EDPB Data Protection
Material regulatory developments from European Data Protection Board are tracked daily by Cresthaven Analytics. Over the last 90 days, 8 material briefs relevant to professionals operating in the technology, ai & competition sector have been published below. Each brief is sourced directly from the primary regulatory feed, summarized for institutional readers, and scored for materiality.
Recent material activity
A selection of recent published briefs; this is not a complete archive.
Irish DPC fines Google 403 million EUR for GDPR location data violations and orders compliance within six months
The Irish Data Protection Commission fined Google Ireland Limited 403 million EUR on 21 September 2026 for GDPR violations across three location data features. The decision also carries a compliance order requiring Googl…
Read the full EDPB Data Protection brief →Spanish DPA fines Securitas Direct 100,000 EUR for directing data subjects to a chargeable rights-exercise channel
The Spanish Data Protection Authority (Agencia Española de Protección de Datos, AEPD) fined Securitas Direct 100,000 EUR on 1 February 2023 for violating the GDPR requirement that data subject rights be exercisable free …
Read the full EDPB Data Protection brief →EDPB adopts five-step fining methodology guidelines and finalises DSA-GDPR interplay guidance for EU data protection authorities
The European Data Protection Board (EDPB) adopted two sets of guidelines at its September 21, 2026 plenary. The first establishes a five-step methodology for national Data Protection Authorities (DPAs) when deciding whet…
Read the full EDPB Data Protection brief →CNIL fines EXTIA 300,000 EUR for systemic failure to process and respond to erasure requests
The CNIL imposed a 300,000 EUR administrative fine on EXTIA on 21 July 2026 for breaching GDPR obligations on transparency and the right to erasure. The fine followed an April 2025 audit conducted under the European Data…
Read the full EDPB Data Protection brief →EDPB calls on the European Commission to legislate a legal basis for cross-regulatory information sharing among EU regulators
The European Data Protection Board, meeting in Dublin on 16 and 17 July 2026, formally called on the European Commission to propose a legal basis enabling regulators to exchange confidential enforcement-relevant informat…
Read the full EDPB Data Protection brief →EDPB binding decision overrides Belgian DPA dismissal and mandates merits review of NOYB cookie banner complaint against VRT
The EDPB published on July 14, 2026 a binding decision dated May 28, 2026, requiring the Belgian DPA to assess on the merits a cookie banner complaint filed by NOYB against public broadcaster VRT. The Belgian DPA's proce…
Read the full EDPB Data Protection brief →EDPB adopts draft guidelines on anonymisation and AI web scraping, finalises blockchain guidance, with comment period to 30 October 2026
The European Data Protection Board adopted two sets of draft guidelines on July 8, 2026: one clarifying the legal standard for anonymous data and one addressing GDPR compliance for web scraping used in generative AI trai…
Read the full EDPB Data Protection brief →EDPB and AMLA announce joint guidelines on AML information sharing and data protection, with public consultation planned for H1 2027
The European Data Protection Board and the Anti-Money Laundering Authority announced on July 1, 2026 that they will develop Joint Guidelines on information sharing under the AML Regulation. The guidelines will address ho…
Read the full EDPB Data Protection brief →
Get every EDPB Data Protection brief delivered the day it lands
From $149/month
Cresthaven Analytics monitors European Data Protection Board continuously, applying institutional materiality scoring to every release. Subscribers receive structured briefs via email, portal, and (Professional tier and above) real-time alerts.
View all tiers →