The GDPR defines the term "pseudonymization" for the first time in EU law and mentions it as a specific protective measure. Despite the legal definition, there have been uncertainties in the past regarding its implementation in practice. For this reason, the European Data Protection Board (EDPB) has published guidelines on pseudonymization to provide more clarity.
A new data set provides profound insights into the mechanisms of the data market and the vulnerability of personal data. The data set, which was obtained by the media platform netzpolitik.org via a US data trader, comprises 380 million location data from 137 countries, which are linked to around 40,000 apps.
Is the systematic collection of the form of address "Mr." or "Mrs." by a rail company when purchasing tickets online compatible with the GDPR? The European Court of Justice addressed this question in its ruling of 9 January 2025 - and focused primarily on the principle of data minimization.
In Case T-354/22 (Bindl v Commission), the European General Court (EGC) ordered the EU Commission to pay damages. The EU Commission had transferred personal data of a visitor to a website operated by it to Facebook in the USA.
The central question was under what conditions a controller is liable for infringements attributable to the actions of a processor or sub-processor. The broad interpretation of the concept of participation is likely to significantly increase the liability risks for controllers.
The European data protection authorities also imposed fines in the millions in December 2024. Meta alone was fined 251 million euros. The mobile communications group Orange was fined 50 million euros. And a fine of 15 million euros was imposed on the ChatGPT company.
ThinkTank is your knowledge platform for data protection and compliance. Stay up to date with ThinkTank, benefit from best practices and improve your risk management with insights into fines and court rulings. Specialist articles and checklists also support you in your daily work.
The German Federal Financial Supervisory Authority (BaFin) has published a structured overview of the documentation requirements of the Digital Operational Resilience Act (DORA). With this guidance for DORA, BaFin wants to help financial companies to quickly find their way around the various legal texts.
Ailance simplifies your organization's compliance with automated reminders and alerts for various data protection tasks. An automated alert is generated every time a processing activity needs to be reviewed. Here is a brief overview of how you can effectively use workflows in Ailance RoPA.
You can also follow us on our social media channels:
Phone: +1 (954) 852-1633
E-mail usa@2b-advice.com
English 
German 
Italian 
French