DPO Advisor

Find everything you need to stay up-to-date on evolving privacy & security regulations around the world.

Region

regulation

Ireland appoints former tech-industry lobbyist to Data Protection

September 17, 2025

Ireland appointed ex-Meta policy head Niamh Sweeney as DPC commissioner, sparking debate over GDPR oversight independence. Civil groups urged the EU to review the move, citing concerns about tech influence on enforcement.

SHEIN fined €150 million by CNIL for cookie consent violations

September 7, 2025

France’s CNIL fined SHEIN €150 million for using tracking cookies without valid consent. The probe found incomplete banners and continued tracking after “reject all,” marking a major GDPR enforcement on cookie transparency.

Google fined €325 million by CNIL for ads in Gmail and cookie-consent failings

September 3, 2025

France’s CNIL fined Google €325 million for showing ads in Gmail without consent and setting cookies during sign-ups. The regulator cited GDPR violations on transparency and user choice, giving Google six months to fix its practices.

South Korea fines SK Telecom $97 million for massive data breach

August 28, 2025

South Korea’s PIPC fined SK Telecom $97M after a breach exposed 23M users. The probe found weak encryption and poor security updates, signaling tougher enforcement under the nation’s Personal Information Protection Act.

Meta challenges EU fine over 'pay-or-consent' model under DMA

August 8, 2025

Meta challenges the EU’s DMA ruling and €200M fine, defending its ad-supported or subscription choice against claims it forces users to share data.

Nigeria fines MultiChoice ₦766M for privacy violations and data transfers

July 31, 2025

Nigeria fines MultiChoice ₦766M for intrusive, disproportionate data practices and unlawful cross-border transfers under the Data Protection Act.

California hits Healthline with record $1.55M fine under CCPA

July 25, 2025

California fines Healthline $1.55M under CCPA for sharing data post opt-out, marking record penalty and first health-related CCPA action.

Poland fines McDonald’s over employee data breach

July 23, 2025

Poland’s DPA penalized McDonald’s over a breach exposing employee data via misconfigured servers, citing GDPR failures and poor processor oversight.

Meta shareholders sue Zuckerberg over Cambridge Analytica fallout

July 15, 2025

Minority shareholders file a multi-billion-dollar lawsuit against Mark Zuckerberg and Meta executives over the Cambridge Analytica scandal, citing $8B in fines and legal costs.