DPO Advisor

Find everything you need to stay up-to-date on evolving privacy & security regulations around the world

EU extends UK data adequacy decision through 2031

December 24, 2025

The European Commission extended the EU–UK data adequacy decision through 2031, ensuring continued cross-border data flows. The move provides certainty for businesses while maintaining GDPR-equivalent protections post-Brexit.

Dutch DPA warns companies over dark patterns in consent banners

December 18, 2025

The Dutch data protection authority warned companies that deceptive cookie banners and dark patterns undermine valid GDPR consent. The regulator signaled future enforcement if practices that nudge users toward “accept all” are not corrected.

French regulator fines Optimove €1 million for GDPR violations

December 11, 2025

France’s CNIL fined marketing platform Optimove €1M for GDPR violations tied to inadequate security and processor obligations. The case highlights rising enforcement focus on data processors handling large volumes of customer data.

UK ICO fines LastPass £1.2 million after 2022 breach affecting 1.6 million UK users

December 4, 2025

The UK ICO fined LastPass £1.2 million for insufficient security measures following a 2022 data breach that affected approximately 1.6 million UK users.

Spanish court orders Meta to pay €479 million to digital media outlets

November 21, 2025

A Spanish court ordered Meta to pay €479 million to digital publishers, ruling that its use of personal data for behavioral advertising breached GDPR requirements and distorted competition.

Aena fined €10 million and facial-recognition boarding halted at Spanish airports

November 19, 2025

Spain’s data protection authority fined airport operator Aena €10 million for deploying facial-recognition boarding systems without conducting proper data protection impact assessments under the GDPR.