DPO Advisor

Find everything you need to stay up-to-date on evolving privacy & security regulations around the world

Imgur Ceases UK Operations After ICO Fine Warning

November 25, 2025

Imgur has ceased operations in the UK after the Information Commissioner’s Office (ICO) warned of a fine over its handling of children's data. UK users are now blocked, with the ICO confirming its investigation is ongoing despite Imgur's "commercial decision" to exit.

Apple's New App Review Guidelines Restrict Sharing Personal Data with Third-Party AI

November 24, 2025

Apple updated its App Review Guidelines, requiring apps to disclose and get user permission before sharing personal data with third-party AI, aligning with GDPR and CCPA to boost user data control.

European Commission Presents Digital Omnibus Package, Proposing Updates to GDPR and Other Digital Regulations

November 19, 2025

On November 19, 2025, the European Commission unveiled its Digital Omnibus Package, a major update to EU digital regulations. It aims to simplify rules, reduce burdens for businesses, and enhance legal certainty, proposing significant changes to data protection, cookie rules, cybersecurity, and the EU AI Act.

Brussels' Take: Three Main Topics from Congress 2025

November 17, 2025

Isabelle Roccia, IAPP Europe MD, highlighted three themes from the 2025 Data Protection Congress: job descriptions, tech-value integration, and simplification. She also mentioned the EU's new GDPR Procedural Regulation, designed to improve cross-border enforcement.

Telecommunications Operator Fined €4.5 Million for GDPR Violations

November 14, 2025

A Croatian telecommunications operator was fined €4.5 million by the data protection agency for General Data Protection Regulation violations, including unlawful data transfers, processing sensitive employee data without legal basis, and failing to properly vet a data processor.

Austria’s DSB finds that Microsoft violated EU privacy law in educational deployment

October 23, 2025

Austria’s DSB found Microsoft violated the GDPR by tracking students via its 365 Education tools without proper consent. The case highlights strict privacy rules for tech platforms handling minors’ data in EU schools.