A new dataset provides deep insights into the mechanisms of the data market and the vulnerability of personal data. The dataset, which was obtained by the media platform netzpolitik.org through a U.S. data broker, comprises 380 million location data points from 137 countries linked to approximately 40,000 apps.
Is the systematic collection of the form of address "Mr." or "Mrs." by a railroad company when purchasing tickets online with the GDPR compatible? The European Court of Justice addressed this question in its ruling of January 9, 2025 - and in doing so, focused primarily on the principle of Data minimization concentrated.
In Case T-354/22 (Bindl v. Commission), the General Court of the European Union (GCEU) ordered the European Commission to pay damages. The European Commission had personal data of a visitor to a website she operates to Facebook in the United States.
The central question was under what conditions a controller is liable for violations attributable to the actions of a processor or subprocessor. The broad interpretation of the term “participant” is likely to increase the liability risks for Responsible persons significantly increase.
The European data protection authorities also imposed fines in the millions in December 2024. One fine was imposed on Meta alone Fine in the amount of 251 million euros. The mobile communications group Orange was fined 50 million euros. And a fine of 15 million euros was imposed on the ChatGPT company.
ThinkTank is your knowledge platform for data protection and Compliance. Stay up to date with ThinkTank, benefit from best practices and improve your risk management by gaining insights into fine notices and court rulings. Specialist articles and checklists also support you in your daily work.
The Federal Financial Supervisory Authority (BaFin) has published a structured overview of the documentation requirements under the Digital Operational Resilience Act (DORA). With this guidance on DORA, BaFin aims to help financial institutions quickly navigate the various legal texts.
Ailance simplifies the Compliance of your company through automated reminders and alerts for various data protection tasks. For example, an automatic alert is generated every time a processing activity needs to be checked. Here is a brief overview of how you can effectively use workflows in Ailance RoPA.
The Cyber Resilience Act (CRA) is the first EU regulation to establish mandatory cybersecurity requirements for products with digital elements. The regulation entered into force on December 11, 2024. Companies now have three years to implement the requirements. Here’s what they should keep in mind right now.
Follow us on our social media channels as well:
Contact us
Phone: +1 (954) 852-1633
Mail: info@2b-advice.com
German German 
English
Italian
French
