New adequacy decision for Brazil
The EU Commission adopted an adequacy decision for Brazil in its implementing decision of 26 January 2026. This means that personal data can
Month: February 2026
CNIL imposes fine of €3.5 million: Failure to conduct a DPIA can be costly
France’s data protection authority, CNIL, fined a company €3.5 million for, among other things, failing to conduct a data protection impact assessment (DPIA). What
Improper use of data by a processor: CNIL imposes million-euro fine
In December 2025, the French data protection authority CNIL imposed a fine of €1 million on Mobius Solutions, an IT service provider
Google reCAPTCHA: New GDPR responsibility
From 2 April 2026, Google will take on a new GDPR role for reCAPTCHA. Instead of acting as a controller, Google will act as