# Compliance by Design > We help deliver the law into your software product ## Posts - [CSC elects 2nd Deputy Coordinator](https://compliance-by-design.net/2024/08/29/csc-elects-2nd-deputy-coordinator/): The Coordinated Supervision Committee (CSC) has elected Matej Sironic from the Slovenian Data Protection Authority (DPA) as its Deputy Coordinator for a term of two years. Sironic will be the second Deputy Coordinator, and will work along with Sebastian Hümmeler from the Federal German DPA. A second Deputy was elected in order to keep up ... Read more - [EDPB: ‘Consent or Pay’ models should offer real choice](https://compliance-by-design.net/2024/08/29/edpb-consent-or-pay-models-should-offer-real-choice/): Brussels, 17 April – During its latest plenary, the EDPB adopted an Opinion following an Art. 64(2) GDPR request by the Dutch, Norwegian & Hamburg Data Protection Authorities (DPA). The Opinion addresses the validity of consent to process personal data for the purposes of behavioural advertising in the context of ‘consent or pay’ models deployed ... Read more - [EDPB sets out priorities for 2024-2027 and clarifies implementation DPF redress mechanisms](https://compliance-by-design.net/2024/08/29/edpb-sets-out-priorities-for-2024-2027-and-clarifies-implementation-dpf-redress-mechanisms/): Brussels, 18 April – During its latest plenary, the EDPB adopted its strategy for 2024-2027. The strategy sets out the EDPB’s priorities, grouped around four pillars, as well as key actions per pillar to help achieve these objectives. These four pillars are: Pillar 1 – Enhancing harmonisation and promoting compliance   Pillar 2 – Reinforcing a common ... Read more - [EDPB Annual Report 2023: Safeguarding individuals’ digital rights](https://compliance-by-design.net/2024/08/29/edpb-annual-report-2023-safeguarding-individuals-digital-rights/): The EDPB has launched its 2023 Annual Report. The report provides an overview of the work carried out by the EDPB in the previous year and reflects on important milestones, such as the election of Anu Talus as EDPB Chair; the adoption of two binding decisions and one urgent binding decision providing important common interpretations ... Read more - [Europe Day 2024](https://compliance-by-design.net/2024/08/29/europe-day-2024/): Europe Day commemorates the signing of the Schuman Declaration, to celebrate peace and solidarity in Europe. Every year, the EDPB takes part in Europe Day, with an interactive stand manned by volunteers from the EDPB Secretariat and national DPAs, to raise awareness of data protection and to provide information about the EDPB’s activities This year, ... Read more - [EDPB launches French and German versions of its Data Protection Guide for small business](https://compliance-by-design.net/2024/08/29/edpb-launches-french-and-german-versions-of-its-data-protection-guide-for-small-business/): The EDPB Data Protection Guide for small business is now available in French and German The Guide provides practical information to SMEs about GDPR compliance and benefits in an accessible and easily understandable language. The development of tools providing practical, easily understandable and accessible data protection guidance is key to reaching a non-expert audience and ... Read more - [Facial recognition at airports: individuals should have maximum control over biometric data](https://compliance-by-design.net/2024/08/29/facial-recognition-at-airports-individuals-should-have-maximum-control-over-biometric-data/): Brussels, 24 May – During its latest plenary, the EDPB adopted an Opinion on the use of facial recognition technologies by airport operators and airline companies to streamline the passenger flow at airports*. This Article 64(2) Opinion, following a request from the French Data Protection Authority, addresses a matter of general application and produces effects ... Read more - [Zdravko Vukić elected new Deputy Chair of the European Data Protection Board](https://compliance-by-design.net/2024/08/29/zdravko-vukic-elected-new-deputy-chair-of-the-european-data-protection-board/): Brussels, 19 June – During its latest plenary, the Members of the European Data Protection Board (EDPB) elected Zdravko Vukić, Director of the Croatian Personal Data Protection Agency, as Deputy Chair. Vukić replaces Aleid Wolfsen (Chair of the Dutch Data Protection Authority), who has reached the end of his five-year mandate as EDPB Deputy Chair.Over ... Read more - [Coordinated Supervision Committee appoints new coordinator](https://compliance-by-design.net/2024/08/29/coordinated-supervision-committee-appoints-new-coordinator/): The Coordinated Supervision Committee (CSC) elected Fanny Coudert from the European Data Protection Supervisor (EDPS) as its new coordinator for a term of two years. Ms. Coudert succeeds former coordinator Clara Guerra from the Portuguese Data Protection Authority (DPA). Fanny Coudert will lead the work of the Committee with the support of Deputy Coordinators Sebastian ... Read more - [Action taken against Labour Party for failing to respond to requests for personal information on time](https://compliance-by-design.net/2024/08/28/action-taken-against-labour-party-for-failing-to-respond-to-requests-for-personal-information-on-time/): We have issued a reprimand to the Labour Party for repeatedly failing to respond to people who asked it what personal information the party held on them – known as a subject access request (SAR). - [New tool helps small businesses create privacy notices](https://compliance-by-design.net/2024/08/20/new-tool-helps-small-businesses-create-privacy-notices/): We have launched a new, quick and easy-to-use tool to help small organisations and sole traders create a bespoke privacy notice and protect people’s information rights. - [We launch new tool to generate privacy notices](https://compliance-by-design.net/2024/08/20/we-launch-new-tool-to-generate-privacy-notices/): We have launched a new, quick and easy-to-use tool to help small organisations and sole traders create a bespoke privacy notice and protect people’s information rights. - [ICO statement on Meta's ad-free subscription service](https://compliance-by-design.net/2024/08/15/ico-statement-on-metas-ad-free-subscription-service/): “One of our key priorities is to ensure that people’s information rights are upheld by the online advertising industry. - [Porthcawl man sentenced after “brazen” car scam worth hundreds of thousands of pounds](https://compliance-by-design.net/2024/08/13/porthcawl-man-sentenced-after-brazen-car-scam-worth-hundreds-of-thousands-of-pounds/): A man who unlawfully accessed personal data has been sentenced after our investigation. - [Provisional decision to impose £6m fine on software provider following 2022 ransomware attack that disrupted NHS and social care services](https://compliance-by-design.net/2024/08/07/provisional-decision-to-impose-6m-fine-on-software-provider-following-2022-ransomware-attack-that-disrupted-nhs-and-social-care-services/): We have provisionally decided to fine Advanced Computer Software Group Ltd (Advanced) £6.09m, following an initial finding that the provider failed to implement measures to protect the personal information of 82,946 people, including some sensitive personal information.   Advanced provides IT… - [Social media and video sharing platforms put on notice over poor children’s privacy practices](https://compliance-by-design.net/2024/08/02/social-media-and-video-sharing-platforms-put-on-notice-over-poor-childrens-privacy-practices/): We are calling on 11 social media and video sharing platforms to improve their children’s privacy practices. - [EDPB adopts statement on DPAs role in AI Act framework, EU-U.S. Data Privacy Framework FAQ and new European Data Protection Seal](https://compliance-by-design.net/2024/08/01/edpb-adopts-statement-on-dpas-role-in-ai-act-framework-eu-u-s-data-privacy-framework-faq-and-new-european-data-protection-seal/): Brussels, 17 July – During its latest plenary, the European Data Protection Board (EDPB) adopted a statement on the Data Protection Authorities’ (DPAs) role in the Artificial Intelligence Act (AI Act) framework. According to the EDPB, DPAs already have experience and expertise when dealing with the impact of AI on fundamental rights, in particular the ... Read more - [Supporting public authorities to be open and transparent](https://compliance-by-design.net/2024/07/31/supporting-public-authorities-to-be-open-and-transparent/): Around this time last year, I wrote about our new Upstream Regulation team and our focus on supporting public authorities to be open and accountable with the public they serve. - [ICO reprimands the Electoral Commission after cyber attack compromises servers](https://compliance-by-design.net/2024/07/30/ico-reprimands-the-electoral-commission-after-cyber-attack-compromises-servers/): We have issued a reprimand to the Electoral Commission after hackers gained access to servers that contained the personal information of approximately 40 million people. - [ICO takes action against two organisations for "risking public trust" by failing to respond to public requests for information](https://compliance-by-design.net/2024/07/29/ico-takes-action-against-two-organisations-for-risking-public-trust-by-failing-to-respond-to-public-requests-for-information/): We have taken action against two trusted public services after investigations found they’d failed to meet basic information request requirements, as set out under the Freedom of Information Act 2000 (FOIA). - [ICO statement in response to Google announcing it will no longer block third party cookies in Chrome](https://compliance-by-design.net/2024/07/23/ico-statement-in-response-to-google-announcing-it-will-no-longer-block-third-party-cookies-in-chrome/): “We are disappointed that Google has changed its plans and no longer intends to deprecate third party cookies from the Chrome Browser. - [Essex school reprimanded after using facial recognition technology for canteen payments](https://compliance-by-design.net/2024/07/23/essex-school-reprimanded-after-using-facial-recognition-technology-for-canteen-payments/): We have issued a reprimand to a school that broke the law when it introduced facial recognition technology (FRT). - [London Borough of Hackney reprimanded following cyber-attack](https://compliance-by-design.net/2024/07/17/london-borough-of-hackney-reprimanded-following-cyber-attack/): We have issued the London Borough of Hackey with a reprimand following a cyber-attack in 2020 that led to hackers gaining access to and encrypting 440,000 files, affecting at least 280,000 residents and other individuals including staff.  - [Information Commissioner calls for water companies to be crystal clear with public over sewage pollution](https://compliance-by-design.net/2024/07/15/information-commissioner-calls-for-water-companies-to-be-crystal-clear-with-public-over-sewage-pollution/): Water companies must put transparency first if they want to rebuild public trust, we have warned. - [How we help police forces comply with FOIA - and what we do if they don't](https://compliance-by-design.net/2024/07/10/how-we-help-police-forces-comply-with-foia-and-what-we-do-if-they-dont/): The fundamental right to ask questions of and hold public authorities to account is a cornerstone of our democracy. - [Do I really need to read the privacy notice?](https://compliance-by-design.net/2024/07/09/do-i-really-need-to-read-the-privacy-notice/): At the Information Commissioner’s Office (ICO), we are encouraging people to check how an app plans to use their personal information before they sign up. - [DPPC 2024](https://compliance-by-design.net/2024/07/08/dppc-2024/): The Information Commissioner’s Office (ICO) will hold its annual Data Protection Practitioners’ Conference (DPPC) online on Tuesday 8 October. - [ICO statement on its public sector approach trial](https://compliance-by-design.net/2024/06/26/ico-statement-on-its-public-sector-approach-trial/): In June 2022 we revised our approach to working with public sector organisations and started a two-year trial, as set out in our open letter at the time. - [Statement in response to Synnovis cyber attack](https://compliance-by-design.net/2024/06/21/statement-in-response-to-synnovis-cyber-attack/): An ICO spokesperson said: “While we are continuing to make enquiries into this matter, we recognise the sensitivity of some of the information in question and the worry this may have caused. “We would urge anyone concerned about how their data has been handled to check our website for advice… - [Statement in response to Meta's plans to train generative AI with user data](https://compliance-by-design.net/2024/06/14/statement-in-response-to-metas-plans-to-train-generative-ai-with-user-data/): Stephen Almond, Executive Director, Regulatory Risk at the ICO, said:  “We are pleased that Meta has reflected on the concerns we shared from users of their service in the UK, and responded to our request to pause and review plans to use Facebook and Instagram user data to train generative AI.… - [ICO to investigate 23andMe data breach with Canadian counterpart](https://compliance-by-design.net/2024/06/10/ico-to-investigate-23andme-data-breach-with-canadian-counterpart/): The Information Commissioner’s Office (ICO) and the Office of the Privacy Commissioner of Canada (OPC) have launched a joint investigation into the data breach that happened in October 2023 at the global direct-to-consumer genetic testing company 23andMe.  - [Understanding what information people commonly request from public authorities](https://compliance-by-design.net/2024/06/03/understanding-what-information-people-commonly-request-from-public-authorities/): Aiden Clarkson Senior Upstream Regulation Officer – FOI and Transparency People can use the WhatDoTheyKnow (WDTK) website to submit Freedom of Information (FOI) and Environmental Information Regulations (EIR) requests to public organisations.  Working with WDTK, we… - [The General Election and my personal data - what should I expect?](https://compliance-by-design.net/2024/05/30/the-general-election-and-my-personal-data-what-should-i-expect/): The ICO has been working with fellow regulators, and with those organisations and individuals who will be handling your personal information during the upcoming election campaign, to ensure expectations around compliance with the law are clear. - [Registration opens for ICO annual conference](https://compliance-by-design.net/2024/05/26/registration-opens-for-ico-annual-conference/): The Information Commissioner’s Office (ICO) will hold its annual Data Protection Practitioners’ Conference (DPPC) online on Tuesday 8 October. - [First-tier Tribunal ruling on Join the Triboo appeal](https://compliance-by-design.net/2024/05/26/first-tier-tribunal-ruling-on-join-the-triboo-appeal/): We welcome the ruling from the First-tier Tribunal (General Regulatory Chamber) on an appeal from Join the Triboo Limited . The online recruitment firm appealed a fine of £130,000 and an enforcement notice issued by the ICO in April 2023 for sending 107 million spam emails to over 400,000… - [Statement in response to reports of a cyber breach at the Ministry of Defence](https://compliance-by-design.net/2024/05/26/statement-in-response-to-reports-of-a-cyber-breach-at-the-ministry-of-defence/): Our spokesperson said: “The Ministry of Defence has made us aware of this incident and we are assessing the information provided”. Q&A from the Information Commissioner’s Office  What is the ICO’s role after an organisation experiences a cyber attack?  All organisations who are… - [Organisations must do more to combat the growing threat of cyber attacks](https://compliance-by-design.net/2024/05/26/organisations-must-do-more-to-combat-the-growing-threat-of-cyber-attacks/): We are calling for all organisations to boost their cyber security and protect the personal information they hold, amid the growing threat of cyber attacks.   Our own trend data reveals more organisations than ever are experiencing cyber security breaches that put people’s personal… - [Children’s services in Birmingham reprimanded after inappropriately disclosing a child’s personal information](https://compliance-by-design.net/2024/05/26/childrens-services-in-birmingham-reprimanded-after-inappropriately-disclosing-a-childs-personal-information/): We have issued a reprimand to Birmingham Children’s Trust Community Interest Company after the personal information of a child was inappropriately disclosed to another family. - [No regulatory wild west: how the ICO applies the law to emerging tech](https://compliance-by-design.net/2024/05/26/no-regulatory-wild-west-how-the-ico-applies-the-law-to-emerging-tech/): John Edwards, Information Commissioner, delivers speech at the New Scientist Emerging Technogies summit, 15 May 2024. - [Car rental manager fined after unlawfully obtaining customer data](https://compliance-by-design.net/2024/05/26/car-rental-manager-fined-after-unlawfully-obtaining-customer-data/): A former Management Trainee at Enterprise Rent-A-Car UK Limited (“Enterprise Rent-A-Car”) has been ordered to pay a fine after admitting he illegally obtained customer data between 18 March 2019 and 1 April 2019. - [We warn organisations must not ignore data protection risks as we conclude Snap ‘My AI’ chatbot investigation](https://compliance-by-design.net/2024/05/26/we-warn-organisations-must-not-ignore-data-protection-risks-as-we-conclude-snap-my-ai-chatbot-investigation/): ICO concludes investigation into Snap’s approach to assessing the data protection risks of its ‘My AI’ chatbot - [Statement in response to Microsoft Recall feature](https://compliance-by-design.net/2024/05/26/statement-in-response-to-microsoft-recall-feature/): “We expect organisations to be transparent with users about how their data is being used and only process personal data to the extent that it is necessary to achieve a specific purpose.  - [PSNI facing a £750k fine following spreadsheet error that exposed the personal information of its entire workforce](https://compliance-by-design.net/2024/05/26/psni-facing-a-750k-fine-following-spreadsheet-error-that-exposed-the-personal-information-of-its-entire-workforce/): Data breach brought tangible fear of threat to life - [Navigating Compliance in Software Development: A Software Engineering Manager’s Perspective](https://compliance-by-design.net/2024/01/29/navigating-compliance-in-software-development-a-software-engineering-managers-perspective/): As a software engineering manager, one of the key aspects of my role is to ensure that our software products are not only innovative and user-friendly, but also compliant with all relevant legal requirements. This is not just a matter of legal necessity – it’s a smart investment decision that can help us avoid the ... Read more - [Model role: UX researcher](https://compliance-by-design.net/2023/09/28/role-description-archetypical-ux-researcher/): A UX (User Experience) Researcher plays a crucial role in the development of products and services, ensuring that the design and functionality meet the needs, preferences, and limitations of the end-users. By conducting various forms of user testing and analysis, the UX Researcher helps teams to make informed decisions based on user feedback and behavior, ... Read more - [Why Legal Compliance Should Be a Priority for Your Software Products](https://compliance-by-design.net/2023/05/28/why-legal-compliance-should-be-a-priority-for-your-software-products/): Introduction As businesses increasingly rely on software products, it’s important to ensure that legal compliance is a top priority. Failure to comply with legal requirements can lead to costly lawsuits and reputational damage. In this post, we’ll explore why legal compliance is so important and provide some tips for meeting these requirements. The Importance of ... Read more - [Delivering Legal Requirements with Software Products: Best Practices and Tips](https://compliance-by-design.net/2023/05/28/delivering-legal-requirements-with-software-products-best-practices-and-tips/): The Importance of Delivering Legal Requirements with Software Products As software developers and product owners, you understand the importance of delivering high-quality products to your customers. But have you considered the legal requirements that must be met in order to ensure compliance and protect your business? Delivering legal requirements with software products is crucial to ... Read more - [5 Best Practices to Improve Legal Compliance in Software Development](https://compliance-by-design.net/2023/05/28/5-best-practices-to-improve-legal-compliance-in-software-development/): Introduction: Legal compliance is a crucial aspect of software development. Not only does it ensure that your product is in line with regulatory requirements, but it also helps to protect your business from legal penalties and reputational damage. In this blog post, we will explore five best practices that can help you improve legal compliance ... Read more - [Federal Trade Commission Chairman Andrew N. Ferguson Appoints Deputy Directors for the Bureau of Competition and Bureau of Consumer Protection](https://compliance-by-design.net/2025/02/18/federal-trade-commission-chairman-andrew-n-ferguson-appoints-deputy-directors-for-the-bureau-of-competition-and-bureau-of-consumer-protection/): Federal Trade Commission Chairman Andrew N. Ferguson has appointed David Shaw as Principal Deputy Director and Kelse Moen as Deputy Director of the agency’s Bureau of Competition and Douglas C. Geho as Deputy Director of the Bureau of Consumer Protection. View Press Release - [FTC Chairman Ferguson Announces New Policy Regarding American Bar Association](https://compliance-by-design.net/2025/02/14/ftc-chairman-ferguson-announces-new-policy-regarding-american-bar-association/): Today, Federal Trade Commission Chairman Andrew N. Ferguson announced a new policy that prohibits FTC political appointees from holding leadership roles in the American Bar Association (ABA), participating in ABA events, or renewing their ABA memberships. Additionally, the FTC will no longer use its resources to support any employee’s ABA membership or participation in ABA ... Read more - [EDPB publishes CSC biannual report](https://compliance-by-design.net/2025/02/13/edpb-publishes-csc-biannual-report/): Brussels, 13 February – The EDPB published the Coordinated Supervision Committee’s (CSC) biannual activity report (July 2022 – December 2024). Over the last two years, the CSC worked on the integration of the large-scale EU information technology (IT) systems within its scope. During the reporting period, it took over the supervision of the upgraded Schengen ... Read more - [EDPB adopts statement on age assurance, creates a task force on AI enforcement and gives recommendations to WADA](https://compliance-by-design.net/2025/02/12/edpb-adopts-statement-on-age-assurance-creates-a-task-force-on-ai-enforcement-and-gives-recommendations-to-wada/): Brussels, 12 February – During its February 2025 plenary meeting, the European Data Protection Board (EDPB) adopted a statement on age assurance and decided to create a taskforce on AI enforcement. In addition, the Board also adopted recommendations on the 2027 World Anti-Doping Agency (WADA) World Anti-Doping Code. In a statement on age assurance, the ... Read more - [FTC Postpones Workshop on Attention Economy: Monopolizing Kids’ Time Online](https://compliance-by-design.net/2025/02/11/ftc-postpones-workshop-on-attention-economy-monopolizing-kids-time-online/): The Federal Trade Commission is postponing a February 25 virtual workshop examining the use of design features on digital platforms aimed at keeping kids, including teens, online longer and returning more frequently. View Press Release - [FTC Finalizes Order with DoNotPay That Prohibits Deceptive 'AI Lawyer' Claims, Imposes Monetary Relief, and Requires Notice to Past Subscribers](https://compliance-by-design.net/2025/02/11/ftc-finalizes-order-with-donotpay-that-prohibits-deceptive-ai-lawyer-claims-imposes-monetary-relief-and-requires-notice-to-past-subscribers/): The Federal Trade Commission has finalized an order requiring DoNotPay, a company that