The UK government has come under fire for launching a countrywide "test and trace" program without completing a Data Protection Impact Assessment (DPIA), a mandate required under the EU's General Data ...

The UK’s data protection regulator has made scores of urgent recommendations to the Department for Education (DfE) after an audit revealed it is failing to meet legal obligations enshrined in the GDPR ...

The General Data Protection Regulation (GDPR) implemented in May 2018 stands as a landmark regulatory framework aimed at protecting personal data and privacy for individuals within the European Union ...

On 26 July 2022, the Lower Saxony data protection authority ("Lower Saxony DPA") announced that it has imposed a fine of 1.1 million euros on Volkswagen ("VW") due to GDPR violations. It found that VW ...

With Facebook investigating how a software flaw exposed the accounts of some 50 million of its users, European regulators are already asking for answers and gearing up for possible legal action ...

Mark manages all aspects of editorial on MarketingTech as Editor, including reporting on the fast-paced world of digital marketing and curating the site’s network of expert industry contributions.

Businesses that have personal data stolen from them by hackers can expect other aspects of their compliance with data ...

German auto giant Volkswagen has agreed to pay 1.1 million euros (U.S. $1.1 million) to resolve allegations of violating the General Data Protection Regulation (GDPR) when a camera on one of its test ...

Amazon reportedly faces a fine of more than $425 million under the GDPR that would show EU regulators firmly have Big Tech companies—and their practices—in their crosshairs.

Even though 88% of businesses spend over €1 million on GDPR compliance and 40% invest up to €10 million, 80% of their employees still ignore basic password security practices. The formal risk is ...

British Airways could face fines under GDPR for the data breach it reported last week. It depends on whether the airline had measures in place to forestall such an attack.

The General Data Protection Regulation (GDPR) significantly expanded the territorial scope of EU data protection law. This was intended to ensure comprehensive protection for EU data subjects’ rights ...