DPO Advisor

Find everything you need to stay up-to-date on evolving privacy & security regulations around the world

CNIL fines Free Mobile and Free €42 million after a 2024 breach exposed 24 million contracts

January 13, 2026

France’s CNIL fined Free €42M after a breach exposed data of 24M users, including IBANs. The regulator cited weak VPN security and monitoring failures, reinforcing strict GDPR obligations for data protection.

Ireland’s DPC is owed more than €4 billion in fines

January 12, 2026

Ireland’s DPC has yet to collect over €4B in GDPR fines due to ongoing appeals. The situation highlights challenges in enforcing major penalties and delays in finalizing high-profile data protection cases.

EU extends UK data adequacy decision through 2031

December 24, 2025

The European Commission extended the EU–UK data adequacy decision through 2031, ensuring continued cross-border data flows. The move provides certainty for businesses while maintaining GDPR-equivalent protections post-Brexit.

Dutch DPA warns companies over dark patterns in consent banners

December 18, 2025

The Dutch data protection authority warned companies that deceptive cookie banners and dark patterns undermine valid GDPR consent. The regulator signaled future enforcement if practices that nudge users toward “accept all” are not corrected.

French regulator fines Optimove €1 million for GDPR violations

December 11, 2025

France’s CNIL fined marketing platform Optimove €1M for GDPR violations tied to inadequate security and processor obligations. The case highlights rising enforcement focus on data processors handling large volumes of customer data.

UK ICO fines LastPass £1.2 million after 2022 breach affecting 1.6 million UK users

December 4, 2025

The UK ICO fined LastPass £1.2 million for insufficient security measures following a 2022 data breach that affected approximately 1.6 million UK users.