“EDPB found that Meta IE’s infringement is very serious: transfers are systematic, repetitive, continuous. FB has millions of users in EU, volume of personal data transferred is massive. Unprecedented fine is strong signal to organisations that serious infringements have far-reaching consequences.”
1.2 billion euro fine for Facebook as a result of EDPB binding decision | European Data Protection Board
www.edpb.europa.eu
October 25, 2025 at 7:54 AM
“EDPB found that Meta IE’s infringement is very serious: transfers are systematic, repetitive, continuous. FB has millions of users in EU, volume of personal data transferred is massive. Unprecedented fine is strong signal to organisations that serious infringements have far-reaching consequences.”
Ja. Damit stimmt das EDPB dem Entwurfsvorschlag der EU-Kommission zu, so dass der Verlängerung nichts mehr im Wege steht.
October 21, 2025 at 12:23 PM
Ja. Damit stimmt das EDPB dem Entwurfsvorschlag der EU-Kommission zu, so dass der Verlängerung nichts mehr im Wege steht.
Yay looks like the @EUCommission and #EDPB have taken a rather clear joint position: #payorconsent is unlawful for gatekeepers under #dma and #gdpr.
Hello #meta 👋
https://www.edpb.europa.eu/system/files/2025-10/joint_com-edpb_gls_interplay_dma_gdpr_for_public_consultation_en.pdf
#Privacy […]
Hello #meta 👋
https://www.edpb.europa.eu/system/files/2025-10/joint_com-edpb_gls_interplay_dma_gdpr_for_public_consultation_en.pdf
#Privacy […]
Original post on eupolicy.social
eupolicy.social
October 9, 2025 at 12:39 PM
Yay looks like the @EUCommission and #EDPB have taken a rather clear joint position: #payorconsent is unlawful for gatekeepers under #dma and #gdpr.
Hello #meta 👋
https://www.edpb.europa.eu/system/files/2025-10/joint_com-edpb_gls_interplay_dma_gdpr_for_public_consultation_en.pdf
#Privacy […]
Hello #meta 👋
https://www.edpb.europa.eu/system/files/2025-10/joint_com-edpb_gls_interplay_dma_gdpr_for_public_consultation_en.pdf
#Privacy […]
FYI: Meta challenges EDPB's opinion on 'Consent or Pay' model: Meta sues EDPB over Opinion 08/2024, citing violations of EU law and fundamental rights.
Meta challenges EDPB's opinion on 'Consent or Pay' model
Meta sues EDPB over Opinion 08/2024, citing violations of EU law and fundamental rights.
ppc.land
September 5, 2024 at 2:22 PM
FYI: Meta challenges EDPB's opinion on 'Consent or Pay' model: Meta sues EDPB over Opinion 08/2024, citing violations of EU law and fundamental rights.
1/ Les directives 2/2023 de EDPB, téléchargeables ici : edpb.europa.eu/our-work-too...
2/ La rapport sur les travaux de la Cookie Banner Task Force, toujours émis par EDPB, téléchargeables ici : www.edpb.europa.eu/our-work-too...
2/ La rapport sur les travaux de la Cookie Banner Task Force, toujours émis par EDPB, téléchargeables ici : www.edpb.europa.eu/our-work-too...
Guidelines 2/2023 on Technical Scope of Art. 5(3) of ePrivacy Directive | European Data Protection Board
edpb.europa.eu
April 8, 2024 at 6:12 PM
1/ Les directives 2/2023 de EDPB, téléchargeables ici : edpb.europa.eu/our-work-too...
2/ La rapport sur les travaux de la Cookie Banner Task Force, toujours émis par EDPB, téléchargeables ici : www.edpb.europa.eu/our-work-too...
2/ La rapport sur les travaux de la Cookie Banner Task Force, toujours émis par EDPB, téléchargeables ici : www.edpb.europa.eu/our-work-too...
RIP to the entire concept of the One Stop Shop: Not new law mind you (this has been the standard for 'main establishment' since the GDPR was drafted), but this signals pretty clearly (along with the DPO crackdown) that the EDPB/regulators are done fucking around.
