Skip to content

Topic

Data Protection Enforcement

Regulatory fines, investigations, and legal actions by privacy authorities worldwide against organizations violating personal data protection laws.

Current stories

productOne report1 publisher

Paris prosecutors open a criminal inquiry into women filmed by camera glasses

France's data regulator has fewer than 10 workplace complaints about smart glasses on file and says a recording light is not adequate notice on its own. Companies are already asking it whether they can ban the glasses at the door.

Publishers:thenextweb.com

Reality

Evidence52
Adoption61
Hype gap+18
Incentives58
Confidence47
buildOne report1 publisher

Companies are asking France's CNIL whether they can bar smart glasses from their premises

Paris prosecutors have opened at least one criminal case over street videos of women filmed without consent. The data regulator has fewer than ten workplace complaints on file and a growing queue of employers asking about bans.

Publishers:mezha.net

Reality

Evidence45
Adoption55
Hype gap+10
Incentives60
Confidence50
leadershipOne report1 publisher

Swansea study puts 86% of licensed British gambling sites in breach of cookie consent rules

The ICO counts cookie compliance among the country's most visited websites, while Swansea researchers tested 624 licensed gambling sites against a different measure, and the enforcement record in that sector runs to a single reprimand.

Publishers:theguardian.com

Reality

Evidence57
Adoption68
Hype gap+19
Incentives62
Confidence56
buildOne report1 publisher

The ICO fines what you cannot prove: Article 32 makes encryption and erasure an engineering liability

A dev.to guide reads the 2024-25 ICO record as a demonstrability test: over 12 million pounds in fines landed on breached organisations that could not show their controls. The arithmetic lands in the backlog.

Publishers:dev.to

Reality

Evidence36
Adoption
Not scored
Hype gap+31
Incentives
Not scored
Confidence34
productOne report1 publisher

Brazil fined ByteDance for data it took from users who never logged in

The R$153.7m penalty covers guest browsing, so the breach is the collection rather than the age check. Every remedy the agency ordered except the deletion applies only to accounts.

Publishers:thenextweb.com

Reality

Evidence58
Adoption34
Hype gap+8
Incentives42
Confidence55
securityOne report1 publisher

One vendor, 19 million patients: the MyDr breach is a lesson in whose perimeter matters

Polish authorities are investigating a compromise at clinical software supplier MyDr that may have exposed data on nearly 19 million people and more than 12,000 medical facilities.

Publishers:therecord.media

Reality

Evidence54
Adoption66
Hype gap+22
Incentives68
Confidence55