DLA Piper’s latest GDPR survey reveals a 22% surge in breach notifications — the first time daily figures have crossed 400 since GDPR came into force in 2018. After years of plateau, the trend has sharply reversed. The drivers? A…
After years of complaints about slow, fragmented GDPR enforcement, Brussels is finally moving. The Council of the EU and the European Parliament had agreed on new procedural rules to streamline how national Data Protection Authorities (DPAs) handle cross-border GDPR cases…
What Actually Changed Under the new framework: • Admissibility criteria are standardized across member states • Procedural timelines are clarified, reducing year-long investigations • Simplified settlements become possible without full cooperation mechanisms • DPAs are nudged toward consistency instead of…
€1.2B in GDPR fines issued across Europe in 2025, keeping pace with 2024 and bringing total fines since 2018 to ~€7.1B. Ireland and France led enforcement, together accounting for over €1B last year. But enforcement today is about more than…
On 13 January 2026, France’s data protection authority CNIL imposed a combined €42 million fine on Free Mobile (€27M) and Free (€15M) following a large-scale personal data breach. What Happened? In October 2024, attackers accessed personal data linked to ~24…
On 5 December 2025, the European Commission imposed a €120 million fine on X (formerly Twitter) for breaching key obligations under the EU Digital Services Act (DSA) — marking the first formal non-compliance decision under the regulation. Key Findings Misleading…
The GDPR enforcement regime is entering a new phase. On 16 June 2025, the European Parliament and the Council of the EU reached a provisional agreement on new procedural rules for cross-border data protection cases. The reform aims to fix…
Excerpt The European Court of Justice’s SRB decision deepens the meaning of “personal data” under GDPR — recognizing that data is relational, contextual, and civic in nature. As the boundary between private information and public infrastructure blurs, Europe is quietly…
The EU’s Financial Data Access Regulation (FiDA) is central to building an open finance ecosystem. It expands financial data sharing while safeguarding customer privacy through strict security and confidentiality requirements. FiDA covers a wide range of financial data types, including…
DORA Comes Into Effect On January 17, 2025, the EU Digital Operational Resilience Act (DORA) entered into force. It establishes a unified framework for ICT risk management in the financial sector, ensuring institutions can withstand, respond to, and recover from…