promoted its online subscription service as “the world’s first robot lawyer,” to stop making deceptive claims about the abilities of its AI chatbot. View Press Release - [FTC Publishes Inflation-Adjusted Civil Penalty Amounts for 2025](https://compliance-by-design.net/2025/02/11/ftc-publishes-inflation-adjusted-civil-penalty-amounts-for-2025/): The Federal Trade Commission has adjusted the maximum civil penalty dollar amounts for violations of 16 provisions of law the FTC enforces, as required by the Federal Civil Penalties Inflation Adjustment Act Improvements Act of 2015. The Act directs agencies to implement annual inflation adjustments based on a prescribed formula. View Press Release - [FTC Chairman Ferguson Appoints Daniel Guarnera as Director of Bureau of Competition](https://compliance-by-design.net/2025/02/11/ftc-chairman-ferguson-appoints-daniel-guarnera-as-director-of-bureau-of-competition/): Federal Trade Commission Chairman Andrew N. Ferguson has appointed Daniel Guarnera as Director of the Bureau of Competition. View Press Release - [FTC Chairman Ferguson Appoints Christopher Mufarrige as Director of the Bureau of Consumer Protection](https://compliance-by-design.net/2025/02/11/ftc-chairman-ferguson-appoints-christopher-mufarrige-as-director-of-the-bureau-of-consumer-protection/): Federal Trade Commission Chairman Andrew N. Ferguson has appointed Christopher Mufarrige as Director of the agency’s Bureau of Consumer Protection. View Press Release - [FTC Chairman Ferguson Appoints Lucas Croslow as General Counsel of the Federal Trade Commission](https://compliance-by-design.net/2025/02/11/ftc-chairman-ferguson-appoints-lucas-croslow-as-general-counsel-of-the-federal-trade-commission/): Federal Trade Commission Chairman Andrew N. Ferguson has appointed Lucas Croslow as General Counsel of the Federal Trade Commission. View Press Release - [Information Commissioner’s updated response to the Data (Use and Access) (DUA) Bill](https://compliance-by-design.net/2025/02/10/information-commissioners-updated-response-to-the-data-use-and-access-dua-bill/): The Data (Use and Access) (DUA) Bill was introduced to Parliament on 24 October 2024. The Bill has now completed its passage through the House of Lords, where it has been subject to a number of amendments and significant debate. This response provides the Information Commissioner’s comments on… - [AP: pas op met gebruik chatbot DeepSeek](https://compliance-by-design.net/2025/02/07/ap-pas-op-met-gebruik-chatbot-deepseek/): De Autoriteit Persoonsgegevens (AP) waarschuwt gebruikers van de app DeepSeek om heel voorzichtig en terughoudend met deze nieuwe chatbot om te gaan. Mensen doen er verstandig aan om zichzelf de vraag te stellen of zij wel echt persoonlijke en andere gevoelige gegevens in deze app willen invoeren, aldus de AP. Als mensen persoonlijke informatie van ... Read more - [FTC Sends More Than $2.6 Million in Refunds to Small Businesses Harmed by Payment Processor First American Payment Systems](https://compliance-by-design.net/2025/02/06/ftc-sends-more-than-2-6-million-in-refunds-to-small-businesses-harmed-by-payment-processor-first-american-payment-systems/): The Federal Trade Commission is sending more than $2.6 million in refunds to small businesses harmed by payment processor First American Payment Systems. View Press Release - [Direct marketing advice generator makes it easy for organisations to comply with the law](https://compliance-by-design.net/2025/02/05/direct-marketing-advice-generator-makes-it-easy-for-organisations-to-comply-with-the-law/): We have launched a free online tool to help organisations ensure their direct marketing activities comply with UK law – namely the Privacy and Electronic Communication Regulations (PECR), and the UK GDPR. By using the direct marketing advice generator, small organisations will get reliable compliance advice, tailored to their own direct marketing activities, in minutes. - [LinkedIn Fined €310 Million for GDPR Violations by Irish Data Protection Commission](https://compliance-by-design.net/2025/02/01/linkedin-fined-e310-million-for-gdpr-violations-by-irish-data-protection-commission/): The Irish Data Protection Commission (DPC) has imposed a significant fine of €310 million on LinkedIn Ireland Unlimited Company for violating the General Data Protection Regulation (GDPR). This decision follows an inquiry into LinkedIn’s processing of personal data for behavioral analysis and targeted advertising. Background of the Decision The inquiry, initiated by a complaint filed ... Read more - [FTC Seeks Public Comments on Enbridge Inc.’s Petition to Set Aside 2017 Order](https://compliance-by-design.net/2025/02/01/ftc-seeks-public-comments-on-enbridge-inc-s-petition-to-set-aside-2017-order/): The Federal Trade Commission is seeking public comment on a petition by Enbridge Inc. requesting that the Commission reopen and set aside a final consent order issued in 2017 regarding Enbridge’s merger with energy infrastructure company Spectra Energy Corp. View Press Release - [FTC Chairman Ferguson Announces that DEI is Over at the FTC](https://compliance-by-design.net/2025/02/01/ftc-chairman-ferguson-announces-that-dei-is-over-at-the-ftc/): Today, Federal Trade Commission Chairman Andrew N. Ferguson announced that the agency is delivering on the promise that President Trump made to the American people and issued the following statement: View Press Release - [Andrew N. Ferguson Takes Over as FTC Chairman](https://compliance-by-design.net/2025/02/01/andrew-n-ferguson-takes-over-as-ftc-chairman/): Andrew N. Ferguson was officially designated as Chairman of the Federal Trade Commission by President Trump on Monday, January 20, 2025. View Press Release - [FTC Grants Chairman Ferguson Authority to Comply with President Trump’s Orders to End DEI](https://compliance-by-design.net/2025/02/01/ftc-grants-chairman-ferguson-authority-to-comply-with-president-trumps-orders-to-end-dei/): The Federal Trade Commission approved a motion to give Chairman Andrew N. Ferguson authority needed to comply with President Trump’s executive orders ending DEI across the federal government. View Press Release - [FTC Sends Refunds to Consumers Affected by Fashion Nova’s Deceptive Review Practices](https://compliance-by-design.net/2025/02/01/ftc-sends-refunds-to-consumers-affected-by-fashion-novas-deceptive-review-practices/): Image View Press Release - [Debunking data protection myths about AI](https://compliance-by-design.net/2025/01/28/debunking-data-protection-myths-about-ai/): From unlocking medical breakthroughs to revolutionising public services in the UK, AI has huge potential to transform our lives for the better. Across the economy, businesses seem excited about investing in AI to drive growth and innovation, while the tech is inspiring vibrant discussions amongst policymakers and the public alike. - [Stay in control of your personal data. Happy Data Protection day 2025!](https://compliance-by-design.net/2025/01/28/stay-in-control-of-your-personal-data-happy-data-protection-day-2025/): If someone asked you to answer 100 questions about your personal life to sell the answers, would you agree? Most likely not. It can be difficult  to keep in control over your personal data and to keep it safe. From online shopping and browsing to social media, with every click, share and login-in you leave ... Read more - [Privacy-Preserving Federated Learning – Future Collaboration and Continued Research](https://compliance-by-design.net/2025/01/27/privacy-preserving-federated-learning-future-collaboration-and-continued-research/): This post is the final blog in a series on privacy-preserving federated learning . The series is a collaboration between NIST and the UK government’s Responsible Technology Adoption Unit (RTA), previously known as the Centre for Data Ethics and Innovation. Learn more and read all the posts published to date at NIST’s Privacy Engineering Collaboration ... Read more - [ICO response to government on economic growth](https://compliance-by-design.net/2025/01/24/ico-response-to-government-on-economic-growth/): The Prime Minister, the Chancellor, and the Business Secretary wrote to the Information Commissioner (along with 16 other regulators) at the end of December asking for proposals to boost business confidence, improve the investment climate, and foster sustainable economic growth. - [ICO takes action to tackle cookie compliance across the UK’s top 1,000 websites](https://compliance-by-design.net/2025/01/23/ico-takes-action-to-tackle-cookie-compliance-across-the-uks-top-1000-websites/): We have today announced plans to bring the UK’s top 1,000 websites into compliance with data protection law. - [Our strategy for levelling the playing field for online tracking in 2025](https://compliance-by-design.net/2025/01/23/our-strategy-for-levelling-the-playing-field-for-online-tracking-in-2025/): Online tracking is a part of everyday digital life. It enables personalised advertising, funds many free services and shapes our online experiences. - [Company fined £200,000 for instigating unlawful loan promotion nuisance texts](https://compliance-by-design.net/2025/01/22/company-fined-200000-for-instigating-unlawful-loan-promotion-nuisance-texts/): We have fined West Sussex-based company ESL Consultancy Services Ltd (ESL) £200,000 for knowingly instigating unlawful loan promotion nuisance text messages being sent to people who had not consented to receive them. - [CEF 2024: EDPB identifies challenges to the full implementation of the right of access](https://compliance-by-design.net/2025/01/20/cef-2024-edpb-identifies-challenges-to-the-full-implementation-of-the-right-of-access/): Brussels, 20 January – The European Data Protection Board (EDPB) has adopted a report on the implementation of the right of access by controllers. The report summarises the outcome of a series of coordinated national actions carried out in 2024 under the Coordinated Enforcement Framework (CEF). It lists the issues that were observed for some ... Read more - [EDPB adopts pseudonymisation guidelines and paves the way to improve cooperation with competition authorities](https://compliance-by-design.net/2025/01/17/edpb-adopts-pseudonymisation-guidelines-and-paves-the-way-to-improve-cooperation-with-competition-authorities/): Brussels, 17 January – During its January 2025 plenary meeting, the European Data Protection Board (EDPB) has adopted guidelines on pseudonymisation, as well as a statement on the interplay of competition law and data protection. EDPB clarifies the use of pseudonymisation for GDPR compliance The GDPR introduces the term ‘pseudonymisation’* and refers to it as ... Read more - [Statement in response to AI Action Plan](https://compliance-by-design.net/2025/01/13/statement-in-response-to-ai-action-plan/): AI has huge potential to transform businesses and public services, which is why it is a priority area for the ICO.  - [Staff Stories Spotlight Series: Cybersecurity Awareness Month 2024](https://compliance-by-design.net/2025/01/02/staff-stories-spotlight-series-cybersecurity-awareness-month-2024-4/): This blog is part of a larger NIST series during the month of October for Cybersecurity Awareness Month , called ‘Staff Stories Spotlight.’ Throughout the month of October this year, Q&A style blogs will be published featuring some of our unique staff members who have interesting backgrounds, stories to tell, and projects in the world ... Read more - [Staff Stories Spotlight Series: Cybersecurity Awareness Month 2024](https://compliance-by-design.net/2025/01/02/staff-stories-spotlight-series-cybersecurity-awareness-month-2024-3/): This blog is part of a larger NIST series during the month of October for Cybersecurity Awareness Month , called ‘Staff Stories Spotlight.’ Throughout the month of October this year, Q&A style blogs will be published featuring some of our unique staff members who have interesting backgrounds, stories to tell, and projects in the world ... Read more - [IoT Assignment Completed! Report on Barriers to U.S. IoT Adoption](https://compliance-by-design.net/2025/01/02/iot-assignment-completed-report-on-barriers-to-u-s-iot-adoption/): The 16 members of the NIST-managed Internet of Things (IoT) Advisory Board have completed their report on barriers to the U.S. receiving the benefits of IoT adoption, along with their recommendations for overcoming those barriers. As Benson Chan (Chair) and Dan Caprio (Vice Chair) of the IoT Advisory Board state in the report: “The United ... Read more - [Staff Stories Spotlight Series: Cybersecurity Awareness Month 2024](https://compliance-by-design.net/2025/01/02/staff-stories-spotlight-series-cybersecurity-awareness-month-2024-2/): This blog is part of a larger NIST series during the month of October for Cybersecurity Awareness Month , called ‘Staff Stories Spotlight.’ Throughout the month of October this year, Q&A style blogs will be published featuring some of our unique staff members who have interesting backgrounds, stories to tell, and projects in the world ... Read more - [Staff Stories Spotlight Series: Cybersecurity Awareness Month 2024](https://compliance-by-design.net/2025/01/02/staff-stories-spotlight-series-cybersecurity-awareness-month-2024/): This blog is part of a larger NIST series during the month of October for Cybersecurity Awareness Month , called ‘Staff Stories Spotlight.’ Throughout the month of October this year, Q&A style blogs will be published featuring some of our unique staff members who have interesting backgrounds, stories to tell, and projects in the world ... Read more - [Digital Identities: Getting to Know the Verifiable Digital Credential Ecosystem](https://compliance-by-design.net/2025/01/02/digital-identities-getting-to-know-the-verifiable-digital-credential-ecosystem/): If you are interested in the world of digital identities, you have probably heard some of the buzzwords that have been floating around for a few years now… “verifiable credential,” “digital wallet,” “mobile driver’s license” or “mDL.” These terms, among others, all reference a growing ecosystem around what we are calling “verifiable digital credentials.” But ... Read more - [Unlocking Cybersecurity Talent: The Power of Apprenticeships](https://compliance-by-design.net/2025/01/02/unlocking-cybersecurity-talent-the-power-of-apprenticeships/): Cybersecurity is a fast-growing field, with a constant need for skilled professionals. But unlike other professions — like medicine or aviation — there’s no clear-cut pathway to qualifying for cybersecurity positions. For employers and job seekers alike, this can make the journey to building a team (or entering a successful cybersecurity career) feel uncertain. Enter ... Read more - [Kicking-Off with a December 4th Workshop, NIST is Revisiting and Revising Foundational Cybersecurity Activities for IoT Device Manufacturers, NIST IR 8259!](https://compliance-by-design.net/2025/01/02/kicking-off-with-a-december-4th-workshop-nist-is-revisiting-and-revising-foundational-cybersecurity-activities-for-iot-device-manufacturers-nist-ir-8259/): In May 2020, NIST published Foundational Cybersecurity Activities for IoT Device Manufacturers (NIST IR 8259), which describes recommended cybersecurity activities that manufacturers should consider performing before their IoT devices are sold to customers. These foundational cybersecurity activities can help manufacturers lessen the cybersecurity-related efforts needed by customers, which in turn can reduce the prevalence and ... Read more - [Data Pipeline Challenges of Privacy-Preserving Federated Learning](https://compliance-by-design.net/2025/01/02/data-pipeline-challenges-of-privacy-preserving-federated-learning/): This post is part of a series on privacy-preserving federated learning. The series is a collaboration between NIST and the UK government’s Responsible Technology Adoption Unit (RTA), previously known as the Centre for Data Ethics and Innovation. Learn more and read all the posts published to date at NIST’s Privacy Engineering Collaboration Space or RTA’s ... Read more - [NIST’s International Cybersecurity and Privacy Engagement Update – New Translations](https://compliance-by-design.net/2025/01/02/nists-international-cybersecurity-and-privacy-engagement-update-new-translations/): As the year comes to a close, NIST continues to engage with our international partners to strengthen cybersecurity, including sharing over ten new international translations in over six languages as resources for our stakeholders around the world. These efforts were complemented by discussions on opportunities for future enhanced international collaboration and resource sharing. Here are ... Read more - [Celebrating twenty years of Freedom of Information](https://compliance-by-design.net/2025/01/02/celebrating-twenty-years-of-freedom-of-information/): John Edwards – The Information Commissioner Transparency and accountability are fundamental to our democracy – the impact of decisions made by public bodies can affect us all in some way. So it is right that we celebrate twenty years of the Freedom of Information Act… - [New year, new you - 2025 is the year to tighten up your data privacy](https://compliance-by-design.net/2025/01/02/new-year-new-you-2025-is-the-year-to-tighten-up-your-data-privacy/): This is the year to get your data privacy right. Here are some simple steps to tighten up your security and avoid becoming one of our statistics for 2025.  - [New year, new start-ups - get data privacy right from the start](https://compliance-by-design.net/2025/01/02/new-year-new-start-ups-get-data-privacy-right-from-the-start/): We’re encouraging entrepreneurs to think about data protection as they make plans to launch their new business ventures this January, ahead of the new tax year. - [ICO 2024 – a year in review](https://compliance-by-design.net/2024/12/20/ico-2024-a-year-in-review/): As 2024 comes to a close, the Information Commissioner’s Office (ICO) is reflecting on a successful year of effecting change to protect people’s information rights and guide organisations to continually improve to meet their legal obligations.  The ICO is the UK’s independent regulator… - [14 million people don’t know how to erase their data from an old device](https://compliance-by-design.net/2024/12/19/14-million-people-dont-know-how-to-erase-their-data-from-an-old-device/): New figures reveal that three in 10 UK adults (29%) don’t know how to wipe their personal information from an old device or tech product. - [Our response to Google’s policy change on fingerprinting](https://compliance-by-design.net/2024/12/19/our-response-to-googles-policy-change-on-fingerprinting/): Stephen Almond is the ICO’s executive director of regulatory risk. Yesterday, Google announced to organisations that use its advertising products, that from 16 February 2025, it will no longer prohibit them from employing fingerprinting techniques. Our response is clear:… - [EDPB opinion on AI models: GDPR principles support responsible AI](https://compliance-by-design.net/2024/12/18/edpb-opinion-on-ai-models-gdpr-principles-support-responsible-ai/): Brussels, 18 December – The European Data Protection Board (EDPB) has adopted an opinion* on the use of personal data for the development and deployment of AI models. This opinion looks at 1) when and how AI models can be considered anonymous, 2) whether and how legitimate interest can be used as a legal basis ... Read more - [Water companies asked to publish sewage discharge data](https://compliance-by-design.net/2024/12/16/water-companies-asked-to-publish-sewage-discharge-data/): We are calling on all water companies to proactively publish information relating to sewage discharges each month. - [Transparency must be the default position for water companies](https://compliance-by-design.net/2024/12/16/transparency-must-be-the-default-position-for-water-companies/): Public interest in water companies is higher than ever, with firms across the UK facing scrutiny over sewage discharges into lakes, rivers and the sea. Concerns about sewage pollution are mounting, as people have no choice but to rely on these companies. The lack of readily available information and the reticence of water companies to ... Read more - [Generative AI developers, it’s time to tell people how you’re using their information](https://compliance-by-design.net/2024/12/13/generative-ai-developers-its-time-to-tell-people-how-youre-using-their-information/): Stephen Almond is the ICO’s executive director of regulatory risk. In January we launched our consultation series on data protection in generative AI , receiving over 200 quality responses from stakeholders. We are today publishing our outcomes report  which details… - [Rogue companies receive fines totalling £290k for making millions of nuisance calls](https://compliance-by-design.net/2024/12/12/rogue-companies-receive-fines-totalling-290k-for-making-millions-of-nuisance-calls/): We have fined two companies, based in Greater Manchester, a total of £290k and issued them both with enforcement notices after they were found to have made numerous nuisance phone calls to people – who’d opted out of receiving marketing calls – attempting to sell them life insurance and debt management solutions. - [Manchester employee handed suspended prison sentence for illegally accessing personal information](https://compliance-by-design.net/2024/12/11/manchester-employee-handed-suspended-prison-sentence-for-illegally-accessing-personal-information/): A motor insurance worker who unlawfully accessed personal information has been handed a suspended prison sentence after an investigation by the Information Commissioner’s Office. - [ICO takes regulatory action against four public authorities under the FOI Act](https://compliance-by-design.net/2024/12/10/ico-takes-regulatory-action-against-four-public-authorities-under-the-foi-act/): We have taken action against four public authorities for continued failings to meet their obligations under the Freedom of Information Act (FOIA).  - [Court of Appeal rejects appeal against UK Information Commissioner’s monetary penalty notice](https://compliance-by-design.net/2024/12/09/court-of-appeal-rejects-appeal-against-uk-information-commissioners-monetary-penalty-notice/): We welcome the Court of Appeal (CoA) unanimous dismissal of an appeal by Doorstep Dispensaree Limited (DDL) against a monetary penalty notice (MPN) issued by the Commissioner on 17 December 2019.  In its judgement published today , the CoA rejected both grounds for appeal brought by DDL.… - [Statement on the public sector approach from the Permanent Secretary of DSIT](https://compliance-by-design.net/2024/12/09/statement-on-the-public-sector-approach-from-the-permanent-secretary-of-dsit/): The Information Commissioner has set out the outcome of his two-year trial of a new approach to regulating public sector organisations. His review notes the positive impact this has had in protecting personal data and highlighting some key challenges going forward. Considering the evidence, he has decided to continue with the public sector approach and ... Read more - [Statement on the public sector approach](https://compliance-by-design.net/2024/12/09/statement-on-the-public-sector-approach/): Two years ago, I set out my vision of working more effectively with public authorities across the UK so they could better protect people’s information, while transforming public services and improving outcomes for their communities. - [EDPB calls for coherence of digital legislation with the GDPR](https://compliance-by-design.net/2024/12/04/edpb-calls-for-coherence-of-digital-legislation-with-the-gdpr/): Brussels, 04 December – During its December 2024 plenary, the European Data Protection Board (EDPB) adopted a statement on the second report of the European Commission on the application of the General Data Protection Regulation (GDPR).