NewsThe Irish Data Protection Commission fines Google 403 000 000 EUR following Inquiry into Google’s processing of location data
23 September 2026Background informationDate of final decision: 21 September 2026National caseLegal Reference(s): Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and...
Learn more NewsThe Spanish DPA fined Securitas Direct 100 000 EUR for making the exercise of data subject rights more difficult by directing individuals to a chargeable telephone number
22 September 2026Background informationDate of final decision: 1 February 2023National caseController: SECURITAS DIRECT, S.A.Legal Reference(s): Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)Decision:...
Learn more NewsEDPB harmonises fining methodology and adopts final DSA-GDPR guidelines
21 September 2026Brussels, 21 September – During its latest plenary, the EDPB has adopted guidelines on the application of the power to impose administrative fines in relation to other corrective powers under...
Learn more NewsFailure to respect the rights of individuals: The CNIL fined EXTIA 300 000 EUR
11 September 2026Background informationDate of final decision: 21 July 2026National caseLegal Reference(s): Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 17 (Right...
Learn more NewsHealth data breach: the CNIL fined Hôpital Privé de la Loire 500 000 EUR
09 September 2026Background informationDate of final decision: 3 September 2026National caseController: Hôpital Privé de la LoireLegal Reference: Article 32 (Security of processing), Article 34 (Communication of a personal data breach to the...
Learn more