February 14, 2024 at 3:58 PM
RIP to the entire concept of the One Stop Shop: Not new law mind you (this has been the standard for 'main establishment' since the GDPR was drafted), but this signals pretty clearly (along with the DPO crackdown) that the EDPB/regulators are done fucking around.
EDPB Issues Opinion on AI and GDPR Compliance natlawreview.com/article/euro...
The European Data Protection Board Releases Opinion on Artificial Intelligence
On December 18, 2024, the European Data Protection Board (EDPB) issued an opinion on personal data use in artificial intelligence (AI) in response to the Irish Data Protection Commission's request for...
natlawreview.com
December 24, 2024 at 9:59 AM
EDPB Issues Opinion on AI and GDPR Compliance natlawreview.com/article/euro...
Does a stakeholder event even matter if the EDPB has its mind made up already anyway (which is the sense I'm getting)? Why even bother responding to the guidelines consultation? I feel like we've been rehashing the same arguments for almost a year.
November 19, 2024 at 12:05 AM
Does a stakeholder event even matter if the EDPB has its mind made up already anyway (which is the sense I'm getting)? Why even bother responding to the guidelines consultation? I feel like we've been rehashing the same arguments for almost a year.
How far should we take third-party vendor audits for embedded subprocessors? Does Meta's new choice (Consent, Pay or Wait) make the #EDPB happy? @robertjbateman.bsky.social joined us again to address both topics.
mastersofprivacy.com/robert-batem... #privacy #adtech #GDPR
mastersofprivacy.com/robert-batem... #privacy #adtech #GDPR
Robert Bateman: the EDPB’s Opinion on auditing subprocessors and the future of Meta’s unskippable ads - Masters Of Privacy
How far should we take third-party vendor audits for embedded subprocessors? Does Meta’s new choice (Consent, Pay or Wait) make the EDPB happy? Robert Bateman is a data protection writer, trainer, and...
mastersofprivacy.com
November 25, 2024 at 1:29 AM
How far should we take third-party vendor audits for embedded subprocessors? Does Meta's new choice (Consent, Pay or Wait) make the #EDPB happy? @robertjbateman.bsky.social joined us again to address both topics.
mastersofprivacy.com/robert-batem... #privacy #adtech #GDPR
mastersofprivacy.com/robert-batem... #privacy #adtech #GDPR
Romania is silent. Piedone is silent. TikTok does whatever it wants. Ireland is silent.
I have a Romanian ID 🇷🇴, Romanian IP 🇷🇴, Romanian audience 🇷🇴.
And yet, my account is still blocked in Moldova.
Is TikTok above the law?
@vonderleyen @EDPB @DPCIreland @ANSPDCP
@DanNegru @G4Media_ro
#GDPR #TikTo
I have a Romanian ID 🇷🇴, Romanian IP 🇷🇴, Romanian audience 🇷🇴.
And yet, my account is still blocked in Moldova.
Is TikTok above the law?
@vonderleyen @EDPB @DPCIreland @ANSPDCP
@DanNegru @G4Media_ro
#GDPR #TikTo
June 25, 2025 at 8:23 AM
EDPB Issues First Guidelines on the Interplay Between the Digital Services Act and the GDPR
EDPB Issues First Guidelines on the Interplay Between the Digital Services Act and the GDPR
On September 12, 2025, the European Data Protection Board (EDPB) adopted guidelines (Guidelines) on the interplay between the EU Digital Services...
www.jdsupra.com
September 23, 2025 at 10:46 AM
EDPB Issues First Guidelines on the Interplay Between the Digital Services Act and the GDPR
FYI: European Data Protection Board scrutinizes data practices of Large Language Model ChatGPT: The European Data Protection Board (EDPB) this week published a report by its ChatGPT taskforce. This taskforce was established to investigate the data collection and processing practices of ChatGPT, a…
European Data Protection Board scrutinizes data practices of Large Language Model ChatGPT
The European Data Protection Board (EDPB) this week published a report by its ChatGPT taskforce. This taskforce was established to investigate the data collection and processing practices of ChatGPT, a large language model (LLM) chatbot developed by…
ppc.land
June 2, 2024 at 6:11 AM
FYI: European Data Protection Board scrutinizes data practices of Large Language Model ChatGPT: The European Data Protection Board (EDPB) this week published a report by its ChatGPT taskforce. This taskforce was established to investigate the data collection and processing practices of ChatGPT, a…
First major GDPR decisions looming on Twitter and Facebook "where there is disagreement between [national] DPAs on a decision the regulation contains a dispute resolution mechanism[...]which loops in the European Data Protection Board (EDPB)"...
