The financial services provider American Express (Amex) has agreed to pay a total fine of approximately $230 million to settle legal disputes in the United States. Various regulatory agencies have accused the U.S. credit card company of, in particular, misleading sales practices targeting small businesses.
The European Data Protection Board (EDPB) recently published a report on the implementation of the right of access under the GDPR has been published. The report highlights the challenges and provides "best practices" that companies should observe when complying with the right to information.
On January 21, 2025, the copyright collective GEMA filed a lawsuit against Suno Inc. GEMA accuses the U.S. company of processing copyrighted recordings of well-known songs from GEMA’s repertoire in its AI tool, Suno, without paying any royalties.
In the GDPR the term "Pseudonymization" was defined for the first time in EU law and named as a specific protective measure. Despite the legal definition, there have been uncertainties in the past regarding implementation in practice. For this reason, the European Data Protection Board (EDPB) Guidelines to the Pseudonymization published, which is intended to provide greater clarity.
A new dataset provides deep insights into the mechanisms of the data market and the vulnerability of personal data. The dataset, which was obtained by the media platform netzpolitik.org through a U.S. data broker, comprises 380 million location data points from 137 countries linked to approximately 40,000 apps.
Is the systematic collection of the form of address "Mr." or "Mrs." by a railroad company when purchasing tickets online with the GDPR compatible? The European Court of Justice addressed this question in its ruling of January 9, 2025 - and in doing so, focused primarily on the principle of Data minimization concentrated.
In Case T-354/22 (Bindl v. Commission), the General Court of the European Union (GCEU) ordered the European Commission to pay damages. The European Commission had personal data of a visitor to a website she operates to Facebook in the United States.
The central question was under what conditions a controller is liable for violations attributable to the actions of a processor or subprocessor. The broad interpretation of the term “participant” is likely to increase the liability risks for Responsible persons significantly increase.
The European data protection authorities also imposed fines in the millions in December 2024. One fine was imposed on Meta alone Fine in the amount of 251 million euros. The mobile communications group Orange was fined 50 million euros. And a fine of 15 million euros was imposed on the ChatGPT company.
Follow us on our social media channels as well:
Contact us
Phone: +1 (954) 852-1633
Mail: info@2b-advice.com
German German 
English
Italian
French
