The Dutch Data Protection Authority, together with regulators from Finland and Norway, imposed a €100 million GDPR fine on Yango’s operator MLU B.V. for allegedly transferring EU user data to Russia without adequate safeguards. Regulators said the company failed to…
Two Chinese State Council decrees entered into force on April 7, 2026 — with no transition period, no grace period, and no implementing guidelines. For any organization subject to EU law that maintains commercial relationships with Chinese entities, these regulations…
South Korea just delivered a clear signal: data retention failures + weak security + delayed response = one enforcement event The Personal Information Protection Commission (PIPC) fined matchmaking company Duo after a cyberattack exposed 420,000+ users’ data, including highly sensitive…
The U.S. privacy legislative landscape continues to evolve rapidly in 2026, with new state laws entering into force and additional bills moving through state legislatures. Rather than a single nationwide framework, the United States is increasingly characterized by a multi-layered…
Nigeria’s data protection regime has entered a firm enforcement phase. Under the Nigeria Data Protection Act 2023 (NDPA), the Nigeria Data Protection Commission (NDPC) is actively escalating oversight — making clear that compliance is now mandatory and enforceable. GAID as…
DLA Piper’s latest GDPR survey reveals a 22% surge in breach notifications — the first time daily figures have crossed 400 since GDPR came into force in 2018. After years of plateau, the trend has sharply reversed. The drivers? A…
What Actually Changed Under the new framework: • Admissibility criteria are standardized across member states • Procedural timelines are clarified, reducing year-long investigations • Simplified settlements become possible without full cooperation mechanisms • DPAs are nudged toward consistency instead of…
After years of uncertainty, Egypt has finally issued the Executive Regulations under its Personal Data Protection Law (PDPL) — and the compliance clock is now ticking. Compliance Deadline: 31 October 2026 What This Means for Businesses • Licensing is no…
On 13 January 2026, France’s data protection authority CNIL imposed a combined €42 million fine on Free Mobile (€27M) and Free (€15M) following a large-scale personal data breach. What Happened? In October 2024, attackers accessed personal data linked to ~24…
On 22 Nov 2025, China issued draft regulations imposing enhanced privacy and security obligations on large online platforms. Who Counts as a “Large Platform”? • At least 50M registered users, or • At least 10M MAU, or • Platforms providing important…
