Data Protection

AEPD Rejects TALENTO MOTOR S.L. Appeal

The Spanish Data Protection Agency (AEPD) has rejected an appeal filed by TALENTO MOTOR S.L. against a prior resolution. The appeal was deemed inadmissible due to being filed outside the legal time limit. This decision upholds the original resolution from November 23, 2025.

ICO Commissioner's Speech on Data Protection and ICO Governance

The UK Information Commissioner, John Edwards, delivered a speech reflecting on his tenure and the ICO's adaptation to data protection changes, including the upcoming Data (Use and Access) Act and new governance structure. The speech highlighted the ICO's efforts to provide clarity and certainty amidst evolving technological and legal landscapes.

Spanish DPA Resolution on Voluntary Payment

The Spanish Data Protection Agency (AEPD) has issued a resolution initiating a sanctioning procedure against EMPRESA.1 for alleged data protection violations. The case involves a complaint regarding the improper acquisition and use of personal data for a contract. The resolution details the initial findings and the company's response.

ICO Fines Reddit £14.47m for Children's Privacy Failures

The UK's Information Commissioner's Office (ICO) has fined Reddit £14.47 million for failing to protect the personal information of children. The investigation found serious failures in age assurance, meaning Reddit unlawfully processed the data of children under 13.

AEPD Resolution on Rights Procedure and Labor Dispute

The Spanish Data Protection Agency (AEPD) has issued a resolution regarding a data rights procedure initiated on June 2, 2025. The case involves a former employee's claims against FENG SHENG SUSHI, S.L. concerning alleged falsification of a labor contract, denial of access to personal data, and improper use of banking information.

International Data Protection Authorities Joint Statement on AI Imagery Risks

Sixty-one international data protection authorities have issued a joint statement outlining privacy risks associated with AI-generated imagery. The statement addresses concerns about the creation of realistic images and videos of individuals without consent, particularly highlighting potential harms to children. It urges responsible AI development and deployment.

Garante Privacy Sanctions eCampus, Rejects Pescara Body Cams

The Italian Data Protection Authority (Garante Privacy) has sanctioned the University eCampus with a €50,000 fine for unlawfully processing biometric data using facial recognition for online course attendance verification. Additionally, the Garante has prohibited the municipality of Pescara from using body cameras for local police due to risks of data transfer to non-EU countries.

A Ventura fined €20M for GDPR infringement

The Spanish Data Protection Agency (AEPD) has initiated a sanctioning procedure against A VENTURA EN TRAMPOLINES S.L. for alleged infringements of the GDPR. The company has been fined €20 million and previously ordered to adapt its user consent form within one month, a deadline it failed to meet.

ICO v. DSG Retail - Data Protection Security Ruling

The UK's Information Commissioner's Office (ICO) has won a Court of Appeal case against DSG Retail Limited, reinstating a £500,000 fine for a 2020 data breach. The ruling clarifies that organisations must secure all personal data, regardless of whether individuals can be identified from exfiltrated data.

ICO Decision on Withholding Land Contamination Report

The UK's Information Commissioner's Office (ICO) has issued a decision upholding Cheshire West and Chester Council's decision to withhold a land contamination report. The ICO found the information could be legitimately withheld under environmental information regulations.