DPO Advisor

Find everything you need to stay up-to-date on evolving privacy & security regulations around the world.

Region

regulation

TikTok fined €530 million for GDPR violations over data transfers to China

April 6, 2025

Ireland’s DPC fined TikTok €530 million for unlawful data transfers to China, citing GDPR transparency violations and ordering suspension of transfers until compliance is achieved.

Amazon Loses Court Appeal Over €746M GDPR Fine

March 19, 2025

In March 2025, a Luxembourg court upheld a €746M GDPR fine against Amazon for unlawfully processing user data for targeted ads. The ruling reinforces the importance of valid consent and privacy rights under EU law.

Shopify faces a privacy class action lawsuit

March 18, 2025

In March 2025, the 9th Circuit Court revived a class action lawsuit against Shopify, allowing claims under CCPA over unauthorized tracking and data sharing. The ruling expands jurisdiction for privacy cases based on user location, signaling broader legal risk for online companies.

California court blocks enforcement of child privacy law again

March 13, 2025

A federal judge halted California’s Age-Appropriate Design Code (CAADCA), citing First Amendment issues. The ruling challenges child data privacy laws and may impact similar efforts nationwide

The European Commission publishes Data Act FAQs

February 15, 2025

In February 2025, the European Commission released updated FAQs to clarify the EU Data Act, addressing its overlap with GDPR, IoT data use cases, and safeguards for SMEs.

EU Court fines the European Parliament

January 26, 2025

The EU’s General Court fined the European Parliament €400 for violating GDPR after a website allowed Facebook login, exposing user data. Even public institutions must follow privacy laws.

Multiple U.S. states roll out new data privacy laws

January 2, 2025

New privacy laws took effect in Delaware, Iowa, Nebraska, New Hampshire, and New Jersey, reflecting growing momentum for state-level data protection in the U.S.

Ireland imposes a €251 GDPR million fine on Meta

December 22, 2024

Meta faces a €251M GDPR fine from Ireland’s DPC after a 2018 breach exposed millions of users’ data. The penalty highlights gaps in Meta’s breach response and documentation.

Italy fines OpenAI €15 million for privacy violations

December 17, 2024

Italy’s data protection authority fined OpenAI €15 million for GDPR violations related to ChatGPT’s data use and lack of age verification controls.