Meta to Use Facebook and Instagram Personal Data for AI Training – GDPR rights and considerations 22 April 2025 Background From the end of May 2025, Meta (the parent company of Facebook and Instagram) plans to use data shared by adult users in Europe—including posts, photos, and comments, past and future—to train its artificial intelligence […]
EDPB adopts guidelines on processing personal data through blockchains and is ready to cooperate with AI office on guidelines on AI Act and EU data protection law 15 April 2025 During its April 2025 plenary, the European Data Protection Board (EDPB) has adopted guidelines on processing of personal data through blockchain technologies. A blockchain is […]
IDPC issues FAQs on Management of Employee Email Accounts (Post-Departure) 11 April 2025 The IDPC has published a set of FAQs on the management of employee email Accounts once an employee leaves an organisation. When this happens, questions often arise regarding the appropriate management of their work email account. While employers have a legitimate interest […]
Commission sets course for Europe’s AI leadership with an ambitious AI Continent Action Plan 09 April 2025 The European Commission has presented an AI Continent Action Plan to make Europe a global leader in AI, boost its innovation capabilities and encourage adoption. As set out by President von der Leyen at the AI Action Summit […]
The Commissioner imposed an administrative fine of €20,000 on a private clinic 07 April 2025 The Commissioner received a complaint regarding the unlawful processing and disclosure of personal data by the controller. The complainant alleged that the controller failed to update her residential address, resulting in the disclosure of her sensitive health data to third […]
IDPC official delivers educational talk on Personal Data Breaches 24 March 2025 The Office of the Information and Data Protection Commissioner was recently invited by ISACA Malta Chapter to deliver an educational talk. The topic selected for this session was ‘Navigating Security Incidents that lead to Personal Data Breaches from a GDPR perspective’. As the […]
IDPC official addresses Employment 360 Conference 17 March 2025 The Office of the Information and Data Protection Commissioner took part in a panel discussion as part of the Employment 360 conference organised by Fenech and Fenech Advocates and Shireburn Software. Moderated by Dr Paul Gonzi and Ms Mikela Fenech Pace, this panel explored invaluable insights […]
EDPB adopts statement on the implementation of the PNR directive 14 March 2025 During its March Plenary, the EDPB has adopted a statement on the on the implementation of the passenger name record (PNR) directive.In its statement, the Board:- gives further guidance to the passenger information units on the necessary adaptions and limitations to the […]
Launch of Coordinated Enforcement Action on the Right to Erasure 11 March 2025 The Information and Data Protection Commissioner (IDPC) is pleased to announce its participation in the European Data Protection Board’s (EDPB) 2025 Coordinated Enforcement Framework (CEF). Following the CEF action on the right of access carried out in 2024, the CEF’s focus […]
IDPC as FRA and MSA under the AI Act 07 March 2025 The coming into force of the Artificial Intelligence Act[1] ushers in a new era for legal certainty and for regulation in the field of innovative technology such as Artificial Intelligence (AI). The AI Act seeks to protect the fundamental rights and freedoms of […]