DPO Advisor

Find everything you need to stay up-to-date on evolving privacy & security regulations around the world.

Region

regulation

California announces $1.8 million Lyft privacy settlement

October 29, 2026

California announced a Lyft settlement addressing barriers to in-app privacy opt-outs. The case highlights unnecessary steps and repeated data requests.

EU Council agrees negotiating position on GDPR simplification

October 21, 2026

The Council's October 2026 Digital Omnibus position proposes changes to GDPR, cookies and incident reporting. It does not itself amend applicable law.

EDPB calls for clearer recording signals on smart glasses

October 13, 2026

The EDPB's October 2026 statement explains GDPR roles and bystander transparency for smart glasses, with practical implications for workplace use.

Norway fines Xandr NOK 92 million over Grindr advertising data

October 12, 2026

Norway fined Xandr NOK 92 million for processing Grindr advertising data without valid consent. A November update confirms the decision became final.

EDPB finalises guidance on how the DSA and GDPR interact

September 21, 2026

The EDPB's final September 2026 guidance explains how GDPR duties interact with the DSA, including advertising, recommender systems and protection of minors.

FTC finalises orders over false active-listening claims

August 27, 2026

Final FTC orders address false claims that ad services used consumers' conversations. The case concerns deceptive marketing, not proven covert recording.

LocateSmarter ordered to simplify opt-outs and pay fines

August 11, 2026

California's LocateSmarter decision addresses late broker registration and unnecessary opt-out data. Payments total $116,490 including a registration fee.

FTC sues Hims & Hers over alleged health-data disclosures

July 29, 2026

The FTC alleged Hims & Hers shared sensitive health information with advertising platforms despite privacy promises. The case remains pending.

EU AI Act amendment revises high-risk compliance dates

July 24, 2026

The July 2026 AI Act amendment moves high-risk obligations to 2027 and 2028, while transparency duties follow a separate timetable.