Articles: 1-10 of 157
EDPB Weighs In: When Is an E-Commerce Account Truly Necessary?
European Union - December 15 2025 The European Data Protection Board ("EDPB") recently published recommendations relating to mandatory user accounts on e-commerce platforms. These…
CNIL Enforcement: Practical Lessons from the American Express Cookie Fine
European Union, France - December 15 2025 On 30 November 2023, the French Data Protection Authority (the "CNIL") issued a EUR 40,000 fine against American Express Carte France for…
December Data Wrap: A snapshot of key regulatory developments
European Union, France, United Kingdom - December 15 2025 On 30 November 2023, the French Data Protection Authority (the "CNIL") issued a EUR 40,000 fine against American Express Carte France for…
Digital omnibus: a victory for technology or commerciality?
European Union - November 27 2025 The newly published Digital Omnibus Package from the EU Commission is perhaps surprising in the obvious influence of AI and other Technologies such…
Autumn Data Wrap: A snapshot of key regulatory developments
European Union, United Kingdom - November 19 2025 In June 2021, the European Commission adopted two adequacy decisions (the "Adequacy Decisions") for the UK (under the EU GDPR and the Law Enforcement…
EDPB's cautious opinions on Commission's plan to renew UK adequacy decisions
European Union, United Kingdom - November 18 2025 October saw the European Data Protection Board (the "EDPB") adopt its opinions on the European Commission's two draft adequacy decisions regarding…
China’s Revised Cybersecurity Law: Key Changes Enterprises Need to Know
China - November 5 2025 The 2025 revision of China’s Cybersecurity Law (the Amendment) was adopted on October 28, 2025, and will take effect on January 1, 2026. This marks…
China Releases Final Measures on Cybersecurity Incident Reporting
China - September 29 2025 Following our previous article regarding the consultation draft of the Administrative Measures for Reporting Cybersecurity Incidents (https://www…
PDPA fines & firsts: A 6-year timeline of Thailand's Data Privacy Enforcement
Thailand - September 12 2025 From legislative promise to active enforcement, Thailand’s Personal Data Protection Act B.E. 2562 (2019) (as amended) ("PDPA") has reshaped how…
Privacy and Responsible Information Sharing Act: Implications for the Public Sector in Western Australia
Australia - July 29 2025 It is the season for privacy reform! At the federal level, Tranche 1 of reforms to the Commonwealth Privacy Act 1988 (Cth) (Privacy Act) were passed…
About Data Notes
Featured authors
