Data Protection Day, which is celebrated annually on January 28, provides an important opportunity to draw attention to the importance of data protection. This year, the focus is particularly on the use of artificial intelligence (AI), as this technology presents both opportunities and significant risks for the protection of personal data.
If an error occurs when redacting documents or images, there is almost certainly a data protection breach. Which sources of error occur particularly frequently in practice and how redaction can be implemented in compliance with the GDPR.
The financial services provider American Express (Amex) has accepted a total fine of around 230 million dollars to settle legal disputes in the USA. The US credit card group is accused by various supervisory authorities of misleading sales practices towards small businesses in particular.
The European Data Protection Board (EDPB) recently published a report on the implementation of the right of access under the GDPR. The report highlights the challenges and provides best practices that companies should consider when complying with the right of access.
The collecting society GEMA filed a lawsuit against Suno Inc. on January 21, 2025. GEMA accuses the US company of having processed protected recordings of well-known songs from GEMA's repertoire in the AI tool Suno without paying remuneration.
The GDPR defines the term "pseudonymization" for the first time in EU law and mentions it as a specific protective measure. Despite the legal definition, there have been uncertainties in the past regarding its implementation in practice. For this reason, the European Data Protection Board (EDPB) has published guidelines on pseudonymization to provide more clarity.
A new data set provides profound insights into the mechanisms of the data market and the vulnerability of personal data. The data set, which was obtained by the media platform netzpolitik.org via a US data trader, comprises 380 million location data from 137 countries, which are linked to around 40,000 apps.
Is the systematic collection of the form of address "Mr." or "Mrs." by a rail company when purchasing tickets online compatible with the GDPR? The European Court of Justice addressed this question in its ruling of 9 January 2025 - and focused primarily on the principle of data minimization.
In Case T-354/22 (Bindl v Commission), the European General Court (EGC) ordered the EU Commission to pay damages. The EU Commission had transferred personal data of a visitor to a website operated by it to Facebook in the USA.
You can also follow us on our social media channels:
Phone: +1 (954) 852-1633
Mail: info@2b-advice.com
English 
German 
Italian 
French