DPO Advisor

Find everything you need to stay up-to-date on evolving privacy & security regulations around the world.

Region

regulation

China enacts new rules for personal information audits

May 20, 2025

China’s new audit measures under the PIPL require companies handling over 10 million users’ data to conduct biennial audits. Regulator-mandated audits may apply after security incidents or risks.

The UK's Data Use and Access Bill is making progress

May 11, 2025

The UK’s Data (Use and Access) Bill moves closer to becoming law, aiming to modernize data governance, strengthen privacy protections, and regulate digital services, health data, and AI usage.

EU court rejects Meta’s challenge to 'consent or pay' opinion

May 7, 2025

The EU General Court rejected Meta’s attempt to overturn an EDPB opinion, ruling that requiring payment to avoid data tracking violates GDPR principles. The decision reinforces that consent must be freely given and not tied to financial status.

EU Begins Enforcement of the Digital Services Act (DSA)

May 1, 2025

The Digital Services Act begins enforcement in the EU, mandating transparency, content moderation, and user protection obligations for online platforms.

CPPA and ICO sign declaration of cooperation

April 29, 2025

In early 2025, the California Privacy Protection Agency and UK ICO signed a joint declaration to collaborate on research, education, and best practices for privacy and emerging technologies.

DOJ Finalizes Rule on Data Transfers to Foreign Entities

April 17, 2025

The DOJ’s Final Rule restricts transfers of sensitive personal data to adversarial nations like China, Russia, and Iran under new executive guidance.

Maryland Enacts Stringent Privacy Law

April 9, 2025

Maryland has passed a strict privacy law requiring “strict necessity” for handling sensitive data, highlighting a major step in U.S. privacy regulation.

TikTok fined €530 million for GDPR violations over data transfers to China

April 6, 2025

Ireland’s DPC fined TikTok €530 million for unlawful data transfers to China, citing GDPR transparency violations and ordering suspension of transfers until compliance is achieved.

Amazon Loses Court Appeal Over €746M GDPR Fine

March 19, 2025

In March 2025, a Luxembourg court upheld a €746M GDPR fine against Amazon for unlawfully processing user data for targeted ads. The ruling reinforces the importance of valid consent and privacy rights under EU law.