Data Privacy

A Ventura fined €20M for GDPR infringement

The Spanish Data Protection Agency (AEPD) has initiated a sanctioning procedure against A VENTURA EN TRAMPOLINES S.L. for alleged infringements of the GDPR. The company has been fined €20 million and previously ordered to adapt its user consent form within one month, a deadline it failed to meet.

ICO v. DSG Retail - Data Protection Security Ruling

The UK's Information Commissioner's Office (ICO) has won a Court of Appeal case against DSG Retail Limited, reinstating a £500,000 fine for a 2020 data breach. The ruling clarifies that organisations must secure all personal data, regardless of whether individuals can be identified from exfiltrated data.

California AG Bonta Announces $2.75M Disney CCPA Settlement

California Attorney General Rob Bonta announced a $2.75 million settlement with The Walt Disney Company for alleged violations of the California Consumer Privacy Act (CCPA). The settlement resolves claims that Disney failed to fully honor consumer requests to opt-out of the sale or sharing of their personal data across all devices and services.

FTC Requires Boeing to Divest Spirit AeroSystems Assets

The FTC has finalized a consent order requiring Boeing to divest certain Spirit AeroSystems assets as part of its $8.3 billion acquisition. This action resolves antitrust concerns raised by the FTC regarding the merger. The final order was issued on February 17, 2026.

EDPB Report on Right to Erasure Enforcement

The European Data Protection Board (EDPB) has released a report detailing the outcomes of its Coordinated Enforcement Framework (CEF) action on the right to erasure under GDPR. The report identifies seven recurring challenges faced by controllers in implementing this right and offers recommendations for improvement.

FTC Finalizes Boeing-Spirit Acquisition Consent Order

The FTC has finalized a consent order regarding Boeing's acquisition of Spirit AeroSystems. The order requires Boeing to divest certain Spirit assets and continue supplying aerostructures to competing contractors for military aircraft programs. This action aims to protect competition in commercial and military aircraft markets.

EU Seeks Experts for Frontier AI Forum

The European Commission's AI Office is seeking experts for a new Forum on Frontier AI, part of the European Frontier AI Initiative. Interested parties, including AI developers, investors, and industrial actors, can express their interest via an application form until March 12, 2026.

ICO Decision on East Kent Hospitals FOI Complaint

The UK's Information Commissioner's Office (ICO) issued a decision regarding a complaint against East Kent Hospitals University NHS Foundation Trust concerning Freedom of Information (FOI) requests. The ICO partly upheld and partly dismissed aspects of the complaint, clarifying the Trust's obligations regarding staff governor information and meeting minutes.

ICO Orders Nottingham University Hospitals NHS Trust to Disclose Data

The UK's Information Commissioner's Office (ICO) has ordered Nottingham University Hospitals NHS Trust to disclose nurse and midwife referral data to the Nursing and Midwifery Council. The trust must comply within 30 days, or face potential contempt of court proceedings.

ICO Decision on Home Office Migration Data FOI Request

The UK's Information Commissioner's Office (ICO) has upheld the Home Office's decision to neither confirm nor deny holding information regarding cooperation with Turkey on migration programmes, citing Section 27(4) of the Freedom of Information Act. The ICO found no further action is required from the Home Office.