European Union: Privacy Protection

On 24 August 2026, the European Commission published its request to the European Securities and Markets Authority (ESMA) (PDF, 698 KB) to provide technical advice on implementing key aspects...

This privacy statement outlines how cookies are used on this website and provides users with options to manage their cookie preferences. By accepting all cookies, users consent to analytics and targeting cookies being deployed on their device.

The French Constitutional Council's invalidation of a social media age ban for minors under fifteen has collided with the European Commission's sweeping EU KIDS Act proposal, which mandates age verification...

The Court of Justice's Jautiva ruling has clarified that EU company law does not require unrestricted online access to shareholder personal information, even when corporate transparency and anti-money laundering objectives are invoked. Cyprus businesses must now reconsider how they balance statutory filing obligations with data protection principles, particularly when shareholder records can be downloaded in bulk without safeguards. This analysis examines what the judgment means for corporate disclosure pra

How is the Irish Data Protection Commission responding to unprecedented complaint volumes driven by AI-generated submissions? What are the most common mistakes controllers make when handling subject access requests, and why is transparency becoming a critical enforcement focus?

New cross-border evidence rules take effect in Sweden in August 2026, requiring digital service providers to respond to EU law enforcement orders within strict timeframes. Non-compliance carries penalties of up to 2% of global revenue, making immediate preparation essential for companies offering services to Swedish users.

Employment relationships increasingly extend beyond traditional workplace boundaries into digital spaces—social media, messaging apps, and personal devices. When these communications surface in disciplinary proceedings or dismissal challenges, courts must navigate complex questions about evidence admissibility while balancing employers' evidentiary needs against workers' constitutional rights to privacy and freedom of communication.

On 7 July 2026, the European Data Protection Board (the “EDPB“) published its widely anticipated draft Guidelines 02/2026 on Anonymisation (the “Guidelines“) for public consultation.

La CNIL a publié son rapport annuel 2025 révélant une augmentation alarmante des cyberattaques et violations de données personnelles. Avec plus de 20 000 plaintes reçues et 6 167 notifications de violations...