The Italian data protection authority Garante per la protezione dei dati personali has issued the US company Luka Inc. with a Fine in the amount of 5 million euros. The decision is remarkable not only because of the amount of the fine, but also because of its detailed examination of the challenges of generative AI systems and the protection of minors.
The Accessibility Enhancement Act (BFSG) implements EU Directive (EU) 2019/882, also known as the „European Accessibility Act“ (EAA). In particular, the law requires economic operators—such as manufacturers, retailers, and service providers—to comply with comprehensive accessibility requirements for digital products and services.
The Belgian Court of Appeals in Marktenhof has ruled that the Transparency- and the Transparency & Consent Framework (TCF) of the online advertising industry association IAB Europe as unlawful. The ruling could have an impact on the tracking-based Advertising have.
The EU Commission has officially informed TikTok that the platform could be in breach of key obligations under the Digital Services Act (DSA). The focus is on the so-called advertising repository. This is a database that TikTok must make available in order to provide transparent information about Advertising on the platform.
The U.S. state of Texas has reached a settlement with Google for $1.375 billion. The agreement, led by Attorney General Ken Paxton, represents the largest settlement amount to date for data privacy violations by a single U.S. state against Google.
In April 2025, there were Spanish Fine-Weeks: None other Regulatory Authority No other authority in the EU has imposed as many fines or as high fines as the Agencia Española de Protección de Datos (AEPD). The five highest fines issued in April were all imposed in Spain. Here is an overview of the violations:
10,000 euros in damages for a delayed response to a former employee’s request for information? The Duisburg Labor Court ordered a company to pay this surprisingly high sum—but was ultimately overruled by the Federal Labor Court (BAG): While the judges understood the frustration, they did not consider it sufficient grounds for awarding damages.
When is a Data Protection Impact Assessment (DSFA) Is it actually required, and how can typical use cases be designed to comply with data protection regulations? In this article, we provide practical answers to the most important questions regarding the DSFA requirement.
Compliance is of central importance for companies, as it not only guarantees legal certainty, but also forms the basis for ethical and sustainable business practices. A systematically established Compliance management serves to identify and implement these requirements and ensure that they are met on a permanent basis.
Follow us on our social media channels as well:
Contact us
Phone: +1 (954) 852-1633
Mail: info@2b-advice.com
German German 
English
Italian
French