* In its statement, the EDPB welcomes the reports from the European Commission and the Fundamental Rights Agency**. Importantly, the ... Read more - [EDPB clarifies rules for data sharing with third country authorities and approves EU Data Protection Seal certification](https://compliance-by-design.net/2024/12/03/edpb-clarifies-rules-for-data-sharing-with-third-country-authorities-and-approves-eu-data-protection-seal-certification/): Brussels, 03 December – During its latest plenary, the European Data Protection Board (EDPB) published guidelines on Art.48 GDPR about data transfers to third country authorities and  approved a new European Data Protection Seal.   EDPB helps organisations assess data transfer requests by third country authorities In a highly interconnected world, organisations receive requests from ... Read more - [Advice to local authorities facing financial restrictions](https://compliance-by-design.net/2024/11/28/advice-to-local-authorities-facing-financial-restrictions/): Managing request volumes and issuing timely responses to requests for information are crucial to complying with your information access obligations. - [Data protection is not an excuse when tackling scams and fraud](https://compliance-by-design.net/2024/11/22/data-protection-is-not-an-excuse-when-tackling-scams-and-fraud/): We are calling on organisations to share personal information responsibly to protect their customers from scams and fraud. - [Our lives, our privacy: the 40 items that shaped 40 years of privacy rights](https://compliance-by-design.net/2024/11/19/our-lives-our-privacy-the-40-items-that-shaped-40-years-of-privacy-rights/): We are marking our 40th anniversary by launching a digital exhibition telling the story of the most important moments in privacy and information rights over the past four decades. - [Joint statement from the FCA, ICO and TPR for retail investment firms and pension providers](https://compliance-by-design.net/2024/11/15/joint-statement-from-the-fca-ico-and-tpr-for-retail-investment-firms-and-pension-providers/): Data protection and effective communications to consumers in relation to retail investments and pensions.   - [Using Privacy Enhancing Technologies (PETs) to unlock value from data responsibly](https://compliance-by-design.net/2024/11/15/using-privacy-enhancing-technologies-pets-to-unlock-value-from-data-responsibly/): On Thursday 7 November, DSIT’s Responsible Technology Adoption (RTA) Unit and the Information Commissioner’s Office (ICO) published the Privacy Enhancing Technologies (PETs) Cost-Benefit Awareness Tool.  - [NEW data protection code of conduct launched for UK private investigators](https://compliance-by-design.net/2024/11/13/new-data-protection-code-of-conduct-launched-for-uk-private-investigators/): We have approved and published the first sector-owned code of conduct – The Association of British Investigators Ltd (ABI) UK GDPR code of conduct for Investigative and Litigation Support Services. - [“Privacy must still come first.” – we're calling for collaboration with developers as report reveals future innovations and data protection concerns in genomics](https://compliance-by-design.net/2024/11/07/privacy-must-still-come-first-were-calling-for-collaboration-with-developers-as-report-reveals-future-innovations-and-data-protection-concerns-in-genomics/): New report highlights how genomics could one day determine insurance quotes, solve crimes, tailor support in schools and create fitness plans - [ICO intervention into AI recruitment tools leads to better data protection for job seekers](https://compliance-by-design.net/2024/11/06/ico-intervention-into-ai-recruitment-tools-leads-to-better-data-protection-for-job-seekers/): We have  today issued a series of recommendations [LINK] to AI developers and providers to ensure they are better protecting job seekers’ information rights. - [Thinking of using AI to assist recruitment? Our key data protection considerations](https://compliance-by-design.net/2024/11/06/thinking-of-using-ai-to-assist-recruitment-our-key-data-protection-considerations/): The Information Commissioner’s Office (ICO) has shared key questions organisations should ask when procuring AI tools to help with their employee recruitment. - [EDPB adopts its first report under the EU-U.S. Data Privacy Framework and a statement on the recommendations on access to data for law enforcement](https://compliance-by-design.net/2024/11/05/edpb-adopts-its-first-report-under-the-eu-u-s-data-privacy-framework-and-a-statement-on-the-recommendations-on-access-to-data-for-law-enforcement/): Brussels, 05 November – During its latest plenary, the European Data Protection Board (EDPB) adopted a report on the first review1 of EU-U.S. Data Privacy Framework (DPF), as well as a statement on the recommendations of the high-level group (HLG)2 on access to data for effective law enforcement. The EDPB welcomes the efforts by the ... Read more - [Empowering young people to learn more about their local environment](https://compliance-by-design.net/2024/11/05/empowering-young-people-to-learn-more-about-their-local-environment/): Did you know that no matter how old you are, you can ask public authorities about a wide range of topics that affect your day-to-day life and where you live? - [EDPB stakeholder event AI models](https://compliance-by-design.net/2024/11/05/edpb-stakeholder-event-ai-models/): The EDPB is holding a stakeholder event on “AI models” with participants representing European sector associations, organisations, NGOs, individual companies, law firms and academics.    During today’s event, the EDPB will collect input for of the preparation of a consistency opinion on AI models, requested by the Irish Data Protection Authority under Art. 64 (2) GDPR. ... Read more - [Information Commissioner seeks permission to appeal DSG Retail Ltd ruling](https://compliance-by-design.net/2024/11/04/information-commissioner-seeks-permission-to-appeal-dsg-retail-ltd-ruling/): We are seeking permission to appeal the judgment of the Upper Tribunal (Tribunal) on DSG Retail Limited (DSG) to the Court of Appeal. - [Statement on ICO’s work to protect children online](https://compliance-by-design.net/2024/10/29/statement-on-icos-work-to-protect-children-online/): Children see sharing their personal information online as necessary to avoid social exclusion, our new research has found. - [Global privacy authorities issue follow-up joint statement on data scraping after industry engagement](https://compliance-by-design.net/2024/10/28/global-privacy-authorities-issue-follow-up-joint-statement-on-data-scraping-after-industry-engagement/): We and several global counterparts are highlighting how social media companies can better protect personal information, as concerns grow about mass scraping of personal information within social media platforms, including to support artificial intelligence systems. - [Information Commissioner: Organisations need to do more to help people affected by data breaches](https://compliance-by-design.net/2024/10/28/information-commissioner-organisations-need-to-do-more-to-help-people-affected-by-data-breaches/): Information Commissioner John Edwards has today urged organisations across the country to recognise the real-world impact of data breaches – and the devastating effects they can have on people’s lives. - [Ripple effect: the devastating impact of data breaches](https://compliance-by-design.net/2024/10/28/ripple-effect-the-devastating-impact-of-data-breaches/): A blog by John Edwards, Information Commissioner. - [Statement in response to the introduction of the Data Use and Access Bill in the House of Lords](https://compliance-by-design.net/2024/10/24/statement-in-response-to-the-introduction-of-the-data-use-and-access-bill-in-the-house-of-lords/): We welcome the introduction of the Data Use and Access Bill in the House of Lords and look forward to seeing it progress through parliament to Royal Assent. - [Our statement in response to Government plans for NHS digital transformation](https://compliance-by-design.net/2024/10/21/our-statement-in-response-to-government-plans-for-nhs-digital-transformation/): An ICO spokesperson: “We stand ready to support the Government’s ambition to make the NHS fit for the future, including the move to a more digital approach. Data protection law can help organisations to share personal information responsibly, enabling innovation while protecting people’s… - [Action taken against United Utilities over transparency failings](https://compliance-by-design.net/2024/10/16/action-taken-against-united-utilities-over-transparency-failings/): We have issued a practice recommendation to United Utilities for failing to properly handle requests for important environmental information from the public. - [EDPB meets with adequate countries](https://compliance-by-design.net/2024/10/15/edpb-meets-with-adequate-countries/): On 8 October 2024, the European Data Protection Board met with Commissioners and representatives of Data Protection Authorities (DPAs) from the fifteen countries having been subject to an EU adequacy decision. The meeting took place in the margins of the EDPB October’s plenary and reflects the EDPB’s commitment to international engagement. The European Commission has ... Read more - [Two companies fined a total of £150k after bombarding people with spam texts offering financial, debt services](https://compliance-by-design.net/2024/10/15/two-companies-fined-a-total-of-150k-after-bombarding-people-with-spam-texts-offering-financial-debt-services/): The Information Commissioner’s Office (ICO) has fined two Manchester based financial and debt management companies a total of £150,000 for sending in excess of 7.5million spam text messages to people. - [Stakeholder event on ‘AI models’: express your interest to participate](https://compliance-by-design.net/2024/10/15/stakeholder-event-on-ai-models-express-your-interest-to-participate/): Brussels, 15 October – The European Data Protection Board (EDPB) organises a remote stakeholder event, taking place on 5 November 2024 (time to be confirmed), aimed at collecting input from stakeholders in the context of a request for an Art. 64(2) GDPR opinion relating to artificial intelligence models (‘AI models’) submitted to the EDPB by ... Read more - [Join the stakeholder event on EDPB opinion on ‘AI models’](https://compliance-by-design.net/2024/10/11/join-the-stakeholder-event-on-edpb-opinion-on-ai-models/): Brussels, 11 October -The EDPB will organise a stakeholder event on ‘AI models’ on 5 November 2024 (exact time to be confirmed).  During its latest plenary, the European Data Protection Board (EDPB) exceptionally agreed to organise a remote public event aimed at collecting input from stakeholders on issues relating to the request for an Art. ... Read more - [CEF 2025: EDPB selects topic for next year’s Coordinated Action](https://compliance-by-design.net/2024/10/10/cef-2025-edpb-selects-topic-for-next-years-coordinated-action/): Brussels, 10 October – During its October 2024 plenary, the European Data Protection Board (EDPB) selected the topic for its fourth Coordinated Enforcement Action (CEF), which will concern the implementation of the right to erasure (‘right to be forgotten’) by controllers. Data Protection Authorities (DPAs) will join this action on a voluntary basis in the ... Read more - [£120k issued in fines to two companies for predatory marketing campaigns](https://compliance-by-design.net/2024/10/10/120k-issued-in-fines-to-two-companies-for-predatory-marketing-campaigns/): We have fined two companies for making unlawful marketing calls to individuals registered with the Telephone Preference Service (TPS). - [Criminal record and suspended prison sentence handed to former RAC employees for stealing personal information](https://compliance-by-design.net/2024/10/09/criminal-record-and-suspended-prison-sentence-handed-to-former-rac-employees-for-stealing-personal-information/): Two former RAC employees have been handed a suspended prison sentence and ordered to complete 150 hours of unpaid work, for unlawfully copying and selling over 29,500 lines of personal information. - [EDPB adopts Opinion on processors, Guidelines on legitimate interest, Statement on draft regulation for GDPR enforcement, and work programme 2024-2025](https://compliance-by-design.net/2024/10/09/edpb-adopts-opinion-on-processors-guidelines-on-legitimate-interest-statement-on-draft-regulation-for-gdpr-enforcement-and-work-programme-2024-2025/): Brussels, 09 October – During its latest plenary, the European Data Protection Board (EDPB) adopted an Opinion on certain obligations following from the reliance on processor(s) and sub-processor(s), Guidelines on legitimate interest, a Statement on laying down additional procedural rules for GDPR enforcement and the EDPB work programme 2024-2025. First, the EDPB adopted an Opinion ... Read more - [Preparing for the quantum-enabled future](https://compliance-by-design.net/2024/10/09/preparing-for-the-quantum-enabled-future/): Quantum technologies are advancing at pace, offering huge potential to improve our lives. For example, researchers are already using the next generation of certain quantum sensors to collect highly granular information about people’s brain patterns to improve medical research and diagnostics, while there are ongoing efforts to test real world applications for early stage quantum ... Read more - [Changes to our services for businesses](https://compliance-by-design.net/2024/10/09/changes-to-our-services-for-businesses/): We are committed to modernising our service and investing in tools that enable us to give time-pressed businesses access to our advice and expertise 24/7.  - [New data protection audit framework launched to help organisations improve compliance](https://compliance-by-design.net/2024/10/07/new-data-protection-audit-framework-launched-to-help-organisations-improve-compliance/): We have today launched a new audit framework designed to help organisations assess their own compliance with key requirements under data protection law.  The framework empowers organisations to identify necessary steps to improve their data protection practices and create a culture of… - [What price privacy? Poor PSNI procedures culminate in £750k fine](https://compliance-by-design.net/2024/10/03/what-price-privacy-poor-psni-procedures-culminate-in-750k-fine/): We have fined Police Service Northern Ireland (PSNI) £750,000 for exposing the personal information of its entire workforce, leaving many fearing for their safety. Our investigation found that simple-to-implement procedures could have prevented the serious breach, in which hidden data on a… - [Our statement on changes to LinkedIn AI data policy](https://compliance-by-design.net/2024/09/20/our-statement-on-changes-to-linkedin-ai-data-policy/): “We are pleased that LinkedIn has reflected on the concerns we raised about its approach to training generative AI models with information relating to its UK users. - [Our statement in response to Meta's announcement to introduce teen accounts](https://compliance-by-design.net/2024/09/17/our-statement-in-response-to-metas-announcement-to-introduce-teen-accounts/): Stephen Almond, Executive Director Regulatory Risk said:  “We welcome Instagram’s new protections for its younger users  following our engagement with them.  Our Children’s code is clear that kids’ accounts must be set as ‘high privacy’ by default, unless there is a compelling reason not… - [Guilty car salesman fined for retaining and selling data to competitors](https://compliance-by-design.net/2024/09/17/guilty-car-salesman-fined-for-retaining-and-selling-data-to-competitors/): A man has pleaded guilty and been fined for unlawfully retaining and selling thousands of pieces of customer records from the car leasing company he worked for in Hertfordshire. - [Action taken against Sky Betting and Gaming for using cookies without consent](https://compliance-by-design.net/2024/09/17/action-taken-against-sky-betting-and-gaming-for-using-cookies-without-consent/): We have issued a reprimand to Bonne Terre Limited, trading as Sky Betting and Gaming, for unlawfully processing people’s data through advertising cookies without their consent. - [ICO statement in response to Meta's announcement on user data to train AI](https://compliance-by-design.net/2024/09/13/ico-statement-in-response-to-metas-announcement-on-user-data-to-train-ai/): Statement from Stephen Almond, Executive Director Regulatory Risk at the ICO. - [Surrey Police show a “lack of seriousness about their obligations” as ICO issues enforcement notice over FOI failures](https://compliance-by-design.net/2024/09/12/surrey-police-show-a-lack-of-seriousness-about-their-obligations-as-ico-issues-enforcement-notice-over-foi-failures/): Enforcement notice issued to Surrey Police over Freedom of Information backlog - [Express your interest to take part in the EDPB stakeholder event on upcoming guidelines on ‘Consent or Pay’](https://compliance-by-design.net/2024/09/12/express-your-interest-to-take-part-in-the-edpb-stakeholder-event-on-upcoming-guidelines-on-consent-or-pay/): The European Data Protection Board (EDPB) organises a remote stakeholder event, taking place on 18 November 2024 from 10.00 to 16.00 CET (exact time to be confirmed), in order to collect stakeholders’ input in the context of upcoming guidelines on the application of data protection legislation in the context of ‘Consent or Pay’ models.  The ... Read more - [ICO and NCA sign memorandum of understanding for further collaboration on cyber security](https://compliance-by-design.net/2024/09/10/ico-and-nca-sign-memorandum-of-understanding-for-further-collaboration-on-cyber-security/): We have signed a Memorandum of Understanding (MoU) with the National Crime Agency (NCA) that sets out how both organisations will cooperate to improve the UK’s cyber resilience. - [EDPB to work together with European Commission to develop guidance on interplay GDPR and DMA](https://compliance-by-design.net/2024/09/10/edpb-to-work-together-with-european-commission-to-develop-guidance-on-interplay-gdpr-and-dma/): The Commission services in charge of the enforcement of the Digital Markets Act (DMA) and the European Data Protection Board (EDPB) have agreed to work together to clarify and give guidance on the interplay between DMA and GDPR. This enhanced dialogue between Commission’s services and the EDPB will focus on the applicable obligations to digital ... Read more - [Take part in the EDPB stakeholder event on upcoming guidelines on ‘Consent or Pay’](https://compliance-by-design.net/2024/09/05/take-part-in-the-edpb-stakeholder-event-on-upcoming-guidelines-on-consent-or-pay/): The European Data Protection Board (EDPB) is organising a remote stakeholder event aimed at collecting stakeholders’ input in the context of upcoming guidelines on the application of data protection legislation in the context of ‘Consent or Pay’ models. The event will take place on 18 November 2024 from 10.00 to 16.00 CET (exact time to ... Read more - [FTC Provides Guidance on Updated Safeguards Rule](https://compliance-by-design.net/2025/06/16/ftc-provides-guidance-on-updated-safeguards-rule/): Today, the FTC released Frequently Asked Questions that discuss the requirements of the Safeguards Rule, which was mandated by the Gramm-Leach-Bliley Act, and how it specifically applies to motor vehicle dealers. View Press Release - [The Impact of Artificial Intelligence on the Cybersecurity Workforce](https://compliance-by-design.net/2025/06/12/the-impact-of-artificial-intelligence-on-the-cybersecurity-workforce/): The NICE Workforce Framework for Cybersecurity ( NICE Framework) was revised in November 2020 as NIST Special Publication 800-181 rev.1 to enable more effective and rapid updates to the NICE Framework Components, including how the advent of emerging technologies would impact cybersecurity work. NICE has been actively engaging in conversations with: federal departments and agencies; ... Read more - [FTC and DOJ to Host Listening Sessions on Lowering Americans’ Drug Prices Through Competition](https://compliance-by-design.net/2025/06/11/ftc-and-doj-to-host-listening-sessions-on-lowering-americans-drug-prices-through-competition/): Sessions to Discuss Generic and Biosimilar Availability, Prescription Drug Formularies and Benefits, and Regulatory Barriers As part of implementing President Trump’s Executive Order No.View Press Release - [Evoke Wellness to Pay $1.9 Million to Settle FTC Claims That They Misled Consumers Seeking Substance Use Disorder Treatment](https://compliance-by-design.net/2025/06/10/evoke-wellness-to-pay-1-9-million-to-settle-ftc-claims-that-they-misled-consumers-seeking-substance-use-disorder-treatment/): Evoke allegedly used Google ads and telemarketing to pretend to be other clinics; court order permanently bans them from similar deceptive conduct The operators of a Florida-based substance use disorder treatment clinic have agreed to pay $1.9 million, settling allegations that they used deceptive Google search ads and telemarketing to impersonate other treatment providers. They also ... Read more - [FTC Announces Workshop on Exploring Unfair or Deceptive Trade Practices in “Gender-Affirming Care” for Minors](https://compliance-by-design.net/2025/06/09/ftc-announces-workshop-on-exploring-unfair-or-deceptive-trade-practices-in-gender-affirming-care-for-minors/): The workshop will include presentations from doctors, specialists, medical ethicists, whistleblowers, detransitioners, and parents. Today the Federal Trade Commission announced it will host a workshop focusing on unfair or deceptive trade practices in “gender-affirming care” for minors. The workshop, called “The Dangers of ‘Gender-Affirming Care’ for Minors,” will take place on July 9, 2025, in ... Read more - [EDPB publishes final version of guidelines on data transfers to third country authorities and SPE training material on AI and data protection](https://compliance-by-design.net/2025/06/05/edpb-publishes-final-version-of-guidelines-on-data-transfers-to-third-country-authorities-and-spe-training-material-on-ai-and-data-protection/): Brussels, 06 June – During its latest plenary, the European Data Protection Board (EDPB) adopted the final version of its guidelines on Art.48 GDPR about data transfers to third country authorities, after public consultation. In addition, the Board presented two new Support Pool of Experts (SPE) projects providing training material on artificial intelligence and data protection. ... Read more - [FTC Sends Warning Letters to Prescribers Regarding Possible Violations of the Contact Lens Rule](https://compliance-by-design.net/2025/06/03/ftc-sends-warning-letters-to-prescribers-regarding-possible-violations-of-the-contact-lens-rule/): Staff of the Federal Trade Commission sent 37 letters to contact lens prescribers warning them of potential violations of the agency’s View Press Release - [FTC to Host June 4 Workshop on The Attention Economy: How Big Tech Firms Exploit Children and Hurt Families](https://compliance-by-design.net/2025/06/03/ftc-to-host-june-4-workshop-on-the-attention-economy-how-big-tech-firms-exploit-children-and-hurt-families/): WHAT: The Federal Trade Commission is hosting a workshop on “The Attention Economy: How Big Tech Firms Exploit Children and Hurt Families,” which will examine how Big Tech companies impose addictive design features, erode parental authority, and fail to protect children from exposure to harmful content.View Press Release - [FTC to Require Synopsys and Ansys to Divest Assets to Proceed with Merger](https://compliance-by-design.net/2025/05/29/ftc-to-require-synopsys-and-ansys-to-divest-assets-to-proceed-with-merger/): FTC takes action to protect competition across several software tool markets used for semiconductor and light simulation design The Federal Trade Commission will require Synopsys, Inc. and Ansys, Inc. to divest certain assets to resolve antitrust concerns surrounding their $35 billion merger. View Press Release - [FTC Dismisses Lawsuit Against PepsiCo](https://compliance-by-design.net/2025/05/22/ftc-dismisses-lawsuit-against-pepsico/): The Federal Trade Commission today voted to dismiss without prejudice a Robinson-Patman Act (RPA) lawsuit against PepsiCo, Inc. (Pepsi) that was filed in the U.S. District Court for the Southern District of New York.View Press Release - [Student Loan Debt Relief Scam Operators Agree to be Permanently Banned from Industry, Turn Over Assets to Resolve FTC