GDPR Simplification Proposal: Reducing Burden or Weakening Protection?
In May 2025, the European Commission published a proposal that has sparked considerable debate within the data protection community. As part of its Fourth Omnibus … Read more
Enforcement
German data protection regulator issues €9.5m fine for security failings
The German Federal Commissioner for Data Protection and Freedom of Information (BfDI) has issued 1&1 Telecom with a €9,550,000 fine for security failings (English translation) in … Read more
Latvian “ICO” issues €7k fine for right of erasure failing
The Latvian Data Protection Authority (the Data State Inspectorate of Latvia (DSI)) has issued a fine of €7000 to an online retailer for non-conformity with … Read more
Greek DPA -v- PwC highlights consent not suitable lawful basis for employee data
The Greek equivalent of the ICO have issued a €150,000 fine of PwC for having the wrong lawful basis for processing for their employee’s data. … Read more
First GDPR fine from Romanian data protection authority
The Romanian National Supervisory Authority (the Romanian equivalent of the UK’s ICO) has issued its first GDPR fine. They have fined Unicredit Bank €130,000 for … Read more
ICO intends to fine BA and Marriott (£183m and £99m)
This week the ICO has published statements on its intentions to fine British Airways £183m and Marriott Hotels £99m for breaches of GDPR. But before … Read more
ICO fines FlyBe and Honda over direct marketing issues
The ICO have issued a couple of fines relating to direct marketing offences. Of most interest will be the Honda fine. Honda contacted a number … Read more