EDPO (European Data Protection Office)

“The European Data Protection Supervisor (EDPS) has issued Opinion 18/2026 on the European Commission’s Proposal for a Regulation on the European Union Agency for Law Enforcement Cooperation (Europol), which would replace the current Europol Regulation, Regulation (EU) 2016/794. The Proposal aims to strengthen the legal framework of Europol and to reinforce the Agency’s role as an EU information hub, operational hub, and technology and innovation hub, in response to the evolution of cross-border criminal threats and the operational needs of Member States. The envisaged substantial expansion of Europol's tasks and data-processing capabilities would increase the volume of personal data processed. It would also introduce new, more complex processing operations concerning additional categories of personal data and of data subjects, including individuals with no established links to criminal investigations or proceedings. Wojciech Wiewiórowski, Supervisor, said: ‘Modern security threats demand sophisticated responses, but we cannot sacrifice fundamental rights in pursuit of security. This Proposal creates serious risks, particularly regarding the processing of the personal data of individuals with no established criminal links. The Proposal must provide robust safeguards and real oversight.’” Press release: https://lnkd.in/dBus7FXZ #Privacy #GDPR #EUROPOL #EDPS Subscribe to EDPO's newsletter here: https://lnkd.in/dwK8sde *This opinion was not written by EDPO. The opinions and views of the author(s) do not necessarily reflect those of EDPO.

“The European Data Protection Supervisor (EDPS) has issued Opinion 17/2026 on the European Commission’s Proposal for a Regulation amending Regulation (EU) 2018/1725, the EU Data Protection Regulation, which governs the processing of personal data by the Union’s institutions, bodies, offices and agencies.   The Proposal aims to streamline and ensure consistency of the data protection framework applicable to the processing of operational personal data by EU Justice and Home Affairs (JHA) agencies and bodies, including Europol, Eurojust, the European Public Prosecutor’s Office (EPPO) and, to a limited extent, the European Border and Coast Guard Agency (Frontex).   Wojciech Wiewiórowski, Supervisor, said: ‘A consistent and effective data protection framework for EU JHA agencies is something we have long called for, and we therefore welcome the objective of this Proposal. However, such an objective can only be achieved with effective supervision and enforcement. This Proposal represents an important opportunity to address existing challenges in this regard and to strengthen the application of the rules. This opportunity should not be missed’.” Please find the Opinion here: https://lnkd.in/e2RMb8Vz , and the Proposal here: https://lnkd.in/e84Y3nTw #Privacy #EUDPR #DataProtection #EDPS #EDPO Subscribe to EDPO's newsletter here: https://lnkd.in/dwK8sde *This article was not written by EDPO. The opinions and views of the author(s) do not necessarily represent those of EDPO. https://lnkd.in/eaDngCw4

Compliance isn’t just European, it’s global. Expanding to new markets like Brazil? Laws may be inspired by GDPR, but each country has its own twists. And often, a local representative is required, miss that, and your expansion could face delays. EDPO helps organisations navigate this complexity in the EU, UK, Switzerland and Monaco, keeping them reachable, and accountable across borders. #EDPO #GlobalCompliance #GDPR #LGPD #RepresentativeServices #AIRegulation

“Uber Freight is investigating a data security incident involving unauthorized access to a portion of its systems and repositories, a company spokesperson said on Tuesday. There has been ‘no impact to Uber Freight's business operations, which continue in the normal course without disruption,’ spokesperson Sam Hallock said. ‘Our systems are secure and fully operational’.” #Privacy #GDPR #DataProtection #Uber #DataSecurity #EDPO Subscribe to EDPO's newsletter here: https://lnkd.in/dwK8sde *This article was not written by EDPO. The opinions and views of the author(s) do not necessarily represent those of EDPO. https://lnkd.in/e4W965gm

"The recruitment industry has undergone a profound transformation, with artificial intelligence (AI) moving from a novelty to the heart of hiring decisions.   The consequences for workers and employers alike are only beginning to be understood. Today, an estimated 90% of employers use some form of automated or algorithmic system to prioritise, rank, or deselect candidates.   For the millions of people who apply for jobs each year, this means that a machine - not a person - is likely to be the first, and sometimes the only, entity to evaluate their qualifications, their experience, and their suitability for a role." #privacy #GDPR #dataprotection #hr #recruitment   Subscribe to EDPO's newsletter here: https://lnkd.in/dwK8sde   *This article was not written by EDPO. The opinions and views of the author(s) do not necessarily represent those of EDPO. https://lnkd.in/ekWw5xAs