Charges](https://compliance-by-design.net/2025/05/22/student-loan-debt-relief-scam-operators-agree-to-be-permanently-banned-from-industry-turn-over-assets-to-resolve-ftc-charges/): FTC says operators falsely claimed affiliation with U.S. Department of Education, made false promises of loan forgiveness, and promoted fake reviews and testimonials The operators of an alleged transnational student loan debt relief scam have agreed to be permanently banned from the debt relief industry and to turn over more than $1 million in assets ... Read more - [FTC and DOJ File Statement of Interest in Energy Collusion Case Against BlackRock, State Street, and Vanguard](https://compliance-by-design.net/2025/05/22/ftc-and-doj-file-statement-of-interest-in-energy-collusion-case-against-blackrock-state-street-and-vanguard/): Statement argues asset managers misapply the antitrust laws in defending coal production collusion allegations that drove up energy prices for consumers The Federal Trade Commission, joined by the U.S. Department of Justice Antitrust Division, filed a Statement of Interest in a multistate antitrust case against asset managers BlackRock, State Street, and Vanguard. View Press Release - [Cybersecurity and AI: Integrating and Building on Existing NIST Guidelines](https://compliance-by-design.net/2025/05/22/cybersecurity-and-ai-integrating-and-building-on-existing-nist-guidelines/): What is NIST up to? On April 3, 2025, NIST hosted a Cybersecurity and AI Profile Workshop at our National Cybersecurity Center of Excellence (NCCoE) to hear feedback on our concept paper which presented opportunities to create profiles of the NIST Cybersecurity Framework (CSF) and the NIST AI Risk Management Framework (AI RMF). These would ... Read more - [FTC Renews Challenge of More Than 200 Improper Patent Listings](https://compliance-by-design.net/2025/05/21/ftc-renews-challenge-of-more-than-200-improper-patent-listings/): Commission renews Orange Book listing disputes, marking third round of FTC challenges to promote affordable drugs, generic competition Continuing its efforts to promote competition and lower drug prices, today the Federal Trade Commission renewed its challenges against dozens of improperly listed device patents that shield brand-name asthma, diabetes, epinephrine autoinjector, and COPD drugs from prompt ... Read more - [FTC Finalizes Order with GoDaddy over Data Security Failures](https://compliance-by-design.net/2025/05/21/ftc-finalizes-order-with-godaddy-over-data-security-failures/): The Federal Trade Commission has finalized an order with GoDaddy settling allegations that the webhosting provider misled consumers by failing to implement data security protections, which led to several data breaches. View Press Release - [The French SA fines SOLOCAL 900 000 €](https://compliance-by-design.net/2025/05/21/the-french-sa-fines-solocal-900-000-e/): Background information Date of final decision: 15 May 2025 National case Controller:  SOLOCAL MARKETING SERVICES Legal Reference(s): Article 7 (Conditions for consent), Article 6 (Lawfulness of processing) Decision: administrative fine and an order to cease electronic commercial prospecting in the absence of valid consent, together with a penalty of 10 000 € per day overdue ... Read more - [FTC Approves Final Order with Welsh Carson](https://compliance-by-design.net/2025/05/20/ftc-approves-final-order-with-welsh-carson/): The Federal Trade Commission finalized a consent order with Welsh, Carson, Anderson & Stowe and its affiliates (collectively referred to as Welsh Carson) that resolves a potential administrative antitrust case against Welsh Carson. View Press Release - [FTC Releases Tentative Agenda for Attention Economy Workshop on June 4](https://compliance-by-design.net/2025/05/19/ftc-releases-tentative-agenda-for-attention-economy-workshop-on-june-4/): The Federal Trade Commission has released the tentative agenda for its June 4, 2025 workshop on “The Attention Economy: How Big Tech Firms Exploit Children and Hurt Families.” View Press Release - [FTC Adds Defendants in Case Against Growth Cave Scam](https://compliance-by-design.net/2025/05/19/ftc-adds-defendants-in-case-against-growth-cave-scam/): Amended complaint adds two companies related to scam’s operation The Federal Trade Commission has filed an amended complaint in its case against the Growth Cave business opportunity and credit repair scam. The amendment adds two defendants based on information the FTC learned after the original filing. View Press Release - [Student Loan Fraudsters Permanently Banned From Debt Relief Industry And Required to Turn Over All Assets as Result of FTC Action](https://compliance-by-design.net/2025/05/15/student-loan-fraudsters-permanently-banned-from-debt-relief-industry-and-required-to-turn-over-all-assets-as-result-of-ftc-action/): FTC alleges operators pretended to be affiliated with the U.S. Department of Education, promised fake student loan forgiveness, and bilked millions out of consumers seeking debt relief As a result of a Federal Trade Commission lawsuit, a fraudulent student loan debt relief operation and its owners are permanently banned from the debt relief industry and ... Read more - [FTC Chairman Testifies Before House Appropriations Committee on Agency’s Budget](https://compliance-by-design.net/2025/05/15/ftc-chairman-testifies-before-house-appropriations-committee-on-agencys-budget/): Chairman Ferguson testifies on the agency’s FY2026 priorities Federal Trade Commission Chairman Andrew N. Ferguson today appeared before the House Appropriations Committee’s Financial Services and General Government Subcommittee to discuss the agency’s Fiscal Year 2025 operations, Fiscal Year 2026 priorities and ongoing work to protect consumers and promote competition. View Press Release - [With NFL’s 2025 Schedule Set to be Announced, FTC Warns Ticket Reseller StubHub it Must Comply with Agency’s New Rule on Unfair and Deceptive Fees](https://compliance-by-design.net/2025/05/15/with-nfls-2025-schedule-set-to-be-announced-ftc-warns-ticket-reseller-stubhub-it-must-comply-with-agencys-new-rule-on-unfair-and-deceptive-fees/): Rule to increase transparency in the ticketing marketplace went into effect on May 12 As the National Football League prepares to announce the 2025 season schedule, staff of the Federal Trade Commission sent a warning letter today to StubHub Holdings, Inc.View Press Release - [Five Years Later: Evolving IoT Cybersecurity Guidelines](https://compliance-by-design.net/2025/05/13/five-years-later-evolving-iot-cybersecurity-guidelines/): The Background…and NIST’s Plan for Improving IoT Cybersecurity The passage of the Internet of Things (IoT) Cybersecurity Improvement Act in 2020 marked a pivotal step in enhancing the cybersecurity of IoT products. Recognizing the increasing internet connectivity of physical devices, this legislation tasked NIST with developing cybersecurity guidelines to manage and secure IoT effectively. As ... Read more - [FTC Votes on Negative Option Rule Deadline](https://compliance-by-design.net/2025/05/10/ftc-votes-on-negative-option-rule-deadline/): Today the Federal Trade Commission voted to defer the compliance deadline for the amended Negative Option Rule by 60 days.View Press Release - [FTC Files Amicus Brief on DOJ’s Proposed Final Judgment Against Google for Antitrust Violations](https://compliance-by-design.net/2025/05/09/ftc-files-amicus-brief-on-dojs-proposed-final-judgment-against-google-for-antitrust-violations/): Brief argues that DOJ’s proposed final judgment is in line with privacy protections mandated by FTC in privacy and data security orders The Federal Trade Commission filed an amicus brief today in support of the Department of Justice’s Revised Proposed Final Judgment (RPFJ) related to Google’s antitrust violations. View Press Release - [FTC Action Ends Ecommerce Empire Builders Online Business Opportunity Scam](https://compliance-by-design.net/2025/05/09/ftc-action-ends-ecommerce-empire-builders-online-business-opportunity-scam/): Court order bans company and its owner from selling business opportunities, requires them to turn over assets A Federal Trade Commission lawsuit has put a stop to Ecommerce Empire Builders’ (EEB) business opportunity scam that used false promises of large profits to entice consumers into paying for help starting “Ecommerce empires” through online storefronts. View ... Read more - [Simplification of record-keeping obligation: EDPB and EDPS adopt letter to EU Commission](https://compliance-by-design.net/2025/05/08/simplification-of-record-keeping-obligation-edpb-and-edps-adopt-letter-to-eu-commission/): Brussels, 08 May – The European Data Protection Board (EDPB) and the European Data Protection Supervisor (EDPS) have adopted a letter, addressed to the European Commission, on the upcoming proposal on the simplification of record-keeping obligation under the GDPR, amounting to a targeted amendment of Art. 30(5) GDPR. The joint letter replies to the letter ... Read more - [More than $5 Million in Refunds Sent to Consumers as a Result of the FTC’s Action Against Cerebral over Deceptive Cancellation Practices](https://compliance-by-design.net/2025/05/08/more-than-5-million-in-refunds-sent-to-consumers-as-a-result-of-the-ftcs-action-against-cerebral-over-deceptive-cancellation-practices/): More than 40,000 people will receive a refund as a result of the Federal Trade Commission’s settlement with Cerebral, Inc, an online mental health service provider that allegedly billed consumers despite their requests to cancel tView Press Release - [European Patent Organisation and extension of adequacy decisions for the UK: EDPB adopts opinions](https://compliance-by-design.net/2025/05/06/european-patent-organisation-and-extension-of-adequacy-decisions-for-the-uk-edpb-adopts-opinions/): Brussels, 06 May – During its latest plenary, the European Data Protection Board (EDPB) adopted an opinion on the European Commission’s draft adequacy decision under the GDPR concerning the European Patent Organisation (EPO). In addition, the Board adopted an opinion on the European Commission’s proposal to extend the validity of the UK adequacy decisions under ... Read more - [FTC Rule on Unfair or Deceptive Fees to Take Effect on May 12, 2025](https://compliance-by-design.net/2025/05/05/ftc-rule-on-unfair-or-deceptive-fees-to-take-effect-on-may-12-2025/): FTC staff has published FAQs to help inform consumers and businesses about the Rule Staff of the Federal Trade Commission published Frequently Asked Questions (FAQs) designed to provide consumers and businesses with information regarding the agency’s Rule oView Press Release - [FTC and DOJ Issue Letter Seeking Identification of Anticompetitive Regulations Across the Federal Government](https://compliance-by-design.net/2025/05/05/ftc-and-doj-issue-letter-seeking-identification-of-anticompetitive-regulations-across-the-federal-government/): Today, the Federal Trade Commission and the Department of Justice Antitrust Division issued a joint letter directing the heads of agenciesView Press Release - [Small Businesses Create Big Impact: NIST Celebrates 2025 National Small Business Week](https://compliance-by-design.net/2025/05/05/small-businesses-create-big-impact-nist-celebrates-2025-national-small-business-week/): This week we’re celebrating National Small Business Week—which recognizes and celebrates the small and medium-sized business (SMB) community’s significant contributions to the nation. SMBs are a substantial and critical part of the U.S. and global economic and cybersecurity infrastructure. According to the U.S. Small Business Administration’s Office of Advocacy, [1] there are 34.8 million SMBs ... Read more - [Europe Day 2025: come and visit us!](https://compliance-by-design.net/2025/05/05/europe-day-2025-come-and-visit-us/): Every year, on 9 May, people across Europe celebrate the anniversary of the Schuman Declaration, which was a milestone to bring peace and solidarity in Europe. This year is particularly special as it marks the 75th anniversary of this historic moment. Let’s celebrate together To celebrate this occasion, the EDPB takes part in the EU ... Read more - [FTC, State of Nevada Take Action Against IM Mastery Academy for Deceiving Consumers](https://compliance-by-design.net/2025/05/01/ftc-state-of-nevada-take-action-against-im-mastery-academy-for-deceiving-consumers/): Complaint alleges that the investment training operation, currently known as IYOVIA, has taken more than $1.2 billion from consumers since 2018 The Federal Trade Commission and the State of Nevada are taking action to stop a wide-ranging investment training and business venture scam that has bilked consumers out of more than $1.2 billion.View Press Release - [FTC to Ban Debt Collector Who Allegedly Coerced Consumers into Paying Debt They Didn’t Owe](https://compliance-by-design.net/2025/05/01/ftc-to-ban-debt-collector-who-allegedly-coerced-consumers-into-paying-debt-they-didnt-owe/): FTC alleged GCI threatened consumers with arrest and other actions to get them to pay millions in phantom debt The Federal Trade Commission alleged that Global Circulation, Inc. (GCI) and its owner, Kenneth Redon III, threatened consumers with jail time, lawsuits, and wage garnishments to pressure them into paying debt they didn’t actually owe.View Press ... Read more - [FTC Sends More Than $18 Million to Consumers Harmed by Publishers Clearing House](https://compliance-by-design.net/2025/04/30/ftc-sends-more-than-18-million-to-consumers-harmed-by-publishers-clearing-house/): View Press Release - [FTC Order Requires Workado to Back Up Artificial Intelligence Detection Claims](https://compliance-by-design.net/2025/04/28/ftc-order-requires-workado-to-back-up-artificial-intelligence-detection-claims/): Agency alleges Workado lacks evidence to support its claims that its AI Content Detector tool was 98 percent accurate at detecting AI-generated text The Federal Trade Commission issued a proposed order requiring Workado, LLC to stop advertising the accuracy of its artificial intelligence (AI) detection products unless it maintains competent and reliable evidence showing those ... Read more - [EDPB annual report 2024: protecting personal data in a changing landscape](https://compliance-by-design.net/2025/04/23/edpb-annual-report-2024-protecting-personal-data-in-a-changing-landscape/): Brussels, 23 April – The European Data Protection Board (EDPB) has published its 2024 Annual Report. The report provides an overview of the EDPB work carried out in 2024 and reflects on important milestones, such as the adoption of the 2024-2027 strategy, the increase in Art. 64(2) consistency opinions and the continued efforts to provide ... Read more - [FTC Approves Final Order Requiring accessiBe to pay $1 Million](https://compliance-by-design.net/2025/04/22/ftc-approves-final-order-requiring-accessibe-to-pay-1-million/): The Federal Trade Commission has approved a final consent order against accessiBe Inc. and accessiBe Ltd. (accessiBe). AccessiBe claimed the plug-in accessWidget can make any website compliant with Web Content Accessibility Guidelines (WCAG). The order prohibits accessiBe from making misleading claims and requires the company to pay $1 million. View Press Release - [FTC Takes Action Against Uber for Deceptive Billing and Cancellation Practices](https://compliance-by-design.net/2025/04/21/ftc-takes-action-against-uber-for-deceptive-billing-and-cancellation-practices/): FTC says company enrolled consumers in subscription service and charged them without their consent, made it difficult for users to cancel The Federal Trade Commission filed a lawsuit today against Uber, alleging the rideshare and delivery company charged consumers for its Uber One subscription service without their consent, failed to deliver promised savings, and made ... Read more - [Illinois and Minnesota Join FTC Lawsuit Challenging Medical Device Coatings Deal](https://compliance-by-design.net/2025/04/17/illinois-and-minnesota-join-ftc-lawsuit-challenging-medical-device-coatings-deal/): The Federal Trade Commission filed an amended complaint adding the states of Illinois and Minnesota as co-plaintiffs in the Commission’s lawsuit challenging GTCR BC Holdings, LLC’s (GTCR) acquisition of Surmodics, Inc. (Surmodics). The amended complaint also adds GTCR, LLC as an additional defendant in the case. View Press Release - [New FTC Data Show Top Text Message Scams of 2024; Overall Losses to Text Scams Hit $470 Million](https://compliance-by-design.net/2025/04/16/new-ftc-data-show-top-text-message-scams-of-2024-overall-losses-to-text-scams-hit-470-million/): Fake package delivery issues and phony job opportunities were most frequently reported New data from the Federal Trade Commission show that in 2024, consumers reported losing $470 million to scams that started with text messages. This amount is five times higher than what was reported in 2020, even though the number of reports declined. View ... Read more - [FTC Reschedules its Attention Economy Workshop for June 4](https://compliance-by-design.net/2025/04/16/ftc-reschedules-its-attention-economy-workshop-for-june-4/): Due to increased interest, the Federal Trade Commission has rescheduled its workshop entitled “The Attention Economy: How Big Tech Firms Exploit Children and Hurt Families” for June 4, 2025, which will be held both in-person and virtually. View Press Release - [FTC Launches Public Inquiry into Anti-Competitive Regulations](https://compliance-by-design.net/2025/04/14/ftc-launches-public-inquiry-into-anti-competitive-regulations/): Today, the Federal Trade Commission launched a public inquiry into the impact of federal regulations on competition, with the goal of identifying and reducing anticompetitive regulatory barriers.View Press Release - [EDPB adopts guidelines on processing personal data through blockchains and is ready to cooperate with AI office on guidelines on AI Act and EU data protection law](https://compliance-by-design.net/2025/04/14/edpb-adopts-guidelines-on-processing-personal-data-through-blockchains-and-is-ready-to-cooperate-with-ai-office-on-guidelines-on-ai-act-and-eu-data-protection-law/): Brussels, 14 April – During its April 2025 plenary, the European Data Protection Board (EDPB) has adopted guidelines on processing of personal data through blockchain technologies.  A blockchain is a distributed digital ledger system that can confirm transactions  and  establish  who  owned  a  digital  asset  (such  as cryptocurrency)  at  a  given  time. Blockchains can also ... Read more - [FTC Seeks Public Comment on Petition to Modify Exxon-Pioneer Final Order](https://compliance-by-design.net/2025/04/11/ftc-seeks-public-comment-on-petition-to-modify-exxon-pioneer-final-order/): The Federal Trade Commission seeks public comment on a petition filed by Scott Sheffield, the founder and former CEO of Pioneer Natural Resources, requesting that the Commission reopen and set aside a final consent order involving Exxon Mobil Corporation’s acquisition of Pioneer. View Press Release - [FTC Seeks Public Comment on Petition to Modify Chevron-Hess Final Order](https://compliance-by-design.net/2025/04/11/ftc-seeks-public-comment-on-petition-to-modify-chevron-hess-final-order/): The Federal Trade Commission is seeking public comment on a petition filed by Chevron Corporation and Hess Corporation requesting that the Commission reopen and set aside a final consent order involving Chevron’s acquisition of Hess. View Press Release - [FTC Chairman Ferguson Congratulates Mark Meador on Confirmation as FTC Commissioner](https://compliance-by-design.net/2025/04/10/ftc-chairman-ferguson-congratulates-mark-meador-on-confirmation-as-ftc-commissioner/): Federal Trade Commission Chairman Andrew N. Ferguson today congratulated Mark R. Meador on his confirmation to serve as an FTC Commissioner. “I am thrilled to welcome Mark to the Commission,” Chairman Ferguson said. “Mark is a brilliant antitrust lawyer who will be a great asset to the Trump-Vance FTC.” View Press Release - [FTC Approves Modification of Enbridge Inc. Final Order](https://compliance-by-design.net/2025/04/08/ftc-approves-modification-of-enbridge-inc-final-order/): The Federal Trade Commission approved a petition by Enbridge Inc. to reopen and set aside the Commission’s 2017 final consent order related to Enbridge’s merger with Spectra Energy Corp.View Press Release - [FTC Highlights Actions to Protect Consumers from Impersonation Scams](https://compliance-by-design.net/2025/04/04/ftc-highlights-actions-to-protect-consumers-from-impersonation-scams/): Impersonation scams are among the top reported frauds to the FTC, with losses totaling $2.95 billion in 2024 The Federal Trade Commission today highlighted actions taken to protect consumers from impersonations scams since the Government and Business Impersonation Rule took effect in April 2024. Scams impersonating businesses and government are consistently among the top frauds reported ... Read more - [FTC Requests Public Comment on EnCap, Verdun, XCL Petition to Modify Order](https://compliance-by-design.net/2025/04/02/ftc-requests-public-comment-on-encap-verdun-xcl-petition-to-modify-order/): The Federal Trade Commission is seeking public comment on a petition to reopen and modify a 2022 final consent order involving Verdun Oil Company II LLC’s (Verdun) acquisition of EP Energy LLC (EP). View Press Release - [FTC Warns Operators of Websites that Charge for an Employer Identification Number and Claim Affiliation with the IRS](https://compliance-by-design.net/2025/04/01/ftc-warns-operators-of-websites-that-charge-for-an-employer-identification-number-and-claim-affiliation-with-the-irs/): Sites may trick consumers into thinking they are, or are affiliated with, the IRS when they are not Federal Trade Commission staff sent letters to operators of websites that sell Employer Identification Number (EIN) filing and delivery services warning that some of their practices may violate the FTView Press Release - [Federal Trade Commission Chairman Andrew N. Ferguson Issues Letter on 23andMe Bankruptcy Impact to Consumers](https://compliance-by-design.net/2025/03/31/federal-trade-commission-chairman-andrew-n-ferguson-issues-letter-on-23andme-bankruptcy-impact-to-consumers/): Today, Federal Trade Commission Chairman Andrew N Ferguson issued a letter to the U.S. Trustee regarding the 23andMe bankruptcy proceeding, expressing the concerns American consumers have with the potential sale or transfer of their 23andMe data. View Press Release - [FTC Names Additional Defendants in Student Loan Debt Relief Case](https://compliance-by-design.net/2025/03/28/ftc-names-additional-defendants-in-student-loan-debt-relief-case/): The Federal Trade Commission named five additional corporate defendants and two individuals in its ongoing case against a student loan debt relief operation. View Press Release - [Federal Trade Commission Chairman Andrew N. Ferguson Statement on Former Commissioners Slaughter and Bedoya](https://compliance-by-design.net/2025/03/27/federal-trade-commission-chairman-andrew-n-ferguson-statement-on-former-commissioners-slaughter-and-bedoya/): Federal Trade Commission Chairman Andrew N. Ferguson issued the following statement on Former Commissioners Rebecca Kelly Slaughter and Alvaro Bedoya: View Press Release - [Cash Advance Company Cleo AI Agrees to Pay $17 Million As Result of FTC Lawsuit Charging It Deceives Consumers](https://compliance-by-design.net/2025/03/27/cash-advance-company-cleo-ai-agrees-to-pay-17-million-as-result-of-ftc-lawsuit-charging-it-deceives-consumers/): FTC complaint charges that Cleo misleads consumers about amounts and timing of available cash advances and obstructs efforts to cancel subscriptions Online cash advance company Cleo AI has agreed to pay $17 million to settle the Federal Trade Commission’s allegations that the company deceived consumers about how much money they could get and how fast ... Read more - [Exploring quantum computing and its impact on future technologies](https://compliance-by-design.net/2025/03/27/exploring-quantum-computing-and-its-impact-on-future-technologies/): This is placeholder text for a H2 headline Lorem ipsum amet elit morbi dolor