Rie Aleksandra - DPO Hub (Page 2)

AI (Act) resources

members – 23 min read

🇪🇸 shares interactive AI Act guide + internal AI policy | Digital Omnibus on AI Regulation Proposal published! | 🇬🇬 ODPA with practical 10-step AI guidance | EDPS EUDPR guide: AI Systems Risk Management

Nov 26, 2025

Norway DPA fines Grindr NOK 65 million for invalid consent

members – 3 min read

🔥 25 Nov: Grindr won't appeal after the Borgarting Court of Appeal upheld the record NOK 65m (~€5.5m) fine against them for disclosing users' special category personal data to third parties for behavioural advertising without a valid consent.

Nov 25, 2025

The European Data Protection Supervisor – EDPS

members – 2 min read

New TechSonar report out – trends 2025/2026: Agentic AI, AI companions, Automated proctoring, AI-driven personlised learning, Coding assistants, Confidential computing. Overview page for all things EDPS.

Nov 25, 2025

Welcome! Start here 👇

members – 2 min read

Bumping this as reminder – to make the most out of your subscription, read through this post: How to use DPO Hub effectively and find your way around.

Nov 23, 2025

National DPA news (2025)

members – 5 min read

Nov 19, 2025

CJEU C-654/23 Inteligo Media 13 Nov 2025

members – 7 min read

If a user creates a free account and gets access to articles, newsletters and the option to pay for further content, this falls under Art. 13(1) and (2) ePD as 'sale of a service' and 'direct marketing', and you don't need a legal basis under Art. 6 GDPR, in line with Art. 95 GDPR.

Nov 13, 2025

EDPB meeting minutes 7-8 Oct 2025

members – 3 min read

Nov 9, 2025

EDPB meeting minutes 11 Sep 2025

members – 2 min read

DSA ↔ GDPR interplay guidelines | 🇧🇷 Brazil & 🇬🇧 UK adequacy decisions | Helsinki Statement – practical implementation & Commission on simplifying breach reporting | EDPS C-413/23 update | BCRs: 🇮🇪 Shopify, 🇱🇺 Northern Trust, Ferrero Group, 🇳🇴 Mowi.

Nov 8, 2025

Adequacy decisions

members – 3 min read

5 Nov: EDPB Opinion on 🇧🇷 Brazil draft adequacy decision – up next: Member States reps approval and EP "right of scrutiny" | 20 Oct: EDPB adopts opinions on UK GDPR & LED | 16 Sep: Republic of Korea EU adequacy decision.

Nov 5, 2025

CJEU C-413/23 P EDPS v SRB (Concept of personal data) 4 Sep 2025

members – 6 min read

Pseudonymised data isn’t always personal in every case to everyone – but measures must be effective. Comments are personal by nature – no need to assess content, purpose or effects. Whether a person can be identified must be assessed from the controller’s perspective, when collecting the data.

Nov 2, 2025

CJEU T-553/23 Latombe v Commission 3 Sep 2025

members – 4 min read

🔥 Latombe to appeal! New CJEU case number: C-703/25 P | "The General Court dismisses the action for annulment" and the EU-US DPF remains valid.

Oct 31, 2025

UK ICO fines Capita £14 million for breach after weak security and slow reaction

members – 8 min read

After first flagging a fine with a potential starting point of £97m, the 🇬🇧 DPA heavily reduced it after several mitigating factors we can all learn from. A decision packed with practical lessons for DPOs, data protection and security teams alike!

Oct 26, 2025