risk assess

Online Self-Assessment Compliance Tool

Find out how to use our online self-assessment compliance tool to indicate risks of non-compliance with the GDPR.

Information and Data Protection Appeals Tribunal 

Click here for more information about your right to file an appeal from a decision of the Commissioner and the guidelines to file such an appeal.

decision

Decisions


This section lists information about the legally binding decisions taken by the Commissioner.

Latest News & Publications

Cookie regulation: the CNIL imposes two fines on GOOGLE and SHEIN

Cookie regulation: the CNIL imposes two fines on GOOGLE and SHEIN   05 September 2025 The French Data Protection Authority, CNIL, fined GOOGLE Eur325 million and SHEIN Eur150 million, in particular for failing to comply with the rules on cookies. These fines are part of the several measures taken by the CNIL to regulate non-compliant […]

05
Sep

Read More b

Court of Justice clarifies the scope of the concept of personal data in the context of a transfer of pseudonymised data to third parties

Court of Justice clarifies the scope of the concept of personal data in the context of a transfer of pseudonymised data to third parties   04 September 2025 The European Court of Justice set aside the judgment of the General Court which had annulled the decision of the European Data Protection Supervisor. Following the resolution […]

04
Sep

Read More b

Publications

European Court dismisses an action for annulment of the new framework for the transfer of personal data between the EU and the US

European Court dismisses an action for annulment of the new framework for the transfer of personal data between the EU and the US   03 September 2025 In so doing, it confirms that, on the date of adoption of the contested decision, the United States of America ensured an adequate level of protection for personal […]

03
Sep

Read More b

Fundamental Rights Impact Assessment Workshop – Save the date

Fundamental Rights Impact Assessment Workshop – Save the date   03 September 2025 The AI Act introduces new accountability for AI systems, making protection of fundamental rights central. Article 27 requires deployers of certain high-risk systems to conduct a Fundamental Rights Impact Assessment (FRIA). This full-day workshop, organised by the IDPC, explains what is a FRIA, […]

03
Sep

Read More b

IDPC publishes 2024 Annual Report

IDPC publishes 2024 Annual Report   28 August 2025 The Information and Data Protection Commissioner (IDPC) published its Annual Report for 2024 - a year that once again underscored the vital importance of protecting personal data in a rapidly evolving digital world. The report states some key performance figures namely: 883 - Total Complaints received […]

28
Aug

Read More b

European Commission publishes full list of AI companies signed up to Code of Practice

European Commission publishes full list of AI companies signed up to Code of Practice   11 August 2025 The European Commission has published the full list of signatories to the EU's generative AI Code of Practice initiative so far, known also as the Code of Practice for General Purpose AIs (GPAIs). The Code of Practice helps […]

11
Aug

Read More b

Commission presents template for General-Purpose AI model providers

Commission presents template for General-Purpose AI model providers   28 July 2025 The European Commission has published a template to help General-Purpose AI (GPAI) providers summarise the content used to train their model. This template is a simple, uniform and effective manner for GPAI providers to increase transparency in line with the AI Act, including […]

28
Jul

Read More b

EU gives green light to UK’s DUAA adequacy

EU gives green light to UK’s DUAA adequacy   24 July 2025 The European Commission has indicated in a draft decision that the UK remains adequate for EU-UK data flows under the new Data (Use and Access) Act 2025 (DUAA). The draft decisions on adequacy relating to the DUAA, in light of the EU GDPR […]

24
Jul

Read More b

European Commission receives final version of the General-Purpose AI Code of Practice

European Commission receives final version of the General-Purpose AI Code of Practice   14 July 2025 The European Commission has received the final version of the General-Purpose AI Code of Practice, a voluntary tool developed by 13 independent experts, with input from over 1,000 stakeholders, including model providers, small and medium-sized enterprises, academics, AI safety […]

14
Jul

Read More b

Targeted modifications of the GDPR: EDPB & EDPS welcome simplification of record keeping obligations and request further clarifications

Targeted modifications of the GDPR: EDPB & EDPS welcome simplification of record keeping obligations and request further clarifications   09 July 2025 Brussels, 9 July 2025 - The European Data Protection Board (EDPB) and European Data Protection Supervisor (EDPS) issued today a Joint Opinion on the European Commission’s Proposal for a Regulation amending certain regulations, […]

09
Jul

Read More b

Irish Supervisory Authority fines TikTok €530 million for sending EU user data to China

Irish Supervisory Authority fines TikTok €530 million for sending EU user data to China 09 July 2025 The Irish Supervisory Authority (SA) recently fined TikTok €530 million and ordered corrective measures following an Inquiry into transfers of EEA User Data to China. The Inquiry was launched by the Irish SA, in its role as the […]

09
Jul

Read More b
Load More