DPO Advisor

Find everything you need to stay up-to-date on evolving privacy & security regulations around the world

23andMe fined £2.3M by UK ICO for 2023 credential-stuffing breach

June 5, 2025

The UK ICO fined 23andMe £2.3M after a 2023 cyberattack exposed genetic data of 150K users. The regulator found insufficient safeguards for highly sensitive data, reinforcing strict UK GDPR security obligations.

EU court rejects Meta’s challenge to 'consent or pay' opinion

May 7, 2025

The EU General Court rejected Meta’s attempt to overturn an EDPB opinion, ruling that requiring payment to avoid data tracking violates GDPR principles. The decision reinforces that consent must be freely given and not tied to financial status.

TikTok fined €530 million for GDPR violations over data transfers to China

April 6, 2025

Ireland’s DPC fined TikTok €530 million for unlawful data transfers to China, citing GDPR transparency violations and ordering suspension of transfers until compliance is achieved.

EU Court fines the European Parliament

January 26, 2025

The EU’s General Court fined the European Parliament €400 for violating GDPR after a website allowed Facebook login, exposing user data. Even public institutions must follow privacy laws.

Ireland imposes a €251 GDPR million fine on Meta

December 22, 2024

Meta faces a €251M GDPR fine from Ireland’s DPC after a 2018 breach exposed millions of users’ data. The penalty highlights gaps in Meta’s breach response and documentation.

Italy fines OpenAI €15 million for privacy violations

December 17, 2024

Italy’s data protection authority fined OpenAI €15 million for GDPR violations related to ChatGPT’s data use and lack of age verification controls.