According to DLA Piper's GDPR Fines and Data Breach Survey 2025, last year's EU General Data Protection Regulation fines totaled 1.2 billion euros. The survey explored developing enforcement trends and "the dawn of personal liability" for company executives.Full story
The U.S. Federal Trade Commission fined game developer Cognosphere USD20 million for, among other claims, allegations of insufficient parental notice and consent around children's data collection under the Children's Online Privacy Protection Act Rule.
Poland's data protection authority, the Urząd Ochrony Danych Osobowych, fined Toyota Bank Polska PLN576,220 for failing to register data profiling in its list of data processing activities and not hiring an independent data protection officer. With the DPO claims, the UODO alleged the bank's data protection contact worked in an adjacent department and "did not report directly to the bank's top management."Full story
A long-running lawsuit in the U.K. brought by British Prince Harry against The Sun newspaper and the shuttered News of the World for allegedly intercepting his voicemails heads to trial, BBC News reports. This is the first instance News Group Newspapers, the parent company of The Sun, has had to face claims its subsidiary publications engaged in systemic hacking of Prince Harry's communications, which was discovered in 2006.Full story
The Irish Times reports Meta filed an appeal with Ireland's High Court to overturn a 91 million euro fine the country's Data Protection Commission imposed for improperly storing user passwords. The company argued the DPC levied a penalty disproportionate to the infraction.Full story
Latvia's State Data Inspectorate released guidelines on the minimum required data protection standards startups need to follow. The resources include a compliance checklist, a guide on effective data protection and access to learning materials.Full story
The U.S. Federal Trade Commission released preliminary findings from its surveillance pricing study, detailing decades of companies' collection and sale of consumer data and the effect advertising technology has on consumer data protection. The agency discussed the "roots of information markets and early data brokers" and what a potential path forward on enforcement might look like.
IAPP Managing Director, Washington, D.C., Cobun Zweifel-Keegan, CIPP/US, CIPM, offers his take on the latest privacy and AI governance developments in the nation's capital and around the U.S. This week, he digs into the U.S. Federal Trade Commission's finalized amendments to the Children's Online Privacy Protection Act Rule.Full story
The U.S. Supreme Court ruled in favor of the law banning social platform TikTok in the U.S. if it does not divest from its Chinese parent company by 19 Jan., NPR reports.
The European Data Protection Board adopted new guidelines for pseudonymization during its latest plenary meeting 16 Jan. and opened a public consultation until 28 Feb.