March 1, 2025 at 3:11 AM
First major GDPR decisions looming on Twitter and Facebook "where there is disagreement between [national] DPAs on a decision the regulation contains a dispute resolution mechanism[...]which loops in the European Data Protection Board (EDPB)"...
Actually, having read a lot of the EDPB guidance around Article 3 (territoriality), it seems fairly well scoped, and my above descriptions are not accurate. The EDPB seems to think a few random EU employees or customers are not enough to attach the GDPR to you and significant nexus is needed.
November 12, 2024 at 12:14 AM
Actually, having read a lot of the EDPB guidance around Article 3 (territoriality), it seems fairly well scoped, and my above descriptions are not accurate. The EDPB seems to think a few random EU employees or customers are not enough to attach the GDPR to you and significant nexus is needed.
EDPB Chair Anu Talus said: “Age assurance is essential to ensure that children do not access content that is not appropriate for their age. At the same time, the method to verify age must be the least intrusive possible and the personal data of children must be protected.”
February 16, 2025 at 9:44 PM
EDPB Chair Anu Talus said: “Age assurance is essential to ensure that children do not access content that is not appropriate for their age. At the same time, the method to verify age must be the least intrusive possible and the personal data of children must be protected.”
Historically, Ireland’s GDPR enforcement approach has been unpopular with the EDPB, which has often forced the DPC to take a harsher stance.
But the Irish DPC is under new leadership, and they're taking a new approach.
So 2025 could be another interesting year for GDPR watchers.
But the Irish DPC is under new leadership, and they're taking a new approach.
So 2025 could be another interesting year for GDPR watchers.
January 7, 2025 at 3:13 PM
Historically, Ireland’s GDPR enforcement approach has been unpopular with the EDPB, which has often forced the DPC to take a harsher stance.
But the Irish DPC is under new leadership, and they're taking a new approach.
So 2025 could be another interesting year for GDPR watchers.
But the Irish DPC is under new leadership, and they're taking a new approach.
So 2025 could be another interesting year for GDPR watchers.
EU privacy body weighs in on some tricky GenAI lawfulness questions
The European Data Protection Board (EDPB) published an opinion on Wednesday that explores how AI developers might use personal data to develop and deploy AI models, such as large language models (LLMs), without fallin…
#AI #AiNews
The European Data Protection Board (EDPB) published an opinion on Wednesday that explores how AI developers might use personal data to develop and deploy AI models, such as large language models (LLMs), without fallin…
#AI #AiNews
EU privacy body weighs in on some tricky GenAI lawfulness questions
The European Data Protection Board (EDPB) published an opinion on Wednesday that explores how AI developers might use personal data to develop and deploy AI models, such as large language models (LLMs), without falling foul of the bloc’s privacy laws. The Board plays a key steering role in the application of these laws, issuing guidance […]
techcrunch.com
December 19, 2024 at 8:18 PM
EDPB position on technical scope of Art. 5(3) of ePrivacy Directive confirms :
- All storage type (SSD, RAM...)
- IP address, device info
- IoT relaying data via apps
- Javascript, SDK, API that send info to 3rd parties
- URL parameters, Email tracking
www.edpb.europa.eu/our-work-too...
- All storage type (SSD, RAM...)
- IP address, device info
- IoT relaying data via apps
- Javascript, SDK, API that send info to 3rd parties
- URL parameters, Email tracking
www.edpb.europa.eu/our-work-too...
October 17, 2024 at 8:54 AM
EDPB position on technical scope of Art. 5(3) of ePrivacy Directive confirms :
- All storage type (SSD, RAM...)
- IP address, device info
- IoT relaying data via apps
- Javascript, SDK, API that send info to 3rd parties
- URL parameters, Email tracking
www.edpb.europa.eu/our-work-too...
- All storage type (SSD, RAM...)
