DPO Advisor

Find everything you need to stay up-to-date on evolving privacy & security regulations around the world

Spanish court orders Meta to pay €479 million to digital media outlets

November 21, 2025

A Spanish court ordered Meta to pay €479 million to digital publishers, ruling that its use of personal data for behavioral advertising breached GDPR requirements and distorted competition.

Aena fined €10 million and facial-recognition boarding halted at Spanish airports

November 19, 2025

Spain’s data protection authority fined airport operator Aena €10 million for deploying facial-recognition boarding systems without conducting proper data protection impact assessments under the GDPR.

UK ICO fines Capita group £14 million following cyber-related UK GDPR failures

November 18, 2025

The UK Information Commissioner’s Office fined two Capita group entities £14 million for cybersecurity failures that exposed sensitive personal data of millions, reinforcing strict UK GDPR expectations around cyber resilience.

Irish High Court delays operational order to TikTok during appeal

November 12, 2025

Ireland’s High Court allowed TikTok to temporarily continue transferring EU user data to China while it appeals a €530 million GDPR fine imposed by the Irish Data Protection Commission over unlawful cross-border data transfers.

Austria’s DSB finds that Microsoft violated EU privacy law in educational deployment

October 23, 2025

Austria’s DSB found Microsoft violated the GDPR by tracking students via its 365 Education tools without proper consent. The case highlights strict privacy rules for tech platforms handling minors’ data in EU schools.

Imgur withdraws from the UK after ICO warning over data practices

October 2, 2025

Imgur blocked UK access after the ICO raised concerns about its data handling, especially children’s data. The move highlights how UK GDPR compliance costs can drive global platforms to withdraw from stricter privacy markets.