DPO Advisor

Find everything you need to stay up-to-date on evolving privacy & security regulations around the world.

Region

regulation

FTC settles with OkCupid over unauthorized data sharing

March 31, 2026

The FTC settled with OkCupid after alleging it shared user data with an AI firm without consent. The case highlights enforcement of privacy promises and risks tied to third-party data sharing.

Spain fines Yoti €950,000 over biometric data violations

March 11, 2026

Spain’s AEPD fined Yoti €950K for unlawful biometric data processing and invalid consent practices. The case highlights strict GDPR rules for sensitive data and facial recognition technologies.

UK ICO fines Reddit £14.5 million over children’s data use

February 24, 2026

The UK ICO fined Reddit £14.5M for unlawfully processing children’s data and failing to implement proper age checks. The case highlights strict UK GDPR rules on protecting minors online.

EU court backs companies’ ability to challenge EDPB-driven decisions in WhatsApp case

February 10, 2026

The EU court ruled companies can challenge EDPB-driven decisions directly, not just national rulings. The WhatsApp case could reshape how businesses contest GDPR fines and regulatory oversight in Europe.

UK ICO fines Imgur owner £247,590 for unlawful processing of children’s data and weak age checks

February 5, 2026

The UK ICO fined Imgur’s owner £247K for failing to protect children’s data and lacking age checks. The case underscores strict UK GDPR requirements for safeguarding minors and online safety compliance.

Kenya’s ODPC issues 184 compensation orders in privacy complaints milestone

January 29, 2026

Kenya’s ODPC issued 184 compensation orders for privacy violations, marking a major enforcement step. The move reflects growing global adoption of data protection laws and stronger user rights enforcement.

France’s CNIL fines France Travail €5 million over jobseeker data security failures

January 29, 2026

France’s CNIL fined France Travail €5M after a breach exposed jobseeker data. The regulator cited weak authentication and inadequate protections, stressing GDPR expectations for securing large-scale personal datasets.

DLA Piper report puts 2025 GDPR fines at about €1.2 billion

January 21, 2026

DLA Piper’s 2025 report shows €1.2B in GDPR fines and rising breach notifications. Total penalties since 2018 reached €7.1B, signaling growing regulatory scrutiny of data governance and security practices.

Google agrees to pay $8.25 million to settle lawsuit alleging unlawful collection of children’s data

January 15, 2026

Google agreed to pay $8.25M to settle claims it collected children’s data via apps. The case highlights COPPA risks and the importance of monitoring third-party tools handling sensitive user information.