Data Protection. AI. Cybersecurity. Compliance. Expert insights that turn complexity into clarity.
While regulations shift and threats evolve, the gap between legal obligation and practical action grows wider every day. The FIRST PRIVACY experts break down demanding topics – with sharp analysis, actionable guidance, and a clear view of what actually matters for your organisation.
Over the past few months, the UK Information Commissioner’s Office (ICO) has issued a series of enforcement actions that underscore a recurring regulatory concern: data breaches that, in the ICO’s view, were not merely accidental but the result of organisations [...]
In September 2021 an investigation was started by the Irish Data Protection Commission (DPC), as Lead Supervisory Authority, to verify TikTok’s compliance with GDPR obligations in terms of: verification of age requirements for users under 13 or 18 years [...]
Are companies always responsible if their employees cause a data breach under the General Data Protection Regulation (GDPR)? According to a recent decision by the Belgian Data Protection Authority (DPA), the answer appears to be yes, or at least in most case [...]
The recent ruling of the European Court of Justice (ECJ) of 27 February 2025 (C-203/22 - Dun & Bradstreet Austria GmbH) clarifies that data subjects have a comprehensive right to information pursuant to Art. 15 para. 1 lit. h GDPR, in particular w [...]
In a decision dated December 2024, the Italian Data Protection Authority (Garante) imposed a fine of 70,000 euros on a credit rehabilitation company for multiple violations of the General Data Protection Regulation (GDPR). While the monetary penalty addresse [...]
The Italian Data Protection Authority (Garante) recently issued a significant decision, imposing a fine of 50,000 euros on a company for unlawful employee monitoring through GPS tracking systems. The sanction followed an investigation into the company’s [...]
Over recent years, Germany has taken significant strides in legislating accessibility for both public and private sectors. The German Disability Equality Act (BGG) laid the groundwork by providing a framework to support the participation of people with disabi [...]
Spanish football club Atlético Osasuna introduced a facial recognition system for stadium access, sparking a GDPR complaint. The case highlights the challenges of biometric data processing, questioning its legality under the GDPR. The issue goes beyond [...]