tortor. Vivamus eget mollis nostra ullam corper. Pharetra torquent auctor metus felis nibh velit. Natoque tellus semper taciti nostra primis lectus donec tortor fusce morbi risus curae. Semper pharetra montes habitant congue integer nisi nullam magnis nulla maximus. Integer primis vivamus ... Read more - [Examining global cultures and traditions from around the world](https://compliance-by-design.net/2025/03/27/examining-global-cultures-and-traditions-from-around-the-world/): This is placeholder text for a H2 headline Lorem ipsum amet elit morbi dolor tortor. Vivamus eget mollis nostra ullam corper. Pharetra torquent auctor metus felis nibh velit. Natoque tellus semper taciti nostra primis lectus donec tortor fusce morbi risus curae. Semper pharetra montes habitant congue integer nisi nullam magnis nulla maximus. Integer primis vivamus ... Read more - [The surprising benefits of urban beekeeping for city environments](https://compliance-by-design.net/2025/03/27/the-surprising-benefits-of-urban-beekeeping-for-city-environments/): This is placeholder text for a H2 headline Lorem ipsum amet elit morbi dolor tortor. Vivamus eget mollis nostra ullam corper. Pharetra torquent auctor metus felis nibh velit. Natoque tellus semper taciti nostra primis lectus donec tortor fusce morbi risus curae. Semper pharetra montes habitant congue integer nisi nullam magnis nulla maximus. Integer primis vivamus ... Read more - [Innovative business strategies to boost your company’s growth](https://compliance-by-design.net/2025/03/27/innovative-business-strategies-to-boost-your-companys-growth/): This is placeholder text for a H2 headline Lorem ipsum amet elit morbi dolor tortor. Vivamus eget mollis nostra ullam corper. Pharetra torquent auctor metus felis nibh velit. Natoque tellus semper taciti nostra primis lectus donec tortor fusce morbi risus curae. Semper pharetra montes habitant congue integer nisi nullam magnis nulla maximus. Integer primis vivamus ... Read more - [Transform your morning routine with simple hacks for productivity](https://compliance-by-design.net/2025/03/27/transform-your-morning-routine-with-simple-hacks-for-productivity/): This is placeholder text for a H2 headline Lorem ipsum amet elit morbi dolor tortor. Vivamus eget mollis nostra ullam corper. Pharetra torquent auctor metus felis nibh velit. Natoque tellus semper taciti nostra primis lectus donec tortor fusce morbi risus curae. Semper pharetra montes habitant congue integer nisi nullam magnis nulla maximus. Integer primis vivamus ... Read more - [The impact of social media on modern political campaign strategies](https://compliance-by-design.net/2025/03/27/the-impact-of-social-media-on-modern-political-campaign-strategies/): This is placeholder text for a H2 headline Lorem ipsum amet elit morbi dolor tortor. Vivamus eget mollis nostra ullam corper. Pharetra torquent auctor metus felis nibh velit. Natoque tellus semper taciti nostra primis lectus donec tortor fusce morbi risus curae. Semper pharetra montes habitant congue integer nisi nullam magnis nulla maximus. Integer primis vivamus ... Read more - [The rise of artificial intelligence in everyday business operations](https://compliance-by-design.net/2025/03/27/the-rise-of-artificial-intelligence-in-everyday-business-operations/): This is placeholder text for a H2 headline Lorem ipsum amet elit morbi dolor tortor. Vivamus eget mollis nostra ullam corper. Pharetra torquent auctor metus felis nibh velit. Natoque tellus semper taciti nostra primis lectus donec tortor fusce morbi risus curae. Semper pharetra montes habitant congue integer nisi nullam magnis nulla maximus. Integer primis vivamus ... Read more - [How technology is redefining our culture and social interactions](https://compliance-by-design.net/2025/03/27/how-technology-is-redefining-our-culture-and-social-interactions/): This is placeholder text for a H2 headline Lorem ipsum amet elit morbi dolor tortor. Vivamus eget mollis nostra ullam corper. Pharetra torquent auctor metus felis nibh velit. Natoque tellus semper taciti nostra primis lectus donec tortor fusce morbi risus curae. Semper pharetra montes habitant congue integer nisi nullam magnis nulla maximus. Integer primis vivamus ... Read more - [Exploring cryptozoology myths and legends with modern forensics](https://compliance-by-design.net/2025/03/27/exploring-cryptozoology-myths-and-legends-with-modern-forensics/): This is placeholder text for a H2 headline Lorem ipsum amet elit morbi dolor tortor. Vivamus eget mollis nostra ullam corper. Pharetra torquent auctor metus felis nibh velit. Natoque tellus semper taciti nostra primis lectus donec tortor fusce morbi risus curae. Semper pharetra montes habitant congue integer nisi nullam magnis nulla maximus. Integer primis vivamus ... Read more - [How small businesses can navigate the modern digital marketplace](https://compliance-by-design.net/2025/03/27/how-small-businesses-can-navigate-the-modern-digital-marketplace/): This is placeholder text for a H2 headline Lorem ipsum amet elit morbi dolor tortor. Vivamus eget mollis nostra ullam corper. Pharetra torquent auctor metus felis nibh velit. Natoque tellus semper taciti nostra primis lectus donec tortor fusce morbi risus curae. Semper pharetra montes habitant congue integer nisi nullam magnis nulla maximus. Integer primis vivamus ... Read more - [Staying grounded and healthy through mindfulness and fitness](https://compliance-by-design.net/2025/03/27/staying-grounded-and-healthy-through-mindfulness-and-fitness/): This is placeholder text for a H2 headline Lorem ipsum amet elit morbi dolor tortor. Vivamus eget mollis nostra ullam corper. Pharetra torquent auctor metus felis nibh velit. Natoque tellus semper taciti nostra primis lectus donec tortor fusce morbi risus curae. Semper pharetra montes habitant congue integer nisi nullam magnis nulla maximus. Integer primis vivamus ... Read more - [Ten influential leaders shaping global politics and policymaking](https://compliance-by-design.net/2025/03/27/ten-influential-leaders-shaping-global-politics-and-policymaking/): This is placeholder text for a H2 headline Lorem ipsum amet elit morbi dolor tortor. Vivamus eget mollis nostra ullam corper. Pharetra torquent auctor metus felis nibh velit. Natoque tellus semper taciti nostra primis lectus donec tortor fusce morbi risus curae. Semper pharetra montes habitant congue integer nisi nullam magnis nulla maximus. Integer primis vivamus ... Read more - [How blockchain technology is changing the financial industry](https://compliance-by-design.net/2025/03/27/how-blockchain-technology-is-changing-the-financial-industry/): This is placeholder text for a H2 headline Lorem ipsum amet elit morbi dolor tortor. Vivamus eget mollis nostra ullam corper. Pharetra torquent auctor metus felis nibh velit. Natoque tellus semper taciti nostra primis lectus donec tortor fusce morbi risus curae. Semper pharetra montes habitant congue integer nisi nullam magnis nulla maximus. Integer primis vivamus ... Read more - [The power of art and understanding its role in cultural identity](https://compliance-by-design.net/2025/03/27/the-power-of-art-and-understanding-its-role-in-cultural-identity/): This is placeholder text for a H2 headline Lorem ipsum amet elit morbi dolor tortor. Vivamus eget mollis nostra ullam corper. Pharetra torquent auctor metus felis nibh velit. Natoque tellus semper taciti nostra primis lectus donec tortor fusce morbi risus curae. Semper pharetra montes habitant congue integer nisi nullam magnis nulla maximus. Integer primis vivamus ... Read more - [Vintage car collecting draws enthusiasts across the globe](https://compliance-by-design.net/2025/03/27/vintage-car-collecting-draws-enthusiasts-across-the-globe/): This is placeholder text for a H2 headline Lorem ipsum amet elit morbi dolor tortor. Vivamus eget mollis nostra ullam corper. Pharetra torquent auctor metus felis nibh velit. Natoque tellus semper taciti nostra primis lectus donec tortor fusce morbi risus curae. Semper pharetra montes habitant congue integer nisi nullam magnis nulla maximus. Integer primis vivamus ... Read more - [Top trends shaping the future of business in today’s economy](https://compliance-by-design.net/2025/03/27/top-trends-shaping-the-future-of-business-in-todays-economy/): This is placeholder text for a H2 headline Lorem ipsum amet elit morbi dolor tortor. Vivamus eget mollis nostra ullam corper. Pharetra torquent auctor metus felis nibh velit. Natoque tellus semper taciti nostra primis lectus donec tortor fusce morbi risus curae. Semper pharetra montes habitant congue integer nisi nullam magnis nulla maximus. Integer primis vivamus ... Read more - [Maximize happiness by balancing work, family and personal time](https://compliance-by-design.net/2025/03/27/maximize-happiness-by-balancing-work-family-and-personal-time/): This is placeholder text for a H2 headline Lorem ipsum amet elit morbi dolor tortor. Vivamus eget mollis nostra ullam corper. Pharetra torquent auctor metus felis nibh velit. Natoque tellus semper taciti nostra primis lectus donec tortor fusce morbi risus curae. Semper pharetra montes habitant congue integer nisi nullam magnis nulla maximus. Integer primis vivamus ... Read more - [The influence of political satire on public opinion and awareness](https://compliance-by-design.net/2025/03/27/the-influence-of-political-satire-on-public-opinion-and-awareness/): This is placeholder text for a H2 headline Lorem ipsum amet elit morbi dolor tortor. Vivamus eget mollis nostra ullam corper. Pharetra torquent auctor metus felis nibh velit. Natoque tellus semper taciti nostra primis lectus donec tortor fusce morbi risus curae. Semper pharetra montes habitant congue integer nisi nullam magnis nulla maximus. Integer primis vivamus ... Read more - [FTC Chairman Andrew N. Ferguson Appoints Deputy Directors of the Bureaus of Competition and Consumer Protection](https://compliance-by-design.net/2025/03/26/ftc-chairman-andrew-n-ferguson-appoints-deputy-directors-of-the-bureaus-of-competition-and-consumer-protection/): Federal Trade Commission Chairman Andrew N. Ferguson today announced he has appointed Taylor C. Hoogendoorn as Deputy Director of the Bureau of Competition and Katherine White as Deputy Director of the Bureau of Consumer Protection.  View Press Release - [FTC to Hold Workshop on May 28 on The Attention Economy: How Big Tech Firms Exploit Children and Hurt Families](https://compliance-by-design.net/2025/03/25/ftc-to-hold-workshop-on-may-28-on-the-attention-economy-how-big-tech-firms-exploit-children-and-hurt-families/): The workshop will be held in-person and online Today, the Federal Trade Commission announced a workshop entitled “The Attention Economy: How Big Tech Firms Exploit Children and Hurt Families.” The workshop will be held on May 28th at the Federal Trade Commission in Washington, D.C. and streamed online.  View Press Release - [FTC Suit Against E-Commerce Business Opportunity Scam Leads to Permanent Bans for Operators](https://compliance-by-design.net/2025/03/24/ftc-suit-against-e-commerce-business-opportunity-scam-leads-to-permanent-bans-for-operators/): Court orders lifetime bans, monetary judgments The Federal Trade Commission is requiring operators of a deceptive business opportunity to pay hundreds of thousands of dollars to settle allegations they misled consumers with false promises of big returns selling goods through Amazon and Walmart. View Press Release - [FTC Chairman Andrew N. Ferguson Statement on Former Commissioners Slaughter and Bedoya](https://compliance-by-design.net/2025/03/19/ftc-chairman-andrew-n-ferguson-statement-on-former-commissioners-slaughter-and-bedoya/): Federal Trade Commission Chairman Andrew N. Ferguson issued the following statement on Former Commissioners Rebecca Kelly Slaughter and Alvaro Bedoya: View Press Release - [FTC Acts to Stop ‘Click Profit’ Online Business Opportunity that Has Cost Consumers At Least $14 Million](https://compliance-by-design.net/2025/03/18/ftc-acts-to-stop-click-profit-online-business-opportunity-that-has-cost-consumers-at-least-14-million/): Court order temporarily halts operation that falsely promised big profits through supposed AI-powered online stores At the request of the Federal Trade Commission, a federal court temporarily halted a business opportunity scheme known as Click Profit, which took millions from consumers by falsely promising consumers that they could earn big profits through online sales. View Press ... Read more - [FTC Staff Reaffirm Opposition to Proposed Indiana Hospital Merger](https://compliance-by-design.net/2025/03/17/ftc-staff-reaffirm-opposition-to-proposed-indiana-hospital-merger/): Today, Federal Trade Commission staff again urged the Indiana Department of Health to deny Union Hospital, Inc. (Union Health) and Terre Haute Regional Hospital, L.P.’s (THRH) application to merge. View Press Release - [New Report Shows FTC Returned $337.3 Million to Consumers in 2024](https://compliance-by-design.net/2025/03/14/new-report-shows-ftc-returned-337-3-million-to-consumers-in-2024/): As a result of the agency’s law enforcement actions, the Federal Trade Commission sent $337.3 million in refunds to consumers in 2024, according to the FTC’s annual report on refunds released today. View Press Release - [EDPB adopts statement on the implementation of the PNR directive](https://compliance-by-design.net/2025/03/14/edpb-adopts-statement-on-the-implementation-of-the-pnr-directive/): Brussels, 14 March – During its March 2025 plenary meeting, the European Data Protection Board (EDPB) adopted a statement on the implementation of the Passenger Name Record Directive (PNR) in light of the Court of Justice of the EU (CJEU) judgment C-817/19*.  In its second statement on the implementation of the PNR Directive, which follows ... Read more - [FTC Sends More Than $934,000 in Refunds to Consumers Harmed by Vroom’s Failed Delivery Promises](https://compliance-by-design.net/2025/03/13/ftc-sends-more-than-934000-in-refunds-to-consumers-harmed-by-vrooms-failed-delivery-promises/): The Federal Trade Commission is sending more than $934,000 in refunds to consumers who were harmed by online used car dealer Vroom’s shipment delays. View Press Release Giovani AndersonOffice of Public Affairs - [FTC Sends More Than $15.5 Million in Refunds to Consumers Affected by Career Step’s Deceptive Job Placement and Employer Partnerships Claims](https://compliance-by-design.net/2025/03/12/ftc-sends-more-than-15-5-million-in-refunds-to-consumers-affected-by-career-steps-deceptive-job-placement-and-employer-partnerships-claims/): The Federal Trade Commission is sending more than $15.5 million in refunds to consumers, including servicemembers and their spouses, lured by online career-training company Career Step’s deceptive ads and false claims about its training programs. View Press Release - [FTC Sends More than $25.5 Million to Consumers Impacted by Tech Support Firms’ Scam](https://compliance-by-design.net/2025/03/10/ftc-sends-more-than-25-5-million-to-consumers-impacted-by-tech-support-firms-scam/): The Federal Trade Commission is sending payments totaling more than $25.5 million to consumers who were tricked into signing up for computer repair services through the deceptive marketing tactics of two tech support companies. View Press Release - [New FTC Data Show a Big Jump in Reported Losses to Fraud to $12.5 Billion in 2024](https://compliance-by-design.net/2025/03/10/new-ftc-data-show-a-big-jump-in-reported-losses-to-fraud-to-12-5-billion-in-2024/): Consumers reported losing the most to investment scams at $5.7 billion Newly released Federal Trade Commission data show that consumers reported losing more than $12.5 billion to fraud in 2024, which represents a 25% increase over the prior year. View Press Release - [FTC Takes Action to Stop Sprawling ‘Growth Cave’ Business Opportunity and Credit Repair Scam](https://compliance-by-design.net/2025/03/07/ftc-takes-action-to-stop-sprawling-growth-cave-business-opportunity-and-credit-repair-scam/): Court issues temporary halt to operations, freezes assets As a result of a Federal Trade Commission lawsuit, a federal court has temporarily halted the operations of a wide-ranging business opportunity and credit repair scam that has operated under the name “Growth Cave” since at least 2020. View Press Release - [FTC Challenges Medical Device Coatings Deal](https://compliance-by-design.net/2025/03/06/ftc-challenges-medical-device-coatings-deal/): GTCR’s acquisition of Surmodics will lead to increased concentration in a critical medical device coating market, harming patients, medical device manufacturers, the FTC alleges The Federal Trade Commission today sued to block GTCR BC Holdings, LLC’s (GTCR) acquisition of Surmodics, Inc. (Surmodics), alleging that the deal, which seeks to combine the two largest manufacturers of ... Read more - [FTC Sends Refunds to Consumers Deceived by Pure Green Coffee Weight Loss Ads](https://compliance-by-design.net/2025/03/06/ftc-sends-refunds-to-consumers-deceived-by-pure-green-coffee-weight-loss-ads/): The Federal Trade Commission is sending more than $905,000 in refunds to consumers who bought Pure Green Coffee, a sham weight loss product marketed using false health claims, bogus testimonials, and fake news websites by NPB Advertising. View Press Release - [CEF 2025: Launch of coordinated enforcement on the right to erasure](https://compliance-by-design.net/2025/03/05/cef-2025-launch-of-coordinated-enforcement-on-the-right-to-erasure/): Brussels, 05 March – The European Data Protection Board (EDPB) has launched its Coordinated Enforcement Framework (CEF) action for 2025. Following a year-long coordinated action on the right of access in 2024, the CEF’s focus this year will shift to the implementation of another data protection right, namely the right to erasure or the “right ... Read more - [FTC Secures Initial Win in Small Business Finance Scheme Case Against Seek Capital](https://compliance-by-design.net/2025/03/05/ftc-secures-initial-win-in-small-business-finance-scheme-case-against-seek-capital/): The Federal Trade Commission secured an initial win in its case against Seek Capital and the company’s founder and CEO, Roy Ferman, after the U.S. Court for the Central District of California granted the FTC’s motion for a preliminary injunction. View Press Release - [FTC Action Leads to Court Order Halting Phantom Debt Collection Scheme That Took Millions from Consumers and Threatened Consumers’ Credit, Homes, and Employment](https://compliance-by-design.net/2025/03/03/ftc-action-leads-to-court-order-halting-phantom-debt-collection-scheme-that-took-millions-from-consumers-and-threatened-consumers-credit-homes-and-employment/): As result of FTC lawsuit, federal court issues temporary restraining order halting scheme that sent fictitious debt collection notices to consumers nationwide As a result of a Federal Trade Commission lawsuit, a federal court has temporarily halted the operations and frozen the assets of a phantom debt collection scheme and its operators.View Press Release - [FTC Launches Joint Labor Task Force to Protect American Workers](https://compliance-by-design.net/2025/02/26/ftc-launches-joint-labor-task-force-to-protect-american-workers/): Today, Federal Trade Commission Chairman Andrew N. Ferguson directed the FTC to form a Joint Labor Task Force that will work to prioritize rooting out and prosecuting deceptive, unfair, and anticompetitive labor-market practices that harm American workers. View Press Release - [FTC Approves Final Order Requiring Building Service Contractor to Stop Enforcing a No-Hire Agreement](https://compliance-by-design.net/2025/02/26/ftc-approves-final-order-requiring-building-service-contractor-to-stop-enforcing-a-no-hire-agreement/): The Federal Trade Commission today finalized a consent order that requires building services contractor Planned Building Services and its affiliated companies to cease their enforcement of no-hire agreements. View Press Release - [Celebrating 1 Year of CSF 2.0](https://compliance-by-design.net/2025/02/26/celebrating-1-year-of-csf-2-0/): It has been one year since the release of the NIST Cybersecurity Framework (CSF) 2.0 ! To make improving your security posture even easier, in this blog we are: Sharing new CSF 2.0 resources; Taking a retrospective look at some resources and applications you may have missed; and Highlighting ways you can stay involved in ... Read more - [FTC Announces Refund Claims Process for Avast Customers Impacted by Deceptive Privacy Claims](https://compliance-by-design.net/2025/02/24/ftc-announces-refund-claims-process-for-avast-customers-impacted-by-deceptive-privacy-claims/): The Federal Trade Commission is sending claim forms to consumers who bought deceptively marketed antivirus software from Avast. View Press Release - [Federal Trade Commission Launches Inquiry on Tech Censorship](https://compliance-by-design.net/2025/02/20/federal-trade-commission-launches-inquiry-on-tech-censorship/): Today, the Federal Trade Commission launched a public inquiry to better understand how technology platforms deny or degrade users’ access to services based on the content of their speech or affiliations, and how this conduct may have violated the law. View Press Release - [FTC Secures Court Order Barring Gravity Defyer and its Owner from Making Unsupported Pain-Relief Claims to Market Company’s Footwear](https://compliance-by-design.net/2025/02/20/ftc-secures-court-order-barring-gravity-defyer-and-its-owner-from-making-unsupported-pain-relief-claims-to-market-companys-footwear/): Gravity Defyer Medical Technology Corporation (Gravity Defyer) and its owner Alexander Elnekaveh will have to stop making alleged deceptive pain-relief claims for Gravity Defyer footwear, under a settlement with the Federal Trade Commission. View Press Release - [FTC Sends More Than $19.8 Million in Refunds to Consumers Harmed by Aqua Finance’s Deceptive Sales Tactics](https://compliance-by-design.net/2025/02/19/ftc-sends-more-than-19-8-million-in-refunds-to-consumers-harmed-by-aqua-finances-deceptive-sales-tactics/): Image View Press Release - [FTC Chairman Andrew N. Ferguson Announces that the FTC and DOJ’s Joint 2023 Merger Guidelines Are in Effect](https://compliance-by-design.net/2025/02/18/ftc-chairman-andrew-n-ferguson-announces-that-the-ftc-and-dojs-joint-2023-merger-guidelines-are-in-effect/): Federal Trade Commission Chairman Andrew N. Ferguson announced today that the FTC and Department of Justice’s joint 2023 Merger Guidelines are in effect and will serve as the framework for the FTC’s merger-review analysis. View Press Release - [Great Website Accessibility Checker](https://compliance-by-design.net/2025/10/02/great-website-accessibility-checker/): by Accessibe - [Copyright Detection Tool to Catch Copyrighted Content](https://compliance-by-design.net/2025/10/02/copyright-detection-tool-to-catch-copyrighted-content/): by filestack - [Reliable terms generator for your online legalese](https://compliance-by-design.net/2025/10/02/reliable-terms-generator-for-your-online-legalese/): by iubenda - [Empower Your Designers to Create Impactful Inclusive, and Compliant Designs](https://compliance-by-design.net/2025/10/02/empower-your-designers-to-create-impactful-inclusive-and-compliant-designs/): Creating inclusive interfaces isn’t just a best practice or the right thing to do — it’s the law. Organisations and their design teams can no longer treat accessible design as an afterthought. Countries around the world have for some time required public institutions to design their sites and applications to be accessible to all. Increasingly, ... Read more - [FTC Denies Petition to Reopen EQT, Quantum Energy Order](https://compliance-by-design.net/2025/09/30/ftc-denies-petition-to-reopen-eqt-quantum-energy-order/): The Federal Trade Commission denied a petition seeking to reopen and set aside a final consent order involving a $5.2 billion cash-and-stock deal between private equity firm Quantum Energy Partners and natural gas producer EQT Corporation. View Press Release - [FTC Sues Zillow and Redfin Over Illegal Agreement to Suppress Rental Advertising