- IP address, device info
- IoT relaying data via apps
- Javascript, SDK, API that send info to 3rd parties
- URL parameters, Email tracking
www.edpb.europa.eu/our-work-too...
ICYMI: EDPB offers clarity on EU-U.S. Data Privacy Framework: The European Data Protection Board clarifies the EU-U.S. Data Privacy Framework for European individuals with a FAQ explaining their rights and complaint procedures.
EDPB offers clarity on EU-U.S. Data Privacy Framework
The European Data Protection Board clarifies the EU-U.S. Data Privacy Framework for European individuals with a FAQ explaining their rights and complaint procedures.
ppc.land
July 18, 2024 at 7:09 PM
ICYMI: EDPB offers clarity on EU-U.S. Data Privacy Framework: The European Data Protection Board clarifies the EU-U.S. Data Privacy Framework for European individuals with a FAQ explaining their rights and complaint procedures.
This statement by the #EDPB highlights the importance of independent courts for the implementation of the #PNR Directive in line with the CJEU's judgment in C-817/19. But what happens when a judiciary is captured in a Member State? How are human rights protected? www.edpb.europa.eu/system/files...
www.edpb.europa.eu
March 18, 2025 at 4:35 PM
This statement by the #EDPB highlights the importance of independent courts for the implementation of the #PNR Directive in line with the CJEU's judgment in C-817/19. But what happens when a judiciary is captured in a Member State? How are human rights protected? www.edpb.europa.eu/system/files...
Since I'm getting a bunch of followers from data protection starter packs, guess I should post some relevant content in my usual style:
Data Act > AI Act
NIS2 + DORA > GDPR + ePD
EDPB guidance on ePD 5(3) is still silly (but mostly legally correct)
US privacy law is an unserious legal domain
Data Act > AI Act
NIS2 + DORA > GDPR + ePD
EDPB guidance on ePD 5(3) is still silly (but mostly legally correct)
US privacy law is an unserious legal domain
November 18, 2024 at 12:27 PM
Since I'm getting a bunch of followers from data protection starter packs, guess I should post some relevant content in my usual style:
Data Act > AI Act
NIS2 + DORA > GDPR + ePD
EDPB guidance on ePD 5(3) is still silly (but mostly legally correct)
US privacy law is an unserious legal domain
Data Act > AI Act
NIS2 + DORA > GDPR + ePD
EDPB guidance on ePD 5(3) is still silly (but mostly legally correct)
US privacy law is an unserious legal domain
EDPB clarifies assessment for disclosing EU data to foreign authorities
EDPB clarifies assessment for disclosing EU data to foreign authorities
On 4 June 2025, the European Data Protection Board published guidelines clarifying how EU-based companies should assess requests from foreign...
www.jdsupra.com
July 14, 2025 at 6:45 PM
EDPB clarifies assessment for disclosing EU data to foreign authorities
The European Data Protection Board (EDPB) has adopted new guidelines clarifying how the Digital Services Act (DSA) and the GDPR should operate together where online service providers process personal data to meet DSA obligations.
#DSAPrivacy
#TelecomPrivacy
#DSAPrivacy
#TelecomPrivacy
October 17, 2025 at 3:57 PM
The European Data Protection Board (EDPB) has adopted new guidelines clarifying how the Digital Services Act (DSA) and the GDPR should operate together where online service providers process personal data to meet DSA obligations.
#DSAPrivacy
#TelecomPrivacy
#DSAPrivacy
#TelecomPrivacy
Meta challenges EDPB's opinion on 'Consent or Pay' model: Meta sues EDPB over Opinion 08/2024, citing violations of EU law and fundamental rights. #Meta #EDPB #ConsentOrPay #EULaw #FundamentalRights
Meta challenges EDPB's opinion on 'Consent or Pay' model
Meta sues EDPB over Opinion 08/2024, citing violations of EU law and fundamental rights.
ppc.land
December 26, 2024 at 5:15 PM
Meta challenges EDPB's opinion on 'Consent or Pay' model: Meta sues EDPB over Opinion 08/2024, citing violations of EU law and fundamental rights. #Meta #EDPB #ConsentOrPay #EULaw #FundamentalRights