In case you missed it: Here is a brief recap of the news and updates we shared last week. - Luxembourg’s data protection authority, the CNPD, turned down more than a quarter of all “right to be forgotten” requests in 2025, with 228 of 845 complaints not honoured. [1] - The European Data Protection Board asked the European Commission to closely assess the impact of the US Supreme Court’s Trump v. Slaughter decision on the EU-US Data Privacy Framework, including the Federal Trade Commission’s ability to uphold DPF commitments. [2] - European privacy watchdogs increased scrutiny of smart glasses, with an EDPB report expected by the end of summer and concerns raised about devices that can capture, process and interpret data in real time. [3] - The UK Information Commissioner’s Office criticised the Metropolitan Police over data protection failings after personal details of a stalking victim were sent to the defendant, ordering urgent improvements to policies and training. [4] - Serbia’s Ministry of Justice published a draft Law on Personal Data Protection for public consultation, proposing a restructured and expanded framework seven years after the current law took effect. [5] References: [1] Luxembourg data watchdog rejects record number of “right to be forgotten” requests: https://lnkd.in/eRHMB5ZX [2] EDPB asks formal questions on EU-US Data Privacy Framework after Trump v. Slaughter decision: https://lnkd.in/d4cv8ggt [3] European privacy watchdogs scrutinise smart glasses: https://lnkd.in/d_fARrWy [4] Metropolitan Police criticised by ICO over data protection failings: https://lnkd.in/e3as432d [5] Serbia publishes draft Law on Personal Data Protection for public consultation: https://lnkd.in/dxxdT84c #privacy #GDPR #dataprotection #EDPO Subscribe to EDPO’s newsletter here: https://lnkd.in/dwK8sde *These articles were not written by EDPO. The opinions and views of the author(s) do not necessarily represent those of EDPO.

“Ireland’s Data Protection Commissioner (DPC) plans to fine the US company behind the popular Tinder dating app between €8m and €11m for alleged compliance breaches of the EU’s data protection regulations.   The Dallas-based Match Group owns Tinder and a slew of other dating and social apps. It has insisted it will continue to ‘vigorously’ defend the DPC’s findings.   The DPC is likely to finalise its decision within the next couple of weeks.   The proposed fine is much less than the up to $60m (€52m) Match Group had previously warned investors it could be facing.” #Ireland #GDPR #dataprotection #DPC #Tinder #EDPO Subscribe to EDPO's newsletter here: https://lnkd.in/dwK8sde *This article was not written by EDPO. The opinions and views of the author(s) do not necessarily represent those of EDPO. https://lnkd.in/epkMDv2g

Being ISO 27001 certified isn’t just a certificate. It’s a daily commitment to handle sensitive information with rigor, consistency, and internationally recognized standards. At EDPO, ISO 27001 shapes everything we do, from managing documents and data, to monitoring processes and continuously improving how we operate. For our clients, it’s a visible signal that their data is handled seriously, securely, and that trust isn’t assumed, it’s earned. ISO 27001 isn’t a one-time stamp. It’s embedded in the way we work every single day. #EDPO #ISO27001 #DataProtection #InformationSecurity #TrustByDesign #EUCompliance

"On 30 July, the Ministry of Justice of the Republic of Serbia published a draft Law on Personal Data Protection and opened it for public consultation through 10 Sept.    Roughly seven years since the current Law on Personal Data Protection took effect, the draft grows from 102 to 175 articles, restructures the law and legislates in areas the 2018 version never contemplated. While the draft remains subject to change, there are some significant novelties to consider." #privacy #GDPR #dataprotection #Serbia Subscribe to EDPO's newsletter here: https://lnkd.in/dwK8sde *This article was not written by EDPO. The opinions and views of the author(s) do not necessarily represent those of EDPO. https://lnkd.in/dxxdT84c