A new data set provides profound insights into the mechanisms of the data market and the vulnerability of personal data. The data set, which was obtained by the media platform netzpolitik.org via a US data trader, comprises 380 million location data from 137 countries, which are linked to around 40,000 apps.
Is the systematic collection of the form of address "Mr." or "Mrs." by a rail company when purchasing tickets online compatible with the GDPR? The European Court of Justice addressed this question in its ruling of 9 January 2025 - and focused primarily on the principle of data minimization.
In Case T-354/22 (Bindl v Commission), the European General Court (EGC) ordered the EU Commission to pay damages. The EU Commission had transferred personal data of a visitor to a website operated by it to Facebook in the USA.
The central question was under what conditions a controller is liable for infringements attributable to the actions of a processor or sub-processor. The broad interpretation of the concept of participation is likely to significantly increase the liability risks for controllers.
The European data protection authorities also imposed fines in the millions in December 2024. Meta alone was fined 251 million euros. The mobile communications group Orange was fined 50 million euros. And a fine of 15 million euros was imposed on the ChatGPT company.
ThinkTank is your knowledge platform for data protection and compliance. Stay up to date with ThinkTank, benefit from best practices and improve your risk management with insights into fines and court rulings. Specialist articles and checklists also support you in your daily work.
The German Federal Financial Supervisory Authority (BaFin) has published a structured overview of the documentation requirements of the Digital Operational Resilience Act (DORA). With this guidance for DORA, BaFin wants to help financial companies to quickly find their way around the various legal texts.
Ailance simplifies your organization's compliance with automated reminders and alerts for various data protection tasks. An automated alert is generated every time a processing activity needs to be reviewed. Here is a brief overview of how you can effectively use workflows in Ailance RoPA.
The Cyber Resilience Act (CRA) is the first EU legislation to lay down binding cybersecurity requirements for products with digital elements. The regulation came into force on December 11, 2024. Companies now have three years to implement the requirements. What they should consider now.
You can also follow us on our social media channels:
Phone: +1 (954) 852-1633
E-mail usa@2b-advice.com
English 
German 
Italian 
French