GDPR EDPB Targets Automated Hiring Decisions in 2027: How Employers and HR Tech Vendors Should Prepare
Europe’s data protection authorities have picked their next joint target: automated decision-making in recruitment, including AI-driven screening tools.
Latest from the Privacy Desk
All dispatches →
DATA Sweden’s IMY Maps the GDPR and ePrivacy Rules for Location-Based Messages to Phones Without an App
Walk into a store, an airport or a hospital, and your phone gets a message about a gate change, a walking route…
AI Hamburg’s Data Protection Authority Shows Its Work: Lessons From the LLMoin Chatbot Case Study
Most regulator publications about generative AI tell organizations what could go wrong.
GDPR Spain and Greece’s Privacy Regulators Say a Secure Processing Environment Is Only as Strong as Its Provider’s Control
On November 5, 2026, Spain’s Agencia Española de Protección de Datos (AEPD) and Greece’s Hellenic Data Protection Authority (HDPA) published a joint…
DATA UK and Brazil Are Talking About Data-Transfer Arrangements. That Is Not an Adequacy Decision
On November 5, 2026, the United Kingdom and Brazil published a joint statement that sounded bigger than it is.
GDPR Google Fonts Claim Mills Hit a Wall: EU Advocate General Says Self-Inflicted GDPR Violations Earn No Damages
For four years, German website owners have been receiving letters that follow a script.
GDPR Europe’s Privacy Regulators Built a Classroom. What the EDPB’s Privacy for Kids Hub Tells Companies About Children’s Data
Europe’s data protection authorities have spent years fining platforms over how they treat children’s data.
AI Bavaria’s Privacy Regulator Puts AI Agents on Its 2027 Audit List: What Its New GDPR Guidance Asks
Bavaria’s data protection authority for the private sector has told companies where it will be looking next year.
AI After the AI Omnibus: Where the EU AI Act and GDPR Now Meet, Article by Article
The EU AI Act was never meant to replace the GDPR, and the July 2026 amendments make that explicit in the text.
GDPR The EDPS Sets Its Terms for Sharing EU Border Data With the US
The European Data Protection Supervisor has warned again that sharing border and visa data with the United States must come with safeguards…
COOKIES The Fnac App Asked, Users Said No, and the Tracker Kept Running: Inside the CNIL’s €7 Million Fine
France’s data protection authority, the CNIL, has fined two Fnac companies a combined €7 million over a tracker in the retailer’s mobile…
GDPR Lithuania’s Regulator Publishes a Method for Rating Data Breach Risk: How to Use It in the First 72 Hours
Every data breach under the GDPR forces the same decision within days: is this a breach we only record, one we report…
GDPR Explicit GDPR Lawful Basis Statements: What Articles 13 and 14 Require in Your Privacy Notice
In January 2023, Ireland’s Data Protection Commission fined Meta a combined 390 million euros over how Facebook and Instagram handled personal data…