside repealing four outdated regulations. The proposal a…
The European Commission proposes amendments to GDPR and five other EU regulations to expand eligibility for existing SME relief measures to small mid-cap enterprises. The proposal aims to reduce the …
Monitoring
Watched by 3 official sources. Watching since 7 September 2026. Last checked 10 minutes ago.