The Dutch Data Protection Authority (AP) has published its enforcement policy after receiving questions from organizations about how it conducts proceedings against those suspected of violating privacy rules.
Poland's data protection authority (UODO) and the Social Insurance Institution (ZUS) will co-host a free seminar on September 24, 2026, on controller responsibilities for collecting, storing, and disclosing personal data in digital administration. The event is not a new rule, but it signals UODO's current supervisory priorities, including lawful processing and digital sovereignty in the age of AI. Compliance teams with Polish operations should treat it as an informal view into regulatory expectations.
Spain's National Commission on Markets and Competition (CNMC) has approved two methodologies for assessing cybersecurity risks and classifying attacks on electricity networks, a step toward identifying the companies that will face additional security requirements under European Union rules.
The UK Information Commissioner's Office (ICO) has confirmed a live investigation into whether Police Scotland is meeting its legal obligations when handling subject access requests (SARs), including statutory response timescales. Although the matter concerns a law enforcement body, it signals continued regulatory focus on SAR compliance that financial institutions should treat as a prompt to review their own processes.
Moody’s Investors Service Middle East reported seven incidents of inadvertent data disclosure to Dubai’s financial regulator over a period of nearly two and a half years. Four involved confidential information reaching recipients outside the company. During that period, the credit rating agency had discontinued using a data security tool without immediately replacing it.
The Office of the Australian Information Commissioner (OAIC) received 667 notifications between January and June, compared with 662 in the preceding reporting period. Figures released Monday show that breaches involving large numbers of people became considerably more frequent, even as organizations improved the speed with which they identified incidents.
A New Mexico judge has ordered Meta Platforms to pay $25 billion in civil penalties after a jury found that Facebook repeatedly misled consumers about their personal information and the company's handling of harmful content. The judgment, issued Wednesday, is among the largest financial penalties ever imposed on a U.S. corporation.
Access Login