DPO Advisor

Find everything you need to stay up-to-date on evolving privacy & security regulations around the world

Ireland appoints former tech-industry lobbyist to Data Protection

September 17, 2025

Ireland appointed ex-Meta policy head Niamh Sweeney as DPC commissioner, sparking debate over GDPR oversight independence. Civil groups urged the EU to review the move, citing concerns about tech influence on enforcement.

SHEIN fined €150 million by CNIL for cookie consent violations

September 7, 2025

France’s CNIL fined SHEIN €150 million for using tracking cookies without valid consent. The probe found incomplete banners and continued tracking after “reject all,” marking a major GDPR enforcement on cookie transparency.

Google fined €325 million by CNIL for ads in Gmail and cookie-consent failings

September 3, 2025

France’s CNIL fined Google €325 million for showing ads in Gmail without consent and setting cookies during sign-ups. The regulator cited GDPR violations on transparency and user choice, giving Google six months to fix its practices.

Google agrees to $30 million settlement in YouTube kids’ privacy lawsuit

August 19, 2025

Google agreed to a $30M settlement over claims YouTube collected children’s data without parental consent. The lawsuit highlights ongoing scrutiny of child-directed platforms and data-driven advertising practices.

ICO outlines legal conditions for police use of facial recognition

August 13, 2025

The UK ICO issued new guidance limiting police use of live facial recognition. Authorities must prove necessity, effectiveness, and proportionality, reinforcing UK GDPR safeguards for biometric surveillance in public spaces.

Yahoo sues Chubb over refusal to cover potential GDPR fines

July 30, 2025

Yahoo sued insurer Chubb over refusal to cover potential GDPR fines tied to an Irish DPC probe. The case raises major questions about insurability of data protection penalties as GDPR enforcement intensifies.