IDPC Publications

CJEU Advocate General: the publication of the name of any professional athlete who has infringed the anti-doping rules is contrary to EU law

CJEU Advocate General: the publication of the name of any professional athlete who has infringed the anti-doping rules is contrary to EU law 25 September 2025 Four professional athletes who infringed the anti-doping rules challenge, before an Austrian court, the fact that their names, the sporting discipline concerned, the duration of their exclusion from […]

25
Sep

IDPC Joins Panel on AI and Data Regulations for Businesses

IDPC Joins Panel on AI and Data Regulations for Businesses 23 September 2025 Dr Marco Fagnano, Legal Counsel at the Office of the Information and Data Protection Commissioner (IDPC), participated in a high-level panel discussion titled "Decoding AI and Data Regulations for Businesses", held at the Malta Digital Innovation Authority (MDIA) on the 5 […]

23
Sep

IDPC signs MOU with the Information Commissioner of the Isle of Man

IDPC signs MOU with the Information Commissioner of the Isle of Man 22 September 2025 In the margins of this year's Global Privacy Assembly, organised in Seoul by the Personal Protection Commission of the Republic of Korea, the IDPC and the Information Commissioner of the Isle of Man have signed a Memorandum of Understanding […]

22
Sep

Sharing of personal data with the United States must be accompanied by comprehensive and effective safeguards

Sharing of personal data with the United States must be accompanied by comprehensive and effective safeguards 19 September 2025 On 17 September 2025, the European Data Protection Supervisor (EDPS) issued an Opinion on the negotiating mandate for aframework agreement between the European Union and the United States of America on the exchange of information for […]

19
Sep

IDPC at the Global Privacy Assembly in Seoul

IDPC at the Global Privacy Assembly in Seoul 18 September 2025 The Information and Data Protection Commissioner Ian Deguara and Senior Legal Counsel Cynthia Duncan are attending the 47th Global Privacy Assembly (GPA), being held in Seoul, South Korea. The theme of the 2025 gathering, which is being held between 15 and 19 September, […]

18
Sep

Interplay between the DSA and the GDPR: EDPB adopts guidelines

Interplay between the DSA and the GDPR: EDPB adopts guidelines 12 September 2025 During its September plenary meeting, the European Data Protection Board (EDPB) has adopted guidelines on the interplay between the Digital Services Act (DSA) and the General Data Protection Regulation (GDPR). These are the first set of EDPB guidelines on the interplay between […]

12
Sep

International cooperation to fight crime should respect EU fundamental rights guarantees

International cooperation to fight crime should respect EU fundamental rights guarantees 09 September 2025 On 4 September 2025, the European Data Protection Supervisor (EDPS) issued an Opinion on two Proposals: one to authorise the signing, on behalf of the European Union, of the United Nations Convention against Cybercrime, and the other to authorise the conclusion, on […]

09
Sep

Cookie regulation: the CNIL imposes two fines on GOOGLE and SHEIN

Cookie regulation: the CNIL imposes two fines on GOOGLE and SHEIN 05 September 2025 The French Data Protection Authority, CNIL, fined GOOGLE Eur325 million and SHEIN Eur150 million, in particular for failing to comply with the rules on cookies. These fines are part of the several measures taken by the CNIL to regulate non-compliant […]

05
Sep

Court of Justice clarifies the scope of the concept of personal data in the context of a transfer of pseudonymised data to third parties

Court of Justice clarifies the scope of the concept of personal data in the context of a transfer of pseudonymised data to third parties 04 September 2025 The European Court of Justice set aside the judgment of the General Court which had annulled the decision of the European Data Protection Supervisor. Following the resolution […]

04
Sep

European Court dismisses an action for annulment of the new framework for the transfer of personal data between the EU and the US

European Court dismisses an action for annulment of the new framework for the transfer of personal data between the EU and the US 03 September 2025 In so doing, it confirms that, on the date of adoption of the contested decision, the United States of America ensured an adequate level of protection for personal […]

03
Sep

Fundamental Rights Impact Assessment Workshop – Save the date

Fundamental Rights Impact Assessment Workshop – Save the date 03 September 2025 The AI Act introduces new accountability for AI systems, making protection of fundamental rights central. Article 27 requires deployers of certain high-risk systems to conduct a Fundamental Rights Impact Assessment (FRIA). This full-day workshop, organised by the IDPC, explains what is a FRIA, […]