In-depth articles on GDPR compliance, DSARs, data governance, and privacy operations.
Supervisory Authorities & EnforcementWhat Happened On June 24, the European Data Protection Board (EDPB) launched a contact form for stakeholders to report inconsistencies in GDPR interpretation across Europe. You can now flag divergence
Supervisory Authorities & EnforcementWhen your IT infrastructure spans multiple jurisdictions, you re not just managing servers and APIs. You re dealing with various supervisory authorities, each with its own enforcement priorities. The
Supervisory Authorities & EnforcementThe European Data Protection Board (EDPB) publishes guidelines, adopts consistency findings, and issues opinions. Your team reads them, implements them, and assumes you re aligned with supervisory aut
Supervisory Authorities & EnforcementScope - What This Guide Covers This guide focuses on the new requirement for UK controllers to establish formal data protection complaint handling processes under section 164A of the Data Protection A
Get weekly security insights and compliance updates delivered to your inbox.
Supervisory Authorities & EnforcementThe EDPB and AMLA are drafting Joint Guidelines on sharing information for financial crime prevention without violating data protection laws. Your organization has until 10 July 2027 to establish the
Supervisory Authorities & EnforcementPurpose of the Template Under Article 33 GDPR , you must notify your supervisory authority of personal data breaches within 72 hours. The challenge is that each EU Member State has different requireme
Supervisory Authorities & EnforcementThe EDPB adopted a standardized DPIA template on 10 March 2026, followed by a common breach notification template on 8 June. Both stemmed from the Helsinki Statement, the EDPB s July 2025 commitment t
Supervisory Authorities & EnforcementThe recent EDPB plenary introduced new guidelines that could reshape how you handle anonymisation, web scraping, and blockchain. If you re responsible for data privacy, you re likely wondering how the
Supervisory Authorities & EnforcementThese questions stem from a conversation with a Data Protection Officer (DPO) after the ICO reprimanded the Criminal Records Office. The breach affected over 10,000 people, exposing biometric data and
Supervisory Authorities & EnforcementAn automated system flags a driver s account for low ratings. Within seconds, the account locks. No human reviews the context, no one considers mitigating factors, and the driver s income stops. The D
Supervisory Authorities & EnforcementYour force just approved a live facial recognition trial, believing it ll speed up crime detection. Now, your inbox is flooded with questions, and the ICO s latest audit findings aren t helping. These
Supervisory Authorities & EnforcementThe Conventional Wisdom You ve heard the argument: The US Supreme Court s six-to-three ruling in Trump v. Slaughter overturned nearly 90 years of precedent protecting independent agencies from preside
Supervisory Authorities & EnforcementThe Challenge of Compliance When the EDPB adopted Guidelines 02/2025 on July 7, 2026, it addressed a key issue: can an immutable ledger comply with a regulation that requires data deletion? For your t
Supervisory Authorities & EnforcementWhen a supervisory authority wants to dismiss a privacy complaint on procedural grounds and another authority objects, you re seeing Article 65(1)(a) GDPR at work. The EDPB s binding decision from 28
Supervisory Authorities & EnforcementWhen a complaint involves multiple regulators, such as GDPR intersecting with consumer protection or financial services oversight, you face a coordination challenge. The EDPB has called for clearer le
Supervisory Authorities & EnforcementThe challenge isn t whether you can rely on legitimate interests for AI web scraping. It s that many teams treat the legitimate interests assessment like a checkbox exercise rather than a defensible c
Supervisory Authorities & EnforcementWhat happens when you scrape 20 years of internet data to train a generative AI model and then discover you can t identify a lawful basis that holds up under scrutiny? This isn t hypothetical. The Eur
Supervisory Authorities & EnforcementThe European Data Protection Board (EDPB) published draft Guidelines 02/2026 on Anonymisation on 7 July 2026, and they re not a gentle update. If you ve been treating anonymisation as a one-time techn
Supervisory Authorities & EnforcementWhen Geoffrey Smith accessed 490 personal records at Herefordshire Council over four days, he didn t hack into the system. He used his legitimate access to view sensitive information like children s m
Supervisory Authorities & EnforcementThe EDPB recently released draft Guidelines 02/2026 on Anonymisation for public consultation. Since then, I ve been hearing the same questions from DPOs and privacy leads trying to understand the impa
