Enforcement

First settlement under DOJ cyber fraud initiative hints at more to come

Lawyers say the US Department of Justice and federal regulators are increasingly investigating companies’ cybersecurity measures.

08 April 2022

Hamburg puts Google on notice over faulty cookie banners

Hamburg’s data regulator has warned Google that cookie banners on its search engine and YouTube do not comply with data protection law.

08 April 2022

Danish regulator imposes record GDPR fine

Denmark’s data protection authority has recommended a 10 million kroner (€1.3 million) fine for the country’s largest bank for failing to properly document that it had deleted the personal data of its customers in compliance with the GDPR, after the bank self-reported the breaches.

05 April 2022

Estonia bans Yandex over Russian data sharing

The Estonian government has imposed sanctions on ride-hailing services provided by Russia’s largest internet company because it is forced to share personal data with Russian authorities, and urged the European Union to follow suit.

04 April 2022

Dutch court upholds DPA’s right not to investigate

A Dutch court has ruled in favour of the country’s data protection authority’s decision not to take on a case due to lack of broader relevance and insufficient resources.

01 April 2022

DMA will be a challenge for EU courts, General Court president admits

The president of the EU’s General Court has said his main concern about the Digital Markets Act is how the EU courts are going to “deliver fast enough” on the amount of litigation that is likely to arise.

01 April 2022

ECJ advocate-general weighs in on purpose limitation

An EU advocate-general has argued that personal data processing for the purpose of fixing a technical fault was justified under the GDPR, despite data subjects not being notified – but has said the information should not be stored for an excessive amount of time.

31 March 2022

Facebook fan pages face German ban

Public bodies in Germany will be made to deactivate their Facebook fan pages after a report found that sites violated laws on cookies and the GDPR.

30 March 2022

Klarna fined for GDPR breaches

Sweden’s data protection authority has fined ‘buy now, pay later’ company Klarna 7.5 million kronor (€726,330) for failings in its privacy notice – but the company has said it intends to appeal.

29 March 2022

EDPS says Europol enforcement “wasn’t a good decision”

The European Data Protection Supervisor has appeared to criticise his office’s recent enforcement action against Europol.

24 March 2022

Get unlimited access to all Global Data Review content