Competition](https://compliance-by-design.net/2025/09/30/ftc-sues-zillow-and-redfin-over-illegal-agreement-to-suppress-rental-advertising-competition/): Illegal deal stunts multifamily rental advertising competition, harming American renters and property managers, the FTC alleges Today, the Federal Trade Commission sued Zillow and Redfin over an unlawful agreement that eliminates Redfin as a competitor in the market for placing advertising of rental housing on internet listing services (ILSs)—the websites that millions of Americans use ... Read more - [Citizens Disability to Pay $1 Million over FTC Charges that it Made Tens of Millions of Illegal and Misleading Calls to Consumers Nationwide](https://compliance-by-design.net/2025/09/30/citizens-disability-to-pay-1-million-over-ftc-charges-that-it-made-tens-of-millions-of-illegal-and-misleading-calls-to-consumers-nationwide/): Defendants gathered information on vulnerable consumers through websites offering prizes, coupons, and other services, and subjected them to illegal telemarketing calls Citizens Disability, LLC and its subsidiary will pay a $1 million penalty to resolve Federal Trade Commission allegations that they made tens of millions of illegal calls to consumers, including to numbers on the ... Read more - [Sharpening the Focus on Product Requirements and Cybersecurity Risks: Updating Foundational Activities for IoT Product Manufacturers](https://compliance-by-design.net/2025/09/30/sharpening-the-focus-on-product-requirements-and-cybersecurity-risks-updating-foundational-activities-for-iot-product-manufacturers/): Over the past few months, NIST has been revising and updating Foundational Activities for IoT Product Manufacturers (NIST IR 8259 Revision 1 Initial Public Draft), which describes recommended pre-market and post-market activities for manufacturers to develop products that meet their customers’ cybersecurity needs and expectations. Thank you so much for the thoughtful comments and feedback ... Read more - [FTC Investigation Leads to Lawsuit Alleging Sendit App and its CEO Unlawfully Collected Personal Data from Children, Deceived Users About Messages, Subscription Memberships](https://compliance-by-design.net/2025/09/30/ftc-investigation-leads-to-lawsuit-alleging-sendit-app-and-its-ceo-unlawfully-collected-personal-data-from-children-deceived-users-about-messages-subscription-memberships/): In addition to violating COPPA, Sendit’s operator allegedly deceived users by falsely promising that buying a subscription would reveal the senders of anonymous messages The Federal Trade Commission is taking action against the operator of the Sendit anonymous messaging app for unlawfully collecting personal data from children, misleading users by sending messages from fake “people,” ... Read more - [Dun & Bradstreet Agrees to Pay $5.7 Million to Resolve Alleged Violations of FTC Order](https://compliance-by-design.net/2025/09/29/dun-bradstreet-agrees-to-pay-5-7-million-to-resolve-alleged-violations-of-ftc-order/): Alleged violations include misrepresenting prices and products and harming American businesses Business credit report service provider Dun & Bradstreet (D&B) has agreed to a $5.7 million settlement with the Federal Trade Commission over allegations the firm violated a 2022 order.View Press Release - [Federal Trade Commission, US Department of Justice, and Japan Fair Trade Commission Meet in Washington](https://compliance-by-design.net/2025/09/29/federal-trade-commission-us-department-of-justice-and-japan-fair-trade-commission-meet-in-washington/): Federal Trade Commission Chairman Andrew N. Ferguson, Assistant Attorney General Abigail Slater of the Justice Department’s Antitrust Division, and Japan Fair Trade Commission Chairman Eiji Chatani of the Japan Fair Trade Commission (JFTC) met today in Washington, D.C., to continue the United States and Japan’s long history of engagement on competition issues affecting both countries. ... Read more - [FTC Invites Public Comment on Draft Strategic Plan](https://compliance-by-design.net/2025/09/26/ftc-invites-public-comment-on-draft-strategic-plan/): The Federal Trade Commission is seeking public comment on the agency’s proposed Strategic Plan for Fiscal Years 2026-2030. View Press Release - [FTC Alters Final Consent Order in Response to Public Comments, Preventing Coordination in Global Advertising Merger](https://compliance-by-design.net/2025/09/26/ftc-alters-final-consent-order-in-response-to-public-comments-preventing-coordination-in-global-advertising-merger/): Following a public comment period, the Federal Trade Commission has approved a final order to settle Federal Trade Commission charges that Omnicom Group Inc.’s $13.5 billion acquisition of The Interpublic Group of Companies, Inc.View Press Release - [FTC and 19 States Act to Stop a Deceptive Cancer Charity Fundraising Scheme](https://compliance-by-design.net/2025/09/25/ftc-and-19-states-act-to-stop-a-deceptive-cancer-charity-fundraising-scheme/): Kars-R-Us.com and its operators raised millions but only a fraction of donations went to fund breast cancer screenings, FTC and states allege The Federal Trade Commission, along with 22 agencies from 19 states, stopped a deceptive charity fundraising scheme and its operators who made false or deceptive claims to U.S. donors. View Press Release - [FTC Secures Historic $2.5 Billion Settlement Against Amazon](https://compliance-by-design.net/2025/09/25/ftc-secures-historic-2-5-billion-settlement-against-amazon/): Agency alleged that Amazon used deceptive methods to sign up consumers for Prime subscriptions and made it exceedingly difficult to cancel The Federal Trade Commission has secured a historic order with Amazon.com, Inc., as well as Senior Vice President Neil Lindsay and Vice President Jamil Ghani, settling allegations that Amazon enrolled millions of consumers in ... Read more - [FTC Sues Live Nation and Ticketmaster for Engaging in Illegal Ticket Resale Tactics and Deceiving Artists and Consumers about Price and Ticket Limits](https://compliance-by-design.net/2025/09/18/ftc-sues-live-nation-and-ticketmaster-for-engaging-in-illegal-ticket-resale-tactics-and-deceiving-artists-and-consumers-about-price-and-ticket-limits/): Agency alleges Ticketmaster used deceptive pricing tactics and earned hundreds of millions selling tickets acquired illegally by brokers, costing consumers billions of dollars in inflated prices and additional fees The Federal Trade Commission and seven states sued Live Nation and Ticketmaster for tacitly coordinating with brokers and allowing them to harvest millions of dollars worth ... Read more - [FTC Announces Workshop on Noncompete Agreements](https://compliance-by-design.net/2025/09/17/ftc-announces-workshop-on-noncompete-agreements/): The workshop will include discussion with policy experts, economists, advocates, and victims of unfair noncompete agreements. Today the Federal Trade Commission announced it will host a workshop, titled “Moving Forward: Protecting Workers from Anticompetitive Noncompete Agreements.” The evenView Press Release - [FTC Sends Money to Consumers Harmed by Deceptive Business Opportunity Scheme Known as “Blueprint to Wealth”](https://compliance-by-design.net/2025/09/17/ftc-sends-money-to-consumers-harmed-by-deceptive-business-opportunity-scheme-known-as-blueprint-to-wealth/): View Press Release - [FTC and DOJ Issue Fiscal Year 2024 Hart-Scott-Rodino Annual Report](https://compliance-by-design.net/2025/09/17/ftc-and-doj-issue-fiscal-year-2024-hart-scott-rodino-annual-report/): The Federal Trade Commission and the Department of Justice’s (DOJ) Antitrust Division released their 47th Annual Hart-Scott-Rodino (HSR) Report. View Press Release - [FTC Recommends Anticompetitive Regulations for Deletion or Revision](https://compliance-by-design.net/2025/09/17/ftc-recommends-anticompetitive-regulations-for-deletion-or-revision/): On Tuesday, Federal Trade Commission Chairman Andrew N. Ferguson submitted recommendations for deleting or revising anticompetitive regulations across the entire federal government to the White House’s Office of Management and Budget.View Press Release - [Three Directors Resign from Sevita Board of Directors in Response to the FTC’s Ongoing Enforcement Efforts Against Interlocking Directorates](https://compliance-by-design.net/2025/09/15/three-directors-resign-from-sevita-board-of-directors-in-response-to-the-ftcs-ongoing-enforcement-efforts-against-interlocking-directorates/): The FTC Continues to Focus on Competitors Sharing Company Directors in Violation of Section 8 of the Clayton Act The Federal Trade Commission announced today that three individuals have resigned from their positions on the Board of Directors of Sevita Health (Sevita) in response to the Federal Trade Commission’s enforcement of the Clayton Act, which ... Read more - [Ed Tech Provider Chegg to Pay $7.5 Million to Settle FTC Allegations Concerning Unlawful Cancellation Practices](https://compliance-by-design.net/2025/09/15/ed-tech-provider-chegg-to-pay-7-5-million-to-settle-ftc-allegations-concerning-unlawful-cancellation-practices/): FTC alleges Chegg failed to provide simple mechanisms for cancellation and made it difficult for consumers to cancel recurring subscriptions Chegg Inc. will be required to pay $7.5 million to settle Federal Trade Commission allegations that the education technology provider made it extremely difficult for consumers to cancel recurring subscriptions while also failing to honor ... Read more - [Interplay between the DSA and the GDPR: EDPB adopts guidelines](https://compliance-by-design.net/2025/09/12/interplay-between-the-dsa-and-the-gdpr-edpb-adopts-guidelines/): Brussels, 12 September – During its September plenary meeting, the European Data Protection Board (EDPB) has adopted guidelines on the interplay between the Digital Services Act (DSA) and the General Data Protection Regulation (GDPR). These are the first set of EDPB guidelines on the interplay between the GDPR and the EU’s recently adopted digital laws. ... Read more - [Operators of Student Loan Forgiveness Scam Will Be Permanently Banned from Debt Relief Industry, Ordered to Turn Over Assets](https://compliance-by-design.net/2025/09/11/operators-of-student-loan-forgiveness-scam-will-be-permanently-banned-from-debt-relief-industry-ordered-to-turn-over-assets/): Eric Caldwell and David Hernandez will be permanently banned from the debt relief industry and required to turn over their assets to resolve Federal Trade Commission charges that they helped operate an illegal student loan debt-relief operation.View Press Release - [FTC Launches Inquiry into AI Chatbots Acting as Companions](https://compliance-by-design.net/2025/09/11/ftc-launches-inquiry-into-ai-chatbots-acting-as-companions/): Agency issues 6(b) orders to seven companies that operate consumer-facing AI chatbots The Federal Trade Commission is issuing orders to seven companies that provide consumer-facing AI-powered chatbots seeking information on how these firms measure, test, and monitor potentially negative impacts of this technology on children and teens. View Press Release - [FTC Chairman Ferguson Issues Noncompete Warning Letters to Healthcare Employers and Staffing Companies](https://compliance-by-design.net/2025/09/10/ftc-chairman-ferguson-issues-noncompete-warning-letters-to-healthcare-employers-and-staffing-companies/): Today, Federal Trade Commission Chairman Andrew N.View Press Release - [Federal Trade Commission Chairman Andrew N. Ferguson Appoints Emma Mittelstaedt Burnham as Associate Director for Healthcare](https://compliance-by-design.net/2025/09/09/federal-trade-commission-chairman-andrew-n-ferguson-appoints-emma-mittelstaedt-burnham-as-associate-director-for-healthcare/): Federal Trade Commission Chairman Andrew N. Ferguson has appointed Emma Mittelstaedt Burnham as Associate Director for Healthcare in the Bureau of Competition. View Press Release - [FTC Publishes Request for Public Comment on Proposed Modification to HISA’s Enforcement Rule](https://compliance-by-design.net/2025/09/09/ftc-publishes-request-for-public-comment-on-proposed-modification-to-hisas-enforcement-rule/): The Federal Trade Commission has published a request for public comment on the Horseracing Integrity and Safety Authority’s proposed modification of its Enforcement Rule. View Press Release - [Federal Trade Commission Files to Accede to Vacatur of Non-Compete Clause Rule](https://compliance-by-design.net/2025/09/05/federal-trade-commission-files-to-accede-to-vacatur-of-non-compete-clause-rule/): Today the Federal Trade Commission took steps to dismiss its appeals in Ryan, LLC v. FTC, No. 24-10951 (5th Cir.), and Properties of the Villages v. FTC, No. 24-13102 (11th Cir.), and to accede to the vacatur of the Non-Compete Clause Rule.  View Press Release - [Online Marketplace Temu to Pay $2 Million Penalty for Alleged INFORM Act Violations](https://compliance-by-design.net/2025/09/05/online-marketplace-temu-to-pay-2-million-penalty-for-alleged-inform-act-violations/): Action is the first brought under the Act, which ensures consumers can report suspicious activity to online marketplaces and contact major third party sellers Whaleco, Inc., which operates the online marketplace Temu, will pay $2 million to resolve allegations that it violated the INFORM Consumers Act of 2023, by failing to provide consumers with required ... Read more - [Federal Trade Commission Issues Request for Information on Employee Noncompete Agreements](https://compliance-by-design.net/2025/09/04/federal-trade-commission-issues-request-for-information-on-employee-noncompete-agreements/): Today the Federal Trade Commission launched a public inquiry to better understand the scope, prevalence, and effects of employer noncompete agreements, as well as to gather information to inform possible future enforcement actions. View Press Release - [FTC Takes Action to Protect Workers from Noncompete Agreements](https://compliance-by-design.net/2025/09/04/ftc-takes-action-to-protect-workers-from-noncompete-agreements/): FTC orders the nation’s largest pet cremation business to stop enforcing restrictive noncompete agreements that bind nearly 1,800 workers The Federal Trade Commission today took action to protect American workers from harmful labor practices by ordering pet cremation company Gateway Services, Inc. and its subsidiary to stop enforcing noncompete agreements against their employees. View Press ... Read more - [Defendants in IM Mastery Academy Scheme to Pay $10.5 Million to Settle FTC Allegations](https://compliance-by-design.net/2025/09/04/defendants-in-im-mastery-academy-scheme-to-pay-10-5-million-to-settle-ftc-allegations/): Alex Morton and Brandon Boyd also face prohibitions relating to sales and earnings claims Two defendants will pay a total of $10.5 million to settle Federal Trade Commission and State of Nevada allegations that they used false or baseless earnings claims to persuade people to pay for financial training programs and a multi-level-marketing business venture ... Read more - [FR SA: Cookies and advertisements inserted between emails: GOOGLE fined 325 000 000 EUR by the CNIL](https://compliance-by-design.net/2025/09/04/fr-sa-cookies-and-advertisements-inserted-between-emails-google-fined-325-000-000-eur-by-the-cnil/): Background information Date of decision: September 1st, 2025 National case Controller: GOOGLE IRELAND LIMITED and GOOGLE LLC Legal Reference: Obligation to obtain the consent of individuals to receive commercial prospecting by electronic means (Article L.34-5 of the French Post and Electronic Communications Code); Use of cookies without free and informed consent (Article 82 of the ... Read more - [FTC Publishes Proposed 2026 Budget for Horseracing Integrity and Safety Authority](https://compliance-by-design.net/2025/09/03/ftc-publishes-proposed-2026-budget-for-horseracing-integrity-and-safety-authority/): The Federal Trade Commission published in the Federal Register the Horseracing Integrity and Safety Authority’s proposed 2026 budget as submitted to the Commission. View Press Release - [FTC Takes Action Against Operators of Pornhub and other Pornographic Sites for Deceiving Users About Efforts to Crack Down on Child Sexual Abuse Material and Nonconsensual Sexual Content](https://compliance-by-design.net/2025/09/03/ftc-takes-action-against-operators-of-pornhub-and-other-pornographic-sites-for-deceiving-users-about-efforts-to-crack-down-on-child-sexual-abuse-material-and-nonconsensual-sexual-content/): Under proposed order with FTC and Utah, Operators of Pornhub will be required to implement a program to prevent such content from being published to its websites Note: The FTC and Utah will be hosting a media availability at 12 pm ET today. Participants will include FTC Commissioner Melissa Holyoak, Utah Commerce Executive Director Margaret Busse, ... Read more - [FTC Takes Action Against Robot Toy Maker for Allowing Collection of Children’s Data without Parental Consent](https://compliance-by-design.net/2025/09/03/ftc-takes-action-against-robot-toy-maker-for-allowing-collection-of-childrens-data-without-parental-consent/): In settling the allegations, Apitor will be required to ensure it complies with the COPPA Rule The Federal Trade Commission is taking action against robot toy maker Apitor Technology over allegations that its app enabled a third party in China to collect geolocation information from children without parental consent. View Press Release - [Disney to Pay $10 Million to Settle FTC Allegations the Company Enabled the Unlawful Collection of Children’s Personal Data](https://compliance-by-design.net/2025/09/02/disney-to-pay-10-million-to-settle-ftc-allegations-the-company-enabled-the-unlawful-collection-of-childrens-personal-data/): Under proposed order, Disney also will be required to implement a program to review whether videos posted to YouTube should be designated as “Made for Kids” Disney will pay $10 million to settle Federal Trade Commission allegations that the company allowed personal data to be collected from children who viewed kid-directed videos on YouTube without ... Read more - [Federal Trade Commission Chairman Andrew N. Ferguson Issues Letter on Gmail Using Partisan Filtering](https://compliance-by-design.net/2025/08/28/federal-trade-commission-chairman-andrew-n-ferguson-issues-letter-on-gmail-using-partisan-filtering/): Today, Federal Trade Commission Chairman Andrew N. Ferguson issued a letter to Alphabet, Inc.View Press Release - [FTC Approves Final Order against Workado, LLC, Which Misrepresented the Accuracy of its Artificial Intelligence Content Detection Product](https://compliance-by-design.net/2025/08/28/ftc-approves-final-order-against-workado-llc-which-misrepresented-the-accuracy-of-its-artificial-intelligence-content-detection-product/): The Federal Trade Commission has given final approval to an order against Workado, LLC, requiring the company to stop advertising the accuracy or efficacy of its artificial intelligence (AI) content detection products unless it has competent and reliable evidence showing those products are as accurate as claimed. View Press Release - [Telemarketer Fees to Access the FTC’s National Do Not Call Registry to Increase in 2026](https://compliance-by-design.net/2025/08/27/telemarketer-fees-to-access-the-ftcs-national-do-not-call-registry-to-increase-in-2026/): The Federal Trade Commission today announced new fees for telemarketers to access phone numbers on the National Do Not Call (DNC) Registry View Press Release - [FTC Sends More Than $6.7 Million to Consumers Impacted by Gig Work Company’s Deceptive Earnings Claims](https://compliance-by-design.net/2025/08/26/ftc-sends-more-than-6-7-million-to-consumers-impacted-by-gig-work-companys-deceptive-earnings-claims/): The Federal Trade Commission is sending more than $6.7 million to consumers impacted by a gig work company’s deceptive claims about the potential money workers could make on its platform. View Press Release - [FTC Sues to Stop Air AI from Using Deceptive Claims about Business Growth, Earnings Potential, and Refund Guarantees to Bilk Millions from Small Businesses](https://compliance-by-design.net/2025/08/25/ftc-sues-to-stop-air-ai-from-using-deceptive-claims-about-business-growth-earnings-potential-and-refund-guarantees-to-bilk-millions-from-small-businesses/): Agency alleges Air AI’s false promises have left many entrepreneurs and small businesses in debt, with losses up to $250,000 The Federal Trade Commission has asked a federal court to stop Air AI from using allegedly deceptive claims about business growth, earnings potential, and refund guarantees to fleece small businesses and entrepreneurs. View Press Release - [FTC Case Against E-Commerce Business Opportunity Scheme and its Operators Results in Permanent Ban from Industry](https://compliance-by-design.net/2025/08/25/ftc-case-against-e-commerce-business-opportunity-scheme-and-its-operators-results-in-permanent-ban-from-industry/): Under a proposed settlement with the FTC, Click Profit operators must also turn over their personal and business assets The operators of an e-commerce business opportunity scheme and their companies will be permanently banned from the industry as part of a settlement resolving Federal Trade Commission allegations that the defendants deceived consumers into paying millions ... Read more - [FTC Secures Preliminary Injunction Against IM Mastery Academy and Its Owners](https://compliance-by-design.net/2025/08/21/ftc-secures-preliminary-injunction-against-im-mastery-academy-and-its-owners/): Defendants are prohibited from misleading consumers and must preserve assets and records A U.S. District Court judge in Nevada has issued a preliminary injunction against the three companies that executed the IM Mastery Academy schemes and the two individuals who have led it, halting their activities and requiring them to preserve their assets. View Press Release - [FTC Chairman Ferguson Warns Companies Against Censoring or Weakening the Data Security of Americans at the Behest of Foreign Powers](https://compliance-by-design.net/2025/08/21/ftc-chairman-ferguson-warns-companies-against-censoring-or-weakening-the-data-security-of-americans-at-the-behest-of-foreign-powers/): Federal Trade Commission Chairman Andrew N. Ferguson sent letters today to more than a dozen prominent technology companies reminding them of their obligations to protect the privacy and data security of American consumers despite pressure from foreign governments to weaken such protections. He also warned them that censoring Americans at the behest of foreign powers ... Read more - [FTC Sues LA Fitness for Making it Difficult for Consumers to Cancel Gym Memberships](https://compliance-by-design.net/2025/08/20/ftc-sues-la-fitness-for-making-it-difficult-for-consumers-to-cancel-gym-memberships/): Agency alleges LA Fitness put roadblocks in cancellation and failed to provide a simple cancellation mechanism as required by law The Federal Trade Commission today sued the operators of LA Fitness and other gyms over allegations they make it exceedingly difficult for consumers to cancel their gym memberships and related services that continued indefinitely unless ... Read more - [FTC Takes Action Against Ticket Resellers for Using Illegal Tactics to Bypass Ticket Limit Protections in Violation of Better Online Ticket Sales Act](https://compliance-by-design.net/2025/08/18/ftc-takes-action-against-ticket-resellers-for-using-illegal-tactics-to-bypass-ticket-limit-protections-in-violation-of-better-online-ticket-sales-act/): FTC alleges the defendants have bypassed Ticketmaster’s protections and purchased hundreds of thousands of tickets to resell at a significant markup The Federal Trade Commission is suing a ticket broker operation for allegedly using unlawful tactics to exceed ticket purchasing limits for many popular events, including Taylor Swift’s Eras Tour, and resell the tickets at ... Read more - [Statement from FTC on Grand Canyon University Case](https://compliance-by-design.net/2025/08/15/statement-from-ftc-on-grand-canyon-university-case/): Today, the FTC dismissed its complaint against Grand Canyon University.View Press Release - [FTC Chairman Applauds Revocation of Biden-Harris Executive Order on