The European Data Protection Board (EDPB) recently published a report on the implementation of the right of access under the GDPR. The report highlights the challenges and provides best practices that companies should consider when complying with the right of access.
The collecting society GEMA filed a lawsuit against Suno Inc. on January 21, 2025. GEMA accuses the US company of having processed protected recordings of well-known songs from GEMA's repertoire in the AI tool Suno without paying remuneration.
The GDPR defines the term "pseudonymization" for the first time in EU law and mentions it as a specific protective measure. Despite the legal definition, there have been uncertainties in the past regarding its implementation in practice. For this reason, the European Data Protection Board (EDPB) has published guidelines on pseudonymization to provide more clarity.
A new data set provides profound insights into the mechanisms of the data market and the vulnerability of personal data. The data set, which was obtained by the media platform netzpolitik.org via a US data trader, comprises 380 million location data from 137 countries, which are linked to around 40,000 apps.
Is the systematic collection of the form of address "Mr." or "Mrs." by a rail company when purchasing tickets online compatible with the GDPR? The European Court of Justice addressed this question in its ruling of 9 January 2025 - and focused primarily on the principle of data minimization.
In Case T-354/22 (Bindl v Commission), the European General Court (EGC) ordered the EU Commission to pay damages. The EU Commission had transferred personal data of a visitor to a website operated by it to Facebook in the USA.
The central question was under what conditions a controller is liable for infringements attributable to the actions of a processor or sub-processor. The broad interpretation of the concept of participation is likely to significantly increase the liability risks for controllers.
The European data protection authorities also imposed fines in the millions in December 2024. Meta alone was fined 251 million euros. The mobile communications group Orange was fined 50 million euros. And a fine of 15 million euros was imposed on the ChatGPT company.
ThinkTank is your knowledge platform for data protection and compliance. Stay up to date with ThinkTank, benefit from best practices and improve your risk management with insights into fines and court rulings. Specialist articles and checklists also support you in your daily work.
You can also follow us on our social media channels:
Phone: +1 (954) 852-1633
E-mail usa@2b-advice.com
English 
German 
Italian 
French