Following the publication of stolen data from Berlin’s administration, a central crisis unit led by the Chief Digital Officer has been established to coordinate the response. Police, cybersecurity authorities, data protection officials and affected government departments are jointly assessing the leaked information and potential risks. IT forensic investigations remain ongoing, with security-critical data and organisations […]
Around 241,000 Uber drivers across Europe and the UK are represented in a landmark collective action filed in Amsterdam over AI-driven pay and job allocation. Drivers allege Uber’s opaque algorithm profiles their behaviour to determine the lowest fare an individual driver may accept, potentially offering different pay for the same trip. The lawsuit claims this […]
Google now allows users to log in via a selfie video, with the company storing this biometric data centrally. With each new login attempt, a live video is compared against the original stored on Google’s servers. While Google claims that the videos are stored encrypted and that movement prompts protect against deepfakes, this development raises […]
The Norwegian Data Protection Authority and the Norwegian Directorate of Health present a practical framework for privacy-friendly AI chatbots in the public sector. AI chatbots can provide citizens with faster access to reliable health information, provided that privacy by design is central. The report concludes that user queries generally cannot be considered anonymous, meaning the […]
The European Commission’s DG CONNECT disclosed nine documents in response to an access-to-documents request, but all were already publicly available resources. No Data Protection Impact Assessment (DPIA), internal privacy-by-design documentation, threat models, or controller-role assessments were released. DG CONNECT stated it does not hold a DPIA, arguing that responsibility lies with the future publisher of […]
A new US Supreme Court ruling questions the independence of the FTC, undermining a key legal pillar of the EU-US Data Privacy Framework (DPF) according to privacy group noyb. Max Schrems argues that the European Commission relied on the FTC’s independence hundreds of times, meaning the legal basis for unrestricted EU-US personal data transfers has […]
In 2025, the Dutch Data Protection Authority (AP) received over 13,500 privacy complaints and tips, a 75% increase compared to 2024. Most complaints concerned organisations providing insufficient explanations regarding the use of personal data or refusing to delete data. Data breaches also generated many reports; the healthcare sector was the frontrunner, partly due to the […]