In-depth articles on GDPR compliance, DSARs, data governance, and privacy operations.
Supervisory Authorities & EnforcementThe Challenge Between July 2018 and April 2020, Xandr processed personal data revealing the sexual orientation of Grindr users in Norway without confirming it had a lawful basis to do so. The Norwegia
Supervisory Authorities & EnforcementYou re an ad tech company. A publisher sends you bid requests containing user identifiers and behavioral signals. The publisher claims it has consent. Do you process that data based on their word, or
Supervisory Authorities & EnforcementOn September 30, 2025, the UK s data protection supervisory authority transitioned from a single-person leadership to a committee structure. The Information Commission replaced the Information Commiss
Supervisory Authorities & EnforcementThe European Data Protection Board (EDPB) has adopted a five-step method for administrative fines, prompting a critical question for your team: should every GDPR violation result in a financial penalt
Get weekly security insights and compliance updates delivered to your inbox.
Supervisory Authorities & EnforcementYou re collecting location data. The question isn t whether you need a retention policy, it s which retention model fits your processing purposes and risk profile. Ireland s Data Protection Commission
Supervisory Authorities & EnforcementThe Irish Data Protection Commission s €403 million fine against Google for unlawful location data processing isn t just another headline. It s a technical blueprint of what breaks when transparency o
Supervisory Authorities & EnforcementThe Irish Data Protection Commission fined Google Ireland Limited €403 million for violating multiple GDPR principles through its location tracking features. If your team processes location data throu
Supervisory Authorities & EnforcementGoogle s €403 million fine from Ireland s Data Protection Commission (DPC) highlights how easily organizations can misunderstand their GDPR obligations regarding location data. The decision, which scr
Supervisory Authorities & EnforcementThe Irish Data Protection Commission s €403 million fine against Google for location data processing violations between May 2018 and February 2020 offers a clear view into how supervisory authorities
Supervisory Authorities & EnforcementOn September 30, 2026, the UK s Information Commissioner s Office will be replaced by the Information Commission, a body with shared governance. While the supervisory authority s functions remain the
Supervisory Authorities & EnforcementThese questions come from a DPO roundtable I attended last month, right after Grindr s £26m settlement hit the news. The room went quiet when someone asked: Could our pre-acquisition data practices tr
Supervisory Authorities & EnforcementWhat Happened Belgium s third attempt at establishing a lawful data retention regime in 2022 required online service providers to store identification, traffic, and location metadata to combat cybercr
Supervisory Authorities & EnforcementThe Court of Justice of the EU might soon change a decade of precedent. If it follows Advocate-General Maciej Szpunar s September 2026 recommendation, your data retention obligations could shift from
Supervisory Authorities & EnforcementThe first year of GDPR enforcement revealed a harsh truth: most organizations weren t prepared, and many still aren t. Helen Dixon, the Irish Data Protection Commissioner, described that period as a w
Supervisory Authorities & EnforcementWhen data protection authorities speak at industry conferences, compliance teams pay close attention. These events offer valuable insights into enforcement priorities and regulatory perspectives. At t
Supervisory Authorities & EnforcementAnticipating the Next Wave of Privacy Challenges Late 2019 left many privacy teams feeling exhausted but wary. After months of implementing GDPR -compliant programs, rushing to meet the CCPA s January
Supervisory Authorities & EnforcementThe Problem: Why This Matters Now The Irish Data Protection Commission s €390 million fine against Meta on January 4, 2023, signals a shift in regulatory enforcement. Supervisory authorities are now t
Supervisory Authorities & EnforcementThe U.K. Information Commissioner s Office s Age Appropriate Design Code outlines 15 standards for online services that process children s personal data. If your service is likely to be accessed by ch
Supervisory Authorities & EnforcementThe question at hand Your data protection officer just got a request from the competition law team. They want access to your data retention schedules, legitimate interests assessments, and consent man
Supervisory Authorities & EnforcementJohn Edwards took office as U.K. Information Commissioner on January 4, 2022, marking a shift in the ICO s approach. If your compliance program treats the ICO as static, you re already behind. Edwards
