On March 31, 2025, the French Competition Authority (Autorité de la concurrence) fined Apple 150 million euros. The reason for the fine is the abuse of a dominant market position in the distribution of mobile apps on iOS and iPadOS devices between April 2021 and July 2023.
Anyone introducing biometric access systems should be careful: In Spain, the data protection authority AEPD has imposed a hefty fine on the Spanish soccer association LALIGA. Fine imposed, because before the use of fingerprint scanners no Data Protection Impact Assessment was carried out. Things got really expensive GDPR-Violations involving the Polish Postal Service.
The Federal Court of Justice has clarified that violations of data protection laws Duty to inform the GDPR can also constitute a breach of competition law - and can therefore be prosecuted under civil law by qualified institutions. This means that consumer protection associations can also take legal action against data protection violations.
The inadmissible Processing personal Health data in connection with the online distribution of medicinal products not only establishes a Infringement against the GDPRbut may also constitute an unfair commercial act within the meaning of Section 3a UWG. In these cases, competitors are entitled to injunctive relief under competition law.
On July 15, 2021, the Luxembourg data protection authority, the Commission Nationale pour la Protection des Données (CNPD), imposed a record fine of 746 million euros on Amazon Europe Core S.à r.l. The Administrative Court of Luxembourg upheld this decision in its entirety on March 18, 2025.
Is a police officer who carries out a database query without official cause a controller within the meaning of the General Data Protection Regulation (GDPR)? The Stuttgart Higher Regional Court has examined this question in detail - and has come to a clear conclusion. Why employee excess can be really expensive.
Customer database records contain personal information such as names, addresses, contact information, and purchase histories, which can be used for targeted customer outreach and personalized service. However, handling this data poses significant data protection risks. How to avoid common data protection risks—with a checklist.
In a recent decision, the Administrative Court clarified that the data protection requirements for cookie banners must be strictly adhered to and that there is no room for exceptions. The acceptance or rejection of Cookies must be equally possible.
Those without Consent contacted for advertising purposes can, of course, demand that they cease and desist. However, this does not automatically give rise to a claim for damages. As the Federal Court of Justice (BGH) clarifies, the Affected parties rather prove that the Infringement tangible damage has actually occurred.
Follow us on our social media channels as well:
Contact us
Phone: +1 (954) 852-1633
Mail: info@2b-advice.com
German German 
English
Italian
French
