The Spanish Data Protection Authority sanctions Vodafone with 1.05 million and Amadeus with 14.4 million euros for violating the RGPD in the processing of personal data.
Companies processing personal data, especially large technology and telecommunications corporations
Entities that own health data must describe their datasets with standardized metadata to facilitate secondary use in research and health policies in the EU.
Hospitals, insurers, laboratories, clinical registries and entities with electronic health data
Messaging apps without phone numbers will be able to analyze content to detect child sexual abuse. This is a temporary exception to European privacy rules.
Providers of encrypted messaging apps and interpersonal communications operating in the EU
The EU establishes the operating rules for MyHealth@EU, the system that allows citizens to access their medical records in any European country.
National health systems, healthcare professionals, patients and health entities in the EU
The CNMC and AEPD formalize their cooperation to jointly supervise digital platforms, telecommunications and audiovisual media. They will share information and coordinate decisions in these sectors.
Digital platforms, telecommunications operators and audiovisual media supervised by CNMC and AEPD
New UN convention that facilitates cooperation between countries to prosecute computer crimes and share digital evidence in criminal investigations.
Technology companies, digital service providers, telecommunications and judicial authorities
The EU establishes the body that will coordinate the shared use of health data among member states. It will regulate access to medical records and health data at European scale.
Hospitals, insurers, pharmaceuticals, researchers and health sector technology companies
The EU and Iceland agree to share flight booking data (PNR) to combat terrorism and serious crimes. It affects travelers flying between both territories.
Airlines with EU-Iceland routes, air passengers and security authorities
The European Commission denies registration of a citizen initiative requesting a halt to mandatory digital identity and age verification on the internet. Without registration, the initiative cannot officially collect sig...
European citizens, initiative promoters, digital platforms and internet users
The Commission establishes internal rules on how it manages personal data in its investigations into large digital platforms. It allows restricting certain rights of affected individuals during those investigations.
Technology companies investigated under the DMA and individuals whose data is processed by the Commission in those proceedings