Competition](https://compliance-by-design.net/2025/08/14/ftc-chairman-applauds-revocation-of-biden-harris-executive-order-on-competition/): Federal Trade Commission Chairman Andrew N. Ferguson issued the following statement in response to President Trump’s revocation of the Biden-Harris Administration’s 2021 Executive Order on competition policy: View Press Release - [FTC Resolves Antitrust Concerns Arising from Clean Truck Partnership](https://compliance-by-design.net/2025/08/13/ftc-resolves-antitrust-concerns-arising-from-clean-truck-partnership/): Truck manufacturers agree to act independently and avoid entering into future anticompetitive agreements with a state regulator Today, the Federal Trade Commission closed its investigation into whether several truck and engine manufacturers and their trade association violated the antitrust laws by entering the “Clean Truck Partnership” with the California Air Resources Board (CARB).View Press Release - [Match Group Agrees to Pay $14 Million, Permanently Stop Deceptive Advertising, Cancellation, and Billing Practices to Resolve FTC Charges](https://compliance-by-design.net/2025/08/12/match-group-agrees-to-pay-14-million-permanently-stop-deceptive-advertising-cancellation-and-billing-practices-to-resolve-ftc-charges/): FTC says online dating service misled users about “guarantees,” made it difficult for consumers to cancel, and unfairly retaliated against consumers who initiated failed chargebacks Match Group, Inc., and Match Group, LLC (Match), the owners and operators of online dating services Match.com, OkCupid, PlentyOfFish, The League, and other dating sites, have agreed to pay $14 ... Read more - [Frank Romero Agrees to Court Order Requiring Payment to the FTC for Mail Order Rule Violations](https://compliance-by-design.net/2025/08/08/frank-romero-agrees-to-court-order-requiring-payment-to-the-ftc-for-mail-order-rule-violations/): Frank Romero, the operator of Trend Deploy, will be required to turn over the remaining funds in his bank and retirement accounts as part of a settlement with the Federal Trade Commission, which the FTC asked a court to approve yesterday.View Press Release - [Three Defendants in the IM Mastery Academy Scheme Agree to Pay $2.5 Million to Settle FTC Allegations](https://compliance-by-design.net/2025/08/07/three-defendants-in-the-im-mastery-academy-scheme-agree-to-pay-2-5-million-to-settle-ftc-allegations/): The FTC and the State of Nevada allege the scheme used false or baseless earnings claims to sell financial training programs and a multi-level-marketing business venture Three of the defendants involved in the IM Mastery Academy scheme will pay $2.5 million to settle Federal Trade Commission allegations that they used false or baseless earnings claims ... Read more - [Assurance IQ and MediaAlpha to Pay a Total of $145 Million to Settle FTC Charges That They Misled Consumers Seeking Health Insurance](https://compliance-by-design.net/2025/08/07/assurance-iq-and-mediaalpha-to-pay-a-total-of-145-million-to-settle-ftc-charges-that-they-misled-consumers-seeking-health-insurance/): Companies also will be prohibited from misrepresenting healthcare products as part of separate proposed orders with the FTC Assurance IQ, LLC and MediaAlpha, Inc. will pay a total of $145 million to settle Federal Trade Commission charges that they misled millions of consumers seeking to buy comprehensive health insurance.View Press Release - [FTC Data Show a More Than Four-Fold Increase in Reports of Impersonation Scammers Stealing Tens and Even Hundreds of Thousands from Older Adults](https://compliance-by-design.net/2025/08/07/ftc-data-show-a-more-than-four-fold-increase-in-reports-of-impersonation-scammers-stealing-tens-and-even-hundreds-of-thousands-from-older-adults/): In 2024, adults 60 and over reported losing millions to scammers pretending to be from trusted government agencies, businesses New analysis from the Federal Trade Commission shows a more than four-fold increase since 2020 in reports from older adults who say they lost $10,000 or more—sometimes their entire life savings—to scammers who impersonate trusted government ... Read more - [FTC Challenges Anticompetitive Medical Device Deal](https://compliance-by-design.net/2025/08/06/ftc-challenges-anticompetitive-medical-device-deal/): Edwards Lifesciences’ acquisition of JenaValve threatens to disrupt competition for revolutionary heart condition device, the FTC alleges The Federal Trade Commission today moved to block medical device supplier Edwards Lifesciences Corp.’s (Edwards) proposed acquisition of JenaValve Technology, Inc. (JenaValve) due to concerns that the acquisition would limit patient access to lifesaving medical devices used to ... Read more - [FTC Sends Money to Student Loan Borrowers Harmed by Debt Relief Scam](https://compliance-by-design.net/2025/08/05/ftc-sends-money-to-student-loan-borrowers-harmed-by-debt-relief-scam/): The Federal Trade Commission is sending a total of $743,230 to student loan borrowers harmed by a debt relief scam that falsely promised loan forgiveness and bilked students out of millions. View Press Release - [Let’s get Digital! Updated Digital Identity Guidelines are Here!](https://compliance-by-design.net/2025/08/01/lets-get-digital-updated-digital-identity-guidelines-are-here/): Today is the day! Digital Identity Guidelines, Revision 4 is finally here…it’s been an exciting journey and NIST is honored to be a part of it. What can we expect? Serving as a culmination of a nearly four-year collaborative process that included foundational research, two public drafts, and about 6,000 individual comments from the public, ... Read more - [FTC and DOJ Host Listening Session on Lowering Americans’ Drug Prices Through Competition](https://compliance-by-design.net/2025/08/01/ftc-and-doj-host-listening-session-on-lowering-americans-drug-prices-through-competition-3/): WHAT: The Federal Trade Commission and the Justice Department’s Antitrust Division, along with the Department of Commerce and the Department of Health and Human Services, will jointly host the last of three listening sessions focused on discussing ways to make prescription drugs more affordable for Americans by promoting competition.View Press Release - [Reflections from the First Cyber AI Profile Workshop](https://compliance-by-design.net/2025/07/31/reflections-from-the-first-cyber-ai-profile-workshop/): Thank you to everyone who participated in the Cyber AI Profile Workshop NIST hosted this past April! This work intends to support the cybersecurity and AI communities — and the input you provided during this workshop is critical. We are working to publish a Workshop Summary that captures themes and highlights from the event. In ... Read more - [FTC Obtains Permanent Ban of E-Commerce Business Opportunity Scheme Operator](https://compliance-by-design.net/2025/07/30/ftc-obtains-permanent-ban-of-e-commerce-business-opportunity-scheme-operator/): Under a proposed settlement with the FTC, the defendants must also surrender financial accounts and proceeds from real estate sale The owner of a business opportunity scheme will be permanently banned from selling business opportunities in settlement of Federal Trade Commission allegations that he and his company deceptively guaranteed consumers income through online storefronts.View Press Release - [FTC Awarded Grant to Upgrade its Data Processing Capabilities Needed to Analyze Data Used in Investigations](https://compliance-by-design.net/2025/07/28/ftc-awarded-grant-to-upgrade-its-data-processing-capabilities-needed-to-analyze-data-used-in-investigations/): The Federal Trade Commission has received a $14.6 million Technology Modernization Fund (TMF) grant that will enable the agency to enhance its in-house data processing capabilities and improve the way it analyzes data used in its investigations, saving both time and money. View Press Release - [FTC Requests Public Comment Regarding “Gender-Affirming Care” for Minors](https://compliance-by-design.net/2025/07/28/ftc-requests-public-comment-regarding-gender-affirming-care-for-minors/): Today, the Federal Trade Commission launched a public inquiry to better understand how consumers may have been exposed to false or unsupported claims about “gender-affirming care”, especially as it relates to minors, and to gauge the harms consumers may be experiencing.View Press Release - [FTC Sends Money to Consumers Harmed by Student Loan Forgiveness Scam](https://compliance-by-design.net/2025/07/24/ftc-sends-money-to-consumers-harmed-by-student-loan-forgiveness-scam/): View Press Release - [FTC and DOJ Host Listening Session on Lowering Americans’ Drug Prices Through Competition](https://compliance-by-design.net/2025/07/23/ftc-and-doj-host-listening-session-on-lowering-americans-drug-prices-through-competition-2/): WHAT: The Federal Trade Commission and the Justice Department’s Antitrust Division, along with the Department of Commerce and the Department of Health and Human Services, will jointly host the second of three listening sessions focused on discussing ways to make prescription drugs more affordable for Americans by promoting competition.View Press Release - [FTC Seeks Public Comment on Petition to Modify EQT, Quantum Energy Order](https://compliance-by-design.net/2025/07/22/ftc-seeks-public-comment-on-petition-to-modify-eqt-quantum-energy-order/): The Federal Trade Commission requests public comment on a petition seeking to reopen and set aside a final consent order involving a $5.2 billion cash-and-stock deal between private equity firm Quantum Energy Partners and natural gas producer EQT Corporation. View Press Release - [FTC Halts Illegal Debt-Relief Operation that Falsely Impersonated Businesses and the Government, Harming Consumers](https://compliance-by-design.net/2025/07/21/ftc-halts-illegal-debt-relief-operation-that-falsely-impersonated-businesses-and-the-government-harming-consumers/): Agency says Accelerated Debt Settlement primarily targeted older consumers, including veterans, and falsely claimed they could reduce consumers’ debt by up to 75% or more View Press Release - [FTC Seeks Comment on Petition to Vacate 2021 Order Related to Provider of Stalkerware Apps](https://compliance-by-design.net/2025/07/18/ftc-seeks-comment-on-petition-to-vacate-2021-order-related-to-provider-of-stalkerware-apps/): FTC order bans SpyFone and its CEO from the surveillance business and requires information-security program The Federal Trade Commission is seeking public comment on a request from Scott Zuckerman, the CEO of a company that marketed “stalkerware” apps, to vacate or modify the FTC’s order banning monitoring products and services and requiring implementation of an ... Read more - [FTC Reopens and Sets Aside Chevron-Hess Final Order](https://compliance-by-design.net/2025/07/18/ftc-reopens-and-sets-aside-chevron-hess-final-order/): Today, the Federal Trade Commission reopened and set aside the final consent order involving Chevron Corporation’s proposed acquisition of Hess Corporation.View Press Release - [FTC Reopens and Sets Aside Exxon-Pioneer Final Order](https://compliance-by-design.net/2025/07/18/ftc-reopens-and-sets-aside-exxon-pioneer-final-order/): Today, the Federal Trade Commission reopened and set aside the final consent order involving Exxon Mobil Corporation’s proposed acquisition of Pioneer Natural Resources Company.View Press Release - [FTC Action Against E-Commerce Business Opportunity Scam Results in Permanent Bans for Owner and his Companies](https://compliance-by-design.net/2025/07/17/ftc-action-against-e-commerce-business-opportunity-scam-results-in-permanent-bans-for-owner-and-his-companies/): Defendants will also surrender cash and property worth millions of dollars The remaining defendants in a business opportunity scheme halted by the Federal Trade Commission will turn over cash and property valued in the millions of dollars to settle allegations they lured consumers with false promises of big returns selling goods through Amazon’s and Walmart’s ... Read more - [FTC Denies Sheffield’s Petition to Reopen and Set Aside the Exxon-Pioneer Final Order](https://compliance-by-design.net/2025/07/15/ftc-denies-sheffields-petition-to-reopen-and-set-aside-the-exxon-pioneer-final-order/): The Federal Trade Commission denied a request filed by Scott Sheffield, the founder and former CEO of Pioneer Natural Resources, to reopen and set aside a final consent order involving Exxon Mobil Corporation’s acquisition of Pioneer. View Press Release - [FTC Takes Action Against Telemedicine Firm NextMed Over Charges It Used Misleading Prices, Fake Reviews, and Deceptive Weight Loss Claims to Sell GLP-1 Weight-Loss Programs](https://compliance-by-design.net/2025/07/14/ftc-takes-action-against-telemedicine-firm-nextmed-over-charges-it-used-misleading-prices-fake-reviews-and-deceptive-weight-loss-claims-to-sell-glp-1-weight-loss-programs/): Under proposed settlement order, NextMed and its principals will pay $150,000 and be banned from misrepresenting products and reviews The operators of telemedicine company Southern Health Solutions, Inc., doing business as Next Medical and NextMed, have agreed to settle the Federal Trade Commission’s charges that they used deceptive cost and weight loss claims, as well ... Read more - [European Commission guidance on the protection of minors online](https://compliance-by-design.net/2025/07/14/european-commission-guidance-on-the-protection-of-minors-online/): On 14 July 2025, the European Commission published guidance to help online platforms protect minors under the Digital Services Act. The Commission also published a prototype age-verification application intended to make age checks online more privacy-preserving. Guidance on protecting minors online The European Commission’s guidance is designed to raise privacy, safety, and protection standards for ... Read more - [FTC Sends Refunds to Consumers Harmed by Weight-loss Supplement Marketer’s Deceptive Claims and Review Practices](https://compliance-by-design.net/2025/07/09/ftc-sends-refunds-to-consumers-harmed-by-weight-loss-supplement-marketers-deceptive-claims-and-review-practices/): The Federal Trade Commission is sending payments totaling more than $409,000 to consumers who bought products from weight-loss supplement marketer Roca Labs. View Press Release - [Targeted modifications of the GDPR: EDPB & EDPS welcome simplification of record keeping obligations and request further clarifications](https://compliance-by-design.net/2025/07/09/targeted-modifications-of-the-gdpr-edpb-edps-welcome-simplification-of-record-keeping-obligations-and-request-further-clarifications/): Brussels, 9 July 2025 – The European Data Protection Board (EDPB) and European Data Protection Supervisor (EDPS) issued today a Joint Opinion on the European Commission’s Proposal for a Regulation amending certain regulations, including the GDPR.  The Proposal, part of the fourth simplification Omnibus, aims to simplify EU rules and reduce administrative burden, extending certain ... Read more - [FTC to Host July 9 Workshop on Unfair or Deceptive Trade Practices in “Gender-Affirming Care” for Minors](https://compliance-by-design.net/2025/07/08/ftc-to-host-july-9-workshop-on-unfair-or-deceptive-trade-practices-in-gender-affirming-care-for-minors/): WHAT: The Federal Trade Commission is hosting a workshop on Unfair or Deceptive Trade Practices in “Gender-Affirming Care” for Minors, which will examine whether consumers are being or have been exposed to false or unsupported claims about “gender-affirming care” and potential harms consumers may be experiencing.WHEN:&nView Press Release - [Federal Trade Commission Warns Companies to Comply with “Made in USA” Requirements](https://compliance-by-design.net/2025/07/08/federal-trade-commission-warns-companies-to-comply-with-made-in-usa-requirements/): Today, the Federal Trade Commission sent warning letters to four companies who claim their consumer goods are of U.S. origin, reminding them to comply with the FTC’s “Made in USA” requirements. Additionally, the FTC sent letters to Amazon and Walmart regarding third-party sellers who appear to be making deceptive “Made in USA” claims about their ... Read more - [FTC Sends More Than $2.9 Million to Consumers Harmed by Home Improvement Financing Firm](https://compliance-by-design.net/2025/07/08/ftc-sends-more-than-2-9-million-to-consumers-harmed-by-home-improvement-financing-firm/): View Press Release - [FTC Grants in Part, Denies in Part EnCap, Verdun, XCL Petition to Modify Order](https://compliance-by-design.net/2025/07/07/ftc-grants-in-part-denies-in-part-encap-verdun-xcl-petition-to-modify-order/): The Federal Trade Commission has approved in part and denied in part a petition to modify a final consent order involving the acquisition of EP Energy LLC (EP Energy) by a subsidiary of EnCap Capital Fund XI, L.P. and EnCap Investments L.P. (together, EnCap). View Press Release - [Nine Years and Counting: NICE RAMPS Communities Keep Expanding Opportunities in Cybersecurity Work and Learning](https://compliance-by-design.net/2025/07/07/nine-years-and-counting-nice-ramps-communities-keep-expanding-opportunities-in-cybersecurity-work-and-learning/): A lot has changed in America’s cybersecurity workforce development ecosystem since 2016: employment in cybersecurity occupations has grown by more than 300,000 [1]; the number of information security degrees awarded annually has more than tripled to nearly 35,000 [2]; and a wide array of new technologies and risks have emerged. Five regional cybersecurity workforce partnerships ... Read more - [The Helsinki Statement on enhanced clarity, support and engagement](https://compliance-by-design.net/2025/07/03/the-helsinki-statement-on-enhanced-clarity-support-and-engagement/): A fundamental rights approach to innovation and competitiveness Helsinki, 3 July 2025 – At a high-level meeting in Helsinki on 1–2 July 2025, the European Data Protection Board (EDPB) adopted a landmark Statement on enhanced clarity, support and engagement. The Statement outlines new initiatives to make GDPR compliance easier, in particular for micro, small and ... Read more - [Federal Trade Commission Chairman Andrew N. Ferguson Issues Statement on ‘Made in the USA’ Month](https://compliance-by-design.net/2025/07/01/federal-trade-commission-chairman-andrew-n-ferguson-issues-statement-on-made-in-the-usa-month/): Today, Federal Trade Commission Chairman Andrew N. Ferguson issued the following statement proclaiming July 2025 as “Made in the USA” Month: View Press Release - [FTC and DOJ Host Listening Session on Lowering Americans’ Drug Prices Through Competition](https://compliance-by-design.net/2025/06/30/ftc-and-doj-host-listening-session-on-lowering-americans-drug-prices-through-competition/): WHAT: The Federal Trade Commission and the Justice Department’s Antitrust Division, along with the Department of Commerce and the Department of Health and Human Services, will jointly host the first of three View Press Release - [Former CEO of Voyager Digital Agrees to Ban and $2.8 Million Payment to Resolve FTC Charges](https://compliance-by-design.net/2025/06/27/former-ceo-of-voyager-digital-agrees-to-ban-and-2-8-million-payment-to-resolve-ftc-charges/): FTC alleges Voyager Digital’s former CEO claimed consumers’ deposits were FDIC-insured, but consumers lost more than $1 billion in cryptocurrency when the firm failed Stephen Ehrlich, the former CEO of crypto platform company Voyager Digital, will pay $2.8 million to resolve the Federal Trade Commission’s charges that he and his company misled consumers. Ehrlich has ... Read more - [FTC Takes Action to Prevent Anticompetitive Effects of Retail Gas Station Deal](https://compliance-by-design.net/2025/06/26/ftc-takes-action-to-prevent-anticompetitive-effects-of-retail-gas-station-deal/): Proposed FTC order requires Alimentation Couche-Tard to divest 35 retail fuel outlets to protect Americans from higher fuel costs Today, the Federal Trade Commission took action to protect Americans from paying higher prices at the pump by resolving antitrust concerns surrounding Alimentation Couche-Tard Inc.’s (ACT) proposed $1.57 billion acquisition of 270 retail fuel outlets from ... Read more - [FTC Sends More Than $3.5 Million to Consumers Harmed by ‘The Credit Game’ Credit-Repair Scheme](https://compliance-by-design.net/2025/06/26/ftc-sends-more-than-3-5-million-to-consumers-harmed-by-the-credit-game-credit-repair-scheme/): The Federal Trade Commission is sending more than $3.5 million in refunds to consumers harmed by a credit-repair scheme called ‘The Credit Game.’ View Press Release - [Statement on the Grant of Early Termination of the FTC’s Investigation of the Proposed Acquisition of Kellanova by Mars](https://compliance-by-design.net/2025/06/26/statement-on-the-grant-of-early-termination-of-the-ftcs-investigation-of-the-proposed-acquisition-of-kellanova-by-mars/): Today, the FTC granted early termination of its review of Mars, Incorporated’s proposed acquisition of Kellanova. Mars is a global manufacturer of pet care, snacking, and food products. Kellanova owns legacy Kellogg brands, including in snacks, crackers, and frozen breakfasts, after spinning off its North American cereals business in 2023 as WK Kellogg Co. View ... Read more - [FTC Releases Agenda for Workshop on Unfair or Deceptive Trade Practices in “Gender-Affirming Care” for Minors](https://compliance-by-design.net/2025/06/25/ftc-releases-agenda-for-workshop-on-unfair-or-deceptive-trade-practices-in-gender-affirming-care-for-minors/): The workshop will include presentations from doctors, specialists, medical ethicists, whistleblowers, detransitioners, and parents. The Federal Trade Commission released a tentative agenda for its July 9, 2025 workshop on “The Dangers of ‘Gender-Affirming Care’ for Minors.” View Press Release - [FTC Sends $126 Million in Refunds to Fortnite Players Who Were Charged for Unwanted Items, Reopens Claims Process](https://compliance-by-design.net/2025/06/25/ftc-sends-126-million-in-refunds-to-fortnite-players-who-were-charged-for-unwanted-items-reopens-claims-process/): Players who have not already filed a claim will now have until July 9 to submit one The Federal Trade Commission is sending refunds totaling more than $126 million to players of the popular video game Fortnite who were charged for unwanted purchases while playing the game. View Press Release - [FTC Sues to Stop Mercury Marketing and Others from Deceptively Advertising Substance Use Disorder Treatment Clinics](https://compliance-by-design.net/2025/06/24/ftc-sues-to-stop-mercury-marketing-and-others-from-deceptively-advertising-substance-use-disorder-treatment-clinics/): The FTC alleges that Mercury Marketing and other defendants violated the FTC Act, the Opioid Addiction Recovery Fraud Prevention Act, and the FTC’s Impersonation Rule The Federal Trade Commission filed a complaint today alleging that Mercury Marketing, LLC, and other defendants impersonated substance use disorder treatment clinics in Google search ads to deceptively route consumers trying to call ... Read more - [FTC Sends More Than $8.1 Million to Consumers Harmed by Care.com’s Deceptive Claims About Earnings, Job Listings, and Cancellation Practices](https://compliance-by-design.net/2025/06/24/ftc-sends-more-than-8-1-million-to-consumers-harmed-by-care-coms-deceptive-claims-about-earnings-job-listings-and-cancellation-practices/): The Federal Trade Commission is sending refunds totaling more than $8.1 million to consumers harmed by online child and older adult care gig platform Care.com (Care). View Press Release - [FTC Case Leads to Order Banning Ascend Ecom and Its Owners from Business Opportunity Marketing](https://compliance-by-design.net/2025/06/23/ftc-case-leads-to-order-banning-ascend-ecom-and-its-owners-from-business-opportunity-marketing/): Proposed settlement would ban business ‘coaching’ and require defendants to turn over assets The operators of Ascend Ecom, an online business opportunity that allegedly cost consumers millions of dollars, will be banned from selling business opportunities and required to turn over assets to the Federal Trade Commission under the terms of a proposed court order. ... Read more - [FTC Prevents Anticompetitive Coordination in Global Advertising Merger](https://compliance-by-design.net/2025/06/23/ftc-prevents-anticompetitive-coordination-in-global-advertising-merger/): Today, the Federal Trade Commission took action to resolve antitrust concerns related to Omnicom Group Inc.’s $13.5 billion acquisition of The Interpublic Group of Companies, Inc. (IPG). View Press Release - [Walmart to Pay $10 Million to Settle FTC Allegations it Allowed Scammers to Obtain Millions from Consumers Using Company’s Wire Transfer Services](https://compliance-by-design.net/2025/06/20/walmart-to-pay-10-million-to-settle-ftc-allegations-it-allowed-scammers-to-obtain-millions-from-consumers-using-companys-wire-transfer-services/): Court order also requires Walmart to take actions to detect and prevent wire transfer fraud Walmart will pay $10 million to settle Federal Trade Commission charges that it turned a blind eye to scammers who used its in-store money transfer services to take hundreds of millions of dollars from U.S. consumers. View Press Release - [Operator of Ganadores Ecommerce and Real Estate Business Opportunity Scam Faces Lifetime Ban as a Result of FTC Action](https://compliance-by-design.net/2025/06/20/operator-of-ganadores-ecommerce-and-real-estate-business-opportunity-scam-faces-lifetime-ban-as-a-result-of-ftc-action/): Proposed order would ban Robert Shemin from marketing any ecommerce or real estate coaching services Robert Shemin, an operator of the Ganadores scam that made false or unsubstantiated earnings claims in selling real estate and ecommerce business opportunities, will be banned from the industry and required to turn over assets as a result of a ... Read more - [FTC Sends More than $2 Million to Consumers Harmed by Scammers Pitching Bogus Money-Making and Coaching Programs](https://compliance-by-design.net/2025/06/18/ftc-sends-more-than-2-million-to-consumers-harmed-by-scammers-pitching-bogus-money-making-and-coaching-programs/): The FTC is sending more than $2 million in refunds to consumers who were harmed by scammers pitching bogus get-rich-quick “kits” and coaching programs at the height of the financial crisis of the 2000s. View Press Release - [Paddle Will Pay $5 Million to Settle FTC Allegations of Unfair Payment-Processing Practices and Facilitation of Deceptive Tech-Support Schemes](https://compliance-by-design.net/2025/06/16/paddle-will-pay-5-million-to-settle-ftc-allegations-of-unfair-payment-processing-practices-and-facilitation-of-deceptive-tech-support-schemes/): Under proposed order, Paddle will also be permanently banned from processing payments for tech-support telemarketers U.K.