ICO v. DSG Retail - Data Protection Security Ruling
The UK's Information Commissioner's Office (ICO) has won a Court of Appeal case against DSG Retail Limited, reinstating a £500,000 fine for a 2020 data breach. The ruling clarifies that organisations must secure all personal data, regardless of whether individuals can be identified from exfiltrated data.
California AG Bonta Announces $2.75M Disney CCPA Settlement
California Attorney General Rob Bonta announced a $2.75 million settlement with The Walt Disney Company for alleged violations of the California Consumer Privacy Act (CCPA). The settlement resolves claims that Disney failed to fully honor consumer requests to opt-out of the sale or sharing of their personal data across all devices and services.
FTC Requires Boeing to Divest Spirit AeroSystems Assets
The FTC has finalized a consent order requiring Boeing to divest certain Spirit AeroSystems assets as part of its $8.3 billion acquisition. This action resolves antitrust concerns raised by the FTC regarding the merger. The final order was issued on February 17, 2026.
EDPB Report on Right to Erasure Enforcement
The European Data Protection Board (EDPB) has released a report detailing the outcomes of its Coordinated Enforcement Framework (CEF) action on the right to erasure under GDPR. The report identifies seven recurring challenges faced by controllers in implementing this right and offers recommendations for improvement.