New data bridge for UK-US data transfers to help firms
Transfer of UK personal data to US simplified, UK data transfer rules back in step with EU, ICO offers qualified backing.
EU GDPR
Rule Collection
The General Data Protection Regulation or GDPR imposes data privacy and security obligations on organizations that handle the personal data of or provide goods or services to EU citizens or residents.
Overview
Rules in This Collection
Notable
Latest News
Further Reading
Notable
Amazon France Logistique fined €32m for intrusive employee monitoring
CNIL found that the company's monitoring and data collection were disproportionate and excessively intrusive.
Santa Claus is coming to town, but is he GDPR compliant?
"He’s making a list, he’s checking it twice, he’s gonna find out who’s naughty or nice" … but is Santa doing so in compliance with the GDPR?
Latest News
More on EU GDPR
-
CNIL issued more than €486m in sanctions during 2025
The French Data Protection Authority's work during 2025 includes a record €325m fine on Google.
-
Ashurst's Data Bytes 2026: EU Digital regulation – more than you think
The panelists pointed out operational and governance considerations toward capability-led compliance around digital regulation.
-
Sportadmin gets SKr 6m fine for lacking IT security
Personal data of a large part of Sweden's population was leaked on the darknet following an attack on the company in January 2025.
-
EU Digital Markets Act high-level group maps out regulatory interplay on AI
Policy coherence, cross-regulatory cooperation, and interplay between regulations addressed in joint paper on AI.
-
How the ‘Brussels effect’ backfired
Once a model for the world, the EU’s rulemaking machine has faltered under the weight of its own ambition.
-
Privacy group noyb files complaints against TikTok over alleged tracking of Grindr and shopping data
nyob has asked the Austrian DPA to impose an “effective, proportionate and dissuasive” fine under the GDPR.
-
What you need to know now about the EU's Digital Omnibus proposals
Commission's response to the Draghi report pares back data-related regulation it considers too onerous for a competitive AI and tech sector.
-
The living revolution – could wetware and neuron chips redefine computing?
We discuss funding, legal risk, data governance, ethical, and risk issues with Joe Stephenson, partner and head of Tech Sector at Shoosmiths.
