New Episode: The IDPC Podcast – GDPR and data processing 01 April 2026 In the latest episode of the Information and Data Protection Commissioner (IDPC) Podcast series, we continue our journey into the world of data protection by exploring one of the most fundamental aspects of the GDPR – data processing. Hosted by Franco […]
2025 global privacy sweep examined websites and apps used by children 25 March 2026 This year’s annual Global Privacy Enforcement Network (GPEN) Sweep examined how online services protect children’s privacy. This exercise replicated a children’s privacy sweep that was conducted in 2015 with the purpose of comparing how online services protected children then and […]
A police authority may, in a criminal investigation, collect biometric data solely on the ground that that collection is strictly necessary 25 March 2026 In a recent ruling, the EU Court of Justice stated that the gathering of identification data may not be required systematically and clear reasons must be given for it, failing […]
A request for access to one’s own personal data may be considered abusive and refused if it is made for the sole purpose of subsequently claiming compensation for an alleged infringement of the GDPR 25 March 2026 The EU Court of Justice ruled that even a first request for access to personal data may […]
EDPB and EDPS support strengthening EU’s cybersecurity and easing compliance while protecting individuals’ personal data 19 March 2026 The European Data Protection Board (EDPB) and the European Data Protection Supervisor (EDPS) have adopted a Joint Opinion on the European Commission’s proposal for a Cybersecurity Act 2 (CSA2) and the proposal on amendments to the Network […]
Launch of Coordinated Enforcement Framework 2026 – IDPC 19 March 2026 The Information and Data Protection Commissioner (IDPC) is participating in the fifth European Data Protection Board’s (EDPB) Coordinated Enforcement Action on compliance with the obligations of transparency and information under the General Data Protection Regulation (GDPR). The GDPR requires that individuals are informed […]
EDPB and EDPS support harmonisation of clinical trials under European Biotech Act, but call for specific safeguards for sensitive health data 12 March 2026 The European Data Protection Board (EDPB) and the European Data Protection Supervisor (EDPS) have adopted a Joint Opinion on the European Commission’s Proposal for a European Biotech Act. The Proposal […]
Italy’s Data Protection Authority orders Amazon to stop record-keeping of workers’ personal data 04 March 2026 The Italian Data Protection Authority (Garante per la protezione dei dati personali) has ordered Amazon Italia Logistica to immediately stop processing the personal data of more than 1,800 employees at its Passo Corese (RI) site. […]
New Episode: The IDPC Podcast – the Digital Omnibus & EDPB-EDPS joint opinion 23 February 2026 The sixth episode in the podcast series organised by the Information and Data Protection Commissioner (IDPC) is now available. In this episode, we explore one of the most widely discussed EU digital policy developments of the moment — […]
International Data Protection Authorities Issue Joint Statement on Privacy Risks of AI-Generated Imagery 23 February 2026 Data protection authorities from across the globe have today published a Joint Statement on AI-Generated Imagery (the “Statement”). The Statement represents the united position of 61 authorities and has been issued in response to serious concerns about artificial […]