-based payment processor, Paddle.com Market Limited, and its subsidiary, Paddle.com, Inc., will pay $5 million and be permanently banned from processing payments for tech-support telemarketers. This settles a Federal Trade Commission action alleging that Paddle abused the U.S. credit-card system ... Read more - [Phantom Debt Collectors to Face Permanent Ban as a Result of FTC Lawsuit](https://compliance-by-design.net/2025/06/16/phantom-debt-collectors-to-face-permanent-ban-as-a-result-of-ftc-lawsuit/): Proposed court order would ban Blackstone Legal and its owners from all debt collection, require surrender of assets Debt collection operation Blackstone Legal, along with its owners, will face a permanent ban from the debt collection industry as a result of the Federal Trade Commission’s lawsuit charging that they deceived and harassed consumers to collect ... Read more - [EEA & Norway Grants organise a roundtable on ‘Fortifying democracy: Strengthening Civic Space and Promoting Information Integrity’](https://compliance-by-design.net/2026/01/30/eea-norway-grants-organise-a-roundtable-on-fortifying-democracy-strengthening-civic-space-and-promoting-information-integrity/): Language English Press release 0 Secondary theme Systems Support for human rights systems and defenders Many organisations work to defend your rights. We help their efforts with independent evidence, advice and expertise. We support their frontline work. And we shine a light on potential risks and priority areas. Together we make your rights a reality. ... Read more - [FRA participates in foresight workshop 'Stress-testing EU leverage in a changing geopolitical context’](https://compliance-by-design.net/2026/01/30/fra-participates-in-foresight-workshop-stress-testing-eu-leverage-in-a-changing-geopolitical-context/): Language English Press release 0 Secondary theme Systems Support for human rights systems and defenders Many organisations work to defend your rights. We help their efforts with independent evidence, advice and expertise. We support their frontline work. And we shine a light on potential risks and priority areas. Together we make your rights a reality. ... Read more - [EEAS/Commission Inter-Service Group on Human Rights](https://compliance-by-design.net/2026/01/30/eeas-commission-inter-service-group-on-human-rights/): Language English Press release 0 Secondary theme Systems Inter-governmental human rights systems Highlights Report / Paper / Summary 18 November 2021 Directive (EU) 2017/541 on combating terrorism ― Impact on fundamental rights and freedoms This report examines the EU’s main criminal law instrument in the field of counter-terrorism, Directive (EU) 2017/541. Specifically, it considers how ... Read more - [Adopting a rights-based approach to affordable and energy-efficient housing in the EU](https://compliance-by-design.net/2026/01/29/adopting-a-rights-based-approach-to-affordable-and-energy-efficient-housing-in-the-eu/): Language English Press release 1 Secondary theme environmental-social-sustainability Environmental and social sustainability Climate change and environmental protection Just and green transition Business and human rights Human rights due diligence Consumer protection EU Charter of Fundamental Rights EU Charter of Fundamental Rights Title IV: Solidarity Article 37 – Environmental protection EU Charter of Fundamental Rights Title ... Read more - [Stakeholder event on political advertising: express your interest](https://compliance-by-design.net/2026/01/29/stakeholder-event-on-political-advertising-express-your-interest/): Brussels, 29 January – The EDPB organises a remote event to collect stakeholders’ input on its Guidelines on the processing of personal data to target or deliver political advertisements under the regulation on the transparency and targeting of political advertising. The event will take place on 27 March 2026 (time to be confirmed). This will ... Read more - [FTC Secures Settlement Banning Growth Cave Defendants from Marketing and Selling Business Opportunities and Credit Repair Programs](https://compliance-by-design.net/2026/01/28/ftc-secures-settlement-banning-growth-cave-defendants-from-marketing-and-selling-business-opportunities-and-credit-repair-programs/): FTC alleged defendants took nearly $50 million as part of deceptive business opportunity, credit repair scheme Defendants behind a wide-ranging operation known as Growth Cave, including its co-CEOs, are permanently banned from marketing and selling business opportunities and credit repair programs as part of an FTC settlement to resolve allegations that their scheme cost consumers ... Read more - [DSB (Austria) - D135.026 2025-0.768.263](https://compliance-by-design.net/2026/01/28/dsb-austria-d135-026-2025-0-768-263/): Xz: {{DPAdecisionBOX |Jurisdiction=Austria |DPA-BG-Color= |DPAlogo=LogoAT.png |DPA_Abbrevation=DSB |DPA_With_Country=DSB (Austria) |Case_Number_Name=D135.026 2025-0.768.263 |ECLI= |Original_Source_Name_1=DSB |Original_Source_Link_1=https://noyb.eu/sites/default/files/2026-01/Standarderledigung%20Bescheid_geschw%C3%A4rzt.pdf |Original_Source_Language_1=German |Original_Source_Language__Code_1=DE |Original_Source_Name_2= |Original_Source_Link_2= |Original_Source_Language_2= |Original_Source_Language__Code_2= |Type=Complaint |Outcome=Upheld |Date_Started=04.06.2024 |Date_Decided=21.01.2026 |Date_Published=21.01.2026 |Year=2026 |Fine= |Currency= |GDPR_Article_1=Article 5(1)(a) GDPR |GDPR_Article_Link_1=Article 5 GDPR#1a |GDPR_Article_2=Article 6 GDPR |GDPR_Article_Link_2=Article 6 GDPR |GDPR_Article_3=Article 28(3) GDPR |GDPR_Article_Link_3=Article 28 GDPR#3 |GDPR_Article_4= |GDPR_Article_Link_4= |GDPR_Article_5= |GDPR_Article_Link_5= |EU_Law_Name_1= |EU_Law_Link_1= |EU_Law_Name_2= |EU_Law_Link_2= |National_Law_Name_1= |National_Law_Link_1= ... Read more - [Data Protection Day 2026: keeping children’s personal data safe online](https://compliance-by-design.net/2026/01/28/data-protection-day-2026-keeping-childrens-personal-data-safe-online/): Watch the video on online data protection risks for kids    Brussels, 28 January – Every day, the European Data Protection Authorities (DPAs) that make up the EDPB work together to ensure the protection of individuals’ personal data. When it comes to children’s data, extra vigilance is essential, particularly in today’s fast-evolving digital environment where ... Read more - [Federal Court Permanently Shuts Down Deceptive Trucking Business Opportunity](https://compliance-by-design.net/2026/01/28/federal-court-permanently-shuts-down-deceptive-trucking-business-opportunity/): Court has entered a judgment of $8.39 million against defaulting defendants because of consumer harm At the request of the Federal Trade Commission and the State of Florida, a federal district court has permanently shut down the operations of RivX, an operation that allegedly defrauded consumers out of millions of dollars with deceptive promises of ... Read more - [Ombudsman - 25/12378](https://compliance-by-design.net/2026/01/28/ombudsman-25-12378/): Xz: {{COURTdecisionBOX |Jurisdiction=Norway |Court-BG-Color= |Courtlogo=Courts_logo1.png |Court_Abbrevation=Ombudsman |Court_Original_Name=Ombudsman |Court_English_Name=Ombudsman |Court_With_Country=Ombudsman (Norway) |Case_Number_Name=25/12378 |ECLI= |Original_Source_Name_1=SIVILOMBUDET |Original_Source_Link_1=https://gdprhub.eu/images/7/7d/2026.01.21_Sivilombudet_Oppf%25C3%25B8lging_av_uttalelse_-_sp%25C3%25B8rsmal_om_klagerett_over_Datatilsynets_vedtak_i_sak_om_brudd_pa_GDPR_-_Redacted.pdf |Original_Source_Language_1=Norwegian |Original_Source_Language__Code_1=NO |Original_Source_Name_2= |Original_Source_Link_2= |Original_Source_Language_2= |Original_Source_Language__Code_2= |Date_Decided=21.01.2026 |Date_Published=21.01.2026 |Year=2026 |GDPR_Article_1=Article 78 GDPR |GDPR_Article_Link_1=Article 78 GDPR |GDPR_Article_2= |GDPR_Article_Link_2= |GDPR_Article_3= |GDPR_Article_Link_3= |EU_Law_Name_1= |EU_Law_Link_1= |EU_Law_Name_2= |EU_Law_Link_2= |National_Law_Name_1= |National_Law_Link_1= |National_Law_Name_2= |National_Law_Link_2= |Party_Name_1= |Party_Link_1= |Party_Name_2= |Party_Link_2= |Appeal_From_Body= |Appeal_From_Case_Number_Name= |Appeal_From_Status= |Appeal_From_Link= |Appeal_To_Body= |Appeal_To_Case_Number_Name= |Appeal_To_Status=Unknown |Appeal_To_Link= |Initial_Contributor= | ... Read more - [CNIL (France) - SAN-2025-017](https://compliance-by-design.net/2026/01/28/cnil-france-san-2025-017/): Claratab: links to the Articles {{DPAdecisionBOX |Jurisdiction=France |DPA-BG-Color= |DPAlogo=LogoFR.png |DPA_Abbrevation=CNIL |DPA_With_Country=CNIL (France) |Case_Number_Name=SAN-2025-017 |ECLI= |Original_Source_Name_1=JO |Original_Source_Link_1=https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000053391342 |Original_Source_Language_1=French |Original_Source_Language__Code_1=FR |Original_Source_Name_2= |Original_Source_Link_2= |Original_Source_Language_2= |Original_Source_Language__Code_2= |Type=Complaint |Outcome=Upheld |Date_Started= |Date_Decided=30.12.2025 |Date_Published=21.01.2026 |Year=2025 |Fine=3.500.000 |Currency=EUR |GDPR_Article_1=Article 6 GDPR |GDPR_Article_Link_1=Article 6 GDPR |GDPR_Article_2=Article 13 GDPR |GDPR_Article_Link_2=Article 13 GDPR |GDPR_Article_3=Article 32 GDPR |GDPR_Article_Link_3=Article 32 GDPR |GDPR_Article_4=Article 35 GDPR |GDPR_Article_Link_4=Article 35 GDPR |GDPR_Article_5= ... Read more - [FTC Hosts Workshop on Noncompete Agreements](https://compliance-by-design.net/2026/01/27/ftc-hosts-workshop-on-noncompete-agreements/): WHAT: The FTC will host a workshop on employee noncompete agreements, which will include public statements from FTC Commissioners, victims of unfair and anticompetitive noncompete agreements, and leading experts in the field. WHEN: Tuesday, January 27, 2026, 1:00 pm E.T. View Press Release - [Cass.Civ. - 32283/2025](https://compliance-by-design.net/2026/01/27/cass-civ-32283-2025/): Lde: Created page with “{{COURTdecisionBOX |Jurisdiction=Italy |Court-BG-Color= |Courtlogo=Courts_logo1.png |Court_Abbrevation=Cass.Civ. |Court_Original_Name=Corte di Cassazione |Court_English_Name=Supreme Court of Cassation |Court_With_Country=Cass.Civ. (Italy) |Case_Number_Name=32283/2025 |ECLI= |Original_Source_Name_1=Cassazione Civile |Original_Source_Link_1=https://www.italgiure.giustizia.it/xway/application/nif/clean/hc.dll?verbo=attach&db=snciv&id=./20251211/snciv@sL0@a2025@n32283@tS….” {{COURTdecisionBOX |Jurisdiction=Italy |Court-BG-Color= |Courtlogo=Courts_logo1.png |Court_Abbrevation=Cass.Civ. |Court_Original_Name=Corte di Cassazione |Court_English_Name=Supreme Court of Cassation |Court_With_Country=Cass.Civ. (Italy) |Case_Number_Name=32283/2025 |ECLI= |Original_Source_Name_1=Cassazione Civile |Original_Source_Link_1=https://www.italgiure.giustizia.it/xway/application/nif/clean/hc.dll?verbo=attach&db=snciv&id=./20251211/snciv@sL0@a2025@n32283@tS.clean.pdf |Original_Source_Language_1=Italian |Original_Source_Language__Code_1=IT |Original_Source_Name_2= |Original_Source_Link_2= |Original_Source_Language_2= |Original_Source_Language__Code_2= |Date_Decided= |Date_Published=11.12.2025 |Year= |GDPR_Article_1=Article 5 GDPR |GDPR_Article_Link_1=Article ... Read more - [Rb. Amsterdam - ECLI:NL:RBAMS:2025:10200](https://compliance-by-design.net/2026/01/27/rb-amsterdam-eclinlrbams202510200/): Lde: {{COURTdecisionBOX |Jurisdiction=Netherlands |Court-BG-Color= |Courtlogo=Courts_logo1.png |Court_Abbrevation=Rb. Amsterdam |Court_Original_Name=Rechtbank Amsterdam |Court_English_Name=District Court Amsterdam |Court_With_Country=Rb. Amsterdam (Netherlands) |Case_Number_Name=C/13/770276 / HA ZA 25-1129 |ECLI=ECLI:NL:RBAMS:2025:10200 |Original_Source_Name_1=Rechtspraak |Original_Source_Link_1=https://uitspraken.rechtspraak.nl/details?id=ECLI:NL:RBAMS:2025:10200&showbutton=true&keyword=avg&idx=5 |Original_Source_Language_1=Dutch |Original_Source_Language__Code_1=NL |Original_Source_Name_2= |Original_Source_Link_2= |Original_Source_Language_2= |Original_Source_Language__Code_2= |Date_Decided=17.12.2025 |Date_Published=20.01.2026 |Year=2025 |GDPR_Article_1=Article 10 GDPR |GDPR_Article_Link_1=Article 10 GDPR |GDPR_Article_2= |GDPR_Article_Link_2= |GDPR_Article_3= |GDPR_Article_Link_3= |EU_Law_Name_1=Article 10 ECHR |EU_Law_Link_1=https://www.echr.coe.int/documents/d/echr/convention_ENG |EU_Law_Name_2=Article 8 ECHR |EU_Law_Link_2=https://www.echr.coe.int/documents/d/echr/convention_ENG |EU_Law_Name_3= |EU_Law_Link_3= |EU_Law_Name_4= |EU_Law_Link_4= |National_Law_Name_1= ... Read more - [FTC to Host Virtual Workshop on January 28 on Age Verification Technologies](https://compliance-by-design.net/2026/01/27/ftc-to-host-virtual-workshop-on-january-28-on-age-verification-technologies/): WHAT:The Federal Trade Commission is hosting a virtual workshop to discuss a range of issues related to age verification technologies, which can help companies obtain age information of potential visitors to websites and other online services.WHEN:Wednesday, January 28, 2026, from 9:00 a.m.View Press Release - [BGH - VI ZR 330/21](https://compliance-by-design.net/2026/01/27/bgh-vi-zr-330-21/): Avalang: Turned Articles into links. {{COURTdecisionBOX |Jurisdiction=Germany |Court-BG-Color= |Courtlogo=Courts_logo1.png |Court_Abbrevation=BGH |Court_Original_Name=Bundesgerichtshof |Court_English_Name=German Supreme Court |Court_With_Country=BGH (Germany) |Case_Number_Name=VI ZR 330/21 |ECLI= |Original_Source_Name_1=REWIS |Original_Source_Link_1=https://rewis.io/urteile/urteil/7z8-05-03-2024-vi-zr-33021/?q=dsgvo |Original_Source_Language_1=German |Original_Source_Language__Code_1=DE |Original_Source_Name_2= |Original_Source_Link_2= |Original_Source_Language_2= |Original_Source_Language__Code_2= |Date_Decided=05.03.2024 |Date_Published=05.03.2024 |Year=2024 |GDPR_Article_1=Article 4(1) GDPR |GDPR_Article_Link_1=Article 4 GDPR#1 |GDPR_Article_2=Article 4(7) GDPR |GDPR_Article_Link_2=Article 4 GDPR#7 |GDPR_Article_3=Article 15(1) GDPR |GDPR_Article_Link_3=Article 15 GDPR#1 |GDPR_Article_4=Article 15(3) GDPR |GDPR_Article_Link_4=Article 15 GDPR#3 ... Read more - [LAG Düsseldorf - 3 Sa 285/23](https://compliance-by-design.net/2026/01/27/lag-dusseldorf-3-sa-285-23/): Avalang: Created page with “{{COURTdecisionBOX |Jurisdiction=Germany |Court-BG-Color= |Courtlogo=Courts_logo1.png |Court_Abbrevation=LAG Düsseldorf |Court_Original_Name=Landesarbeitsgericht Düsseldorf |Court_English_Name=Regional Labour Court Düsseldorf |Court_With_Country=LAG Düsseldorf (Germany) |Case_Number_Name=3 Sa 285/23 |ECLI=ECLI:DE:LAGD:2023:1128.3SA285.23.00 |Original_Source_Name_1=Justiz NRW |Original_Source_Link_1=https://nrwe.justiz.nrw.de/arbgs/duesseldorf/lag_duesseldorf/j2023…” {{COURTdecisionBOX |Jurisdiction=Germany |Court-BG-Color= |Courtlogo=Courts_logo1.png |Court_Abbrevation=LAG Düsseldorf |Court_Original_Name=Landesarbeitsgericht Düsseldorf |Court_English_Name=Regional Labour Court Düsseldorf |Court_With_Country=LAG Düsseldorf (Germany) |Case_Number_Name=3 Sa 285/23 |ECLI=ECLI:DE:LAGD:2023:1128.3SA285.23.00 |Original_Source_Name_1=Justiz NRW |Original_Source_Link_1=https://nrwe.justiz.nrw.de/arbgs/duesseldorf/lag_duesseldorf/j2023/NRWE_LAG_D_sseldorf_3_Sa_285_23_Urteil_20231128.html |Original_Source_Language_1=German |Original_Source_Language__Code_1=DE |Original_Source_Name_2= |Original_Source_Link_2= |Original_Source_Language_2= |Original_Source_Language__Code_2= |Date_Decided=28.11.2023 ... Read more - [Celebrating Data Privacy Week with NIST’s Privacy Engineering Program](https://compliance-by-design.net/2026/01/27/celebrating-data-privacy-week-with-nists-privacy-engineering-program/): Grab your party hats – it’s Data Privacy Week! Data Privacy Week is a global initiative led by the National Cybersecurity Alliance to spread awareness about online privacy and empower individuals and businesses to respect privacy, safeguard data, and enable trust. In celebration of this week, the NIST Privacy Engineering Program is reflecting on recent ... Read more - [HDPA (Greece) - 45/2025](https://compliance-by-design.net/2026/01/26/hdpa-greece-45-2025/): Vickyk: {{DPAdecisionBOX |Jurisdiction=Greece |DPA-BG-Color=background-color:#ffffff; |DPAlogo=LogoGR.jpg |DPA_Abbrevation=HDPA |DPA_With_Country=HDPA (Greece) |Case_Number_Name=45/2025 |ECLI= |Original_Source_Name_1=HDPA |Original_Source_Link_1=https://www.dpa.gr/sites/default/files/2026-01/45_2025%20anonym.pdf |Original_Source_Language_1=Greek |Original_Source_Language__Code_1=EL |Original_Source_Name_2= |Original_Source_Link_2= |Original_Source_Language_2= |Original_Source_Language__Code_2= |Type=Other |Outcome= |Date_Started=19.03.2020 |Date_Decided=17.06.2025 |Date_Published=31.12.2025 |Year=2025 |Fine= |Currency= |GDPR_Article_1= |GDPR_Article_Link_1= |GDPR_Article_2= |GDPR_Article_Link_2= |EU_Law_Name_1= |EU_Law_Link_1= |EU_Law_Name_2= |EU_Law_Link_2= |National_Law_Name_1=par. 1, art. 46. Law 4624/2019 |National_Law_Link_1=https://www.dpa.gr/sites/default/files/2023-06/4624_2019%2520%25CE%25BC%25CE%25B5%2520%25CF%2584%25CF%2581%25CE%25BF%25CF%2580%25CE%25BF%25CF%2580%25CE%25BF%25CE%25B9%25CE%25AE%25CF%2583%25CE%25B5%25CE%25B9%25CF%2582.pdf |National_Law_Name_2=par. 4 (a), art. 15, Law 4624/2019 |National_Law_Link_2=https://www.dpa.gr/sites/default/files/2023-06/4624_2019%2520%25CE%25BC%25CE%25B5%2520%25CF%2584%25CF%2581%25CE%25BF%25CF%2580%25CE%25BF%25CF%2580%25CE%25BF%25CE%25B9%25CE%25AE%25CF%2583%25CE%25B5%25CE%25B9%25CF%2582.pdf |National_Law_Name_3= |National_Law_Link_3= |National_Law_Name_4= |National_Law_Link_4= |Party_Name_1=”Homo Digitalis” ... Read more - [OLG Brandenburg - 11 U 19/24](https://compliance-by-design.net/2026/01/26/olg-brandenburg-11-u-19-24/): Avalang: Short summary for some reason wasn’t fully transferred. {{COURTdecisionBOX |Jurisdiction=Germany |Court-BG-Color= |Courtlogo=Courts_logo1.png |Court_Abbrevation=OLG Brandenburg |Court_Original_Name=Brandenburgisches Oberlandesgericht |Court_English_Name=Higher Regional Court Brandenburg |Court_With_Country=OLG Brandenburg (Germany) |Case_Number_Name=11 U 19/24 |ECLI=ECLI:DE:OLGBB:2024:0503.11U19.24.00 |Original_Source_Name_1=Landesrecht Brandenburg |Original_Source_Link_1=https://gerichtsentscheidungen.brandenburg.de/gerichtsentscheidung/24587 |Original_Source_Language_1=German |Original_Source_Language__Code_1=DE |Original_Source_Name_2= |Original_Source_Link_2= |Original_Source_Language_2= |Original_Source_Language__Code_2= |Date_Decided=03.05.2024 |Date_Published=03.05.2024 |Year=2024 |GDPR_Article_1=Article 4(1) GDPR |GDPR_Article_Link_1=Article 4 GDPR#1 |GDPR_Article_2=Article 12(5) GDPR |GDPR_Article_Link_2=Article 12 GDPR#5 |GDPR_Article_3=Article 15(1) GDPR ... Read more - [ANSPDCP (Romania) - 19.01.2026](https://compliance-by-design.net/2026/01/26/anspdcp-romania-19-01-2026/): Dt: Created page with “{{DPAdecisionBOX |Jurisdiction=Romania |DPA-BG-Color=background-color:#ffffff; |DPAlogo=LogoRO.jpg |DPA_Abbrevation=ANSPDCP |DPA_With_Country=ANSPDCP (Romania) |Case_Number_Name=19.01.2026 |ECLI= |Original_Source_Name_1=ANSPDCP |Original_Source_Link_1=https://www.dataprotection.ro/?page=Comunicat_Presa_19_01_2026&lang=ro |Original_Source_Language_1=Romanian |Original_Source_Language__Code_1=RO |Original_Source_Name_2= |Original_Source_Link_2= |Original_Source_Language…” {{DPAdecisionBOX |Jurisdiction=Romania |DPA-BG-Color=background-color:#ffffff; |DPAlogo=LogoRO.jpg |DPA_Abbrevation=ANSPDCP |DPA_With_Country=ANSPDCP (Romania) |Case_Number_Name=19.01.2026 |ECLI= |Original_Source_Name_1=ANSPDCP |Original_Source_Link_1=https://www.dataprotection.ro/?page=Comunicat_Presa_19_01_2026&lang=ro |Original_Source_Language_1=Romanian |Original_Source_Language__Code_1=RO |Original_Source_Name_2= |Original_Source_Link_2= |Original_Source_Language_2= |Original_Source_Language__Code_2= |Type=Investigation |Outcome=Violation Found |Date_Started= |Date_Decided= |Date_Published=19.01.2026 |Year= |Fine=76,366 |Currency=RON |GDPR_Article_1=Article 5(1)(c) GDPR |GDPR_Article_Link_1=Article 5 GDPR#1c |GDPR_Article_2=Article 5(2) GDPR ... Read more - [IMY (Sweden) - IMY-2025-7801](https://compliance-by-design.net/2026/01/26/imy-sweden-imy-2025-7801/): Xz: {{DPAdecisionBOX |Jurisdiction=Sweden |DPA-BG-Color= |DPAlogo=LogoSE.png |DPA_Abbrevation=IMY |DPA_With_Country=IMY (Sweden) |Case_Number_Name=IMY-2025-7801 |ECLI= |Original_Source_Name_1=IMY |Original_Source_Link_1=https://www.imy.se/globalassets/dokument/tillsynsskrivelser/2026/beslut-efter-tillsyn-enligt-gdpr_sportadmin-i-skandinavien-ab.pdf |Original_Source_Language_1=Swedish |Original_Source_Language__Code_1=SV |Original_Source_Name_2= |Original_Source_Link_2= |Original_Source_Language_2= |Original_Source_Language__Code_2= |Type=Investigation |Outcome=Violation Found |Date_Started=17.01.2025 |Date_Decided=26.01.2026 |Date_Published=26.01.2026 |Year=2026 |Fine=6,000,000 |Currency=SEK |GDPR_Article_1=Article 32 GDPR |GDPR_Article_Link_1=Article 32 GDPR |GDPR_Article_2= |GDPR_Article_Link_2= |GDPR_Article_3= |GDPR_Article_Link_3= |EU_Law_Name_1= |EU_Law_Link_1= |EU_Law_Name_2= |EU_Law_Link_2= |National_Law_Name_1= |National_Law_Link_1= |National_Law_Name_2= |National_Law_Link_2= |Party_Name_1=Sportadmin i Skandinavien AB |Party_Link_1= |Party_Name_2= |Party_Link_2= |Party_Name_3= |Party_Link_3= |Appeal_To_Body= ... Read more - [EWHC - KB-2025-003673](https://compliance-by-design.net/2026/01/26/ewhc-kb-2025-003673/): Dt: Created page with “{{COURTdecisionBOX |Jurisdiction=United Kingdom |Court-BG-Color= |Courtlogo=Courts_logo1.png |Court_Abbrevation=EