Excerpt The European Court of Justice’s SRB decision deepens the meaning of “personal data” under GDPR — recognizing that data is relational, contextual, and civic in nature. As the boundary between private information and public infrastructure blurs, Europe is quietly…
The EU’s Financial Data Access Regulation (FiDA) is central to building an open finance ecosystem. It expands financial data sharing while safeguarding customer privacy through strict security and confidentiality requirements. FiDA covers a wide range of financial data types, including…
DORA Comes Into Effect On January 17, 2025, the EU Digital Operational Resilience Act (DORA) entered into force. It establishes a unified framework for ICT risk management in the financial sector, ensuring institutions can withstand, respond to, and recover from…
On June 27, 2025, the Berlin Commissioner for Data Protection issued a formal notice to Apple and Google: remove the AI chatbot DeepSeek from their app stores in Germany—or face consequences. Why? Violations of GDPR and unlawful international data transfers to China without required safeguards. Here’s the…
The Irish Data Protection Commission just fined TikTok €530 million for unlawful data transfers to China and transparency violations. Key Findings: Weak safeguards for cross-border data flows Inadequate transparency under GDPR Conflicting claims about data storage This landmark ruling is…
France’s Competition Authority (Autorité de la Concurrence) has imposed a €150 million fine on Apple for restricting third-party apps and advertisers from collecting user personal data through its implementation of the App Tracking Transparency (ATT) framework. The ATT framework, a privacy…
