CJEU makes landmark decision in Meta vs Bundeskartellamt
Judgment allows GDPR scrutiny through antitrust regulators and imposes limitations on personalized use of consumers’ personal data.
Processing of personal data is lawful for the following reasons only:
The last point does not apply to public authorities performing their tasks.
Where processing is not based on consent or legal sanction the controller needs to take into account:
CJEU makes landmark decision in Meta vs Bundeskartellamt
Judgment allows GDPR scrutiny through antitrust regulators and imposes limitations on personalized use of consumers’ personal data.
Norwegian Data Protection Authority wins against Meta in court
The Norwegian authority has put a temporary ban on the social media giant after its illegal behaviour-based marketing.
Martina Lindberg 1 min read
Using data protection to counter bias in generative AI
Practical steps to mitigate against bias and hallucinations when using and developing AI models.
Kirsten Ammon | Fieldfisher 5 min read
There are several compliance challenges for firms incorporating AI notetaking into their processes.
Carmen Cracknell 2 min watch
The EDPB connects effective enforcement of EU’s digital regulation with lawful information sharing between DPAs and other authorities.
Vasilka Lalevska 2 min read
New course aims to help SMEs remain compliant in a complex regulatory landscape.
Carmen Cracknell 2 min read
The Lithuanian DPA’s new breach statistics for H1 2026 showcase human error as an important challenge in GDPR compliance.
Vasilka Lalevska 2 min read
Ireland puts digital policy, competitiveness, and regulatory simplification in the spotlight of its Presidency, creating a to-watch list for compliance professionals.
Vasilka Lalevska 4 min read
The company was fined after VDAI identified GDPR compliance weaknesses related to incident reporting and data security.
Vasilka Lalevska 1 min read
Aydin Mirzaee is CEO of Fellow AI, a meeting and note-taking assistant.
Carmen Cracknell 29 min listen
The agreement on certain Omnibus IV files creates a new small mid-cap (SMC) category extending SME regulatory simplification to more companies, amending GDPR, MiFID, and other key EU laws.
Vasilka Lalevska 3 min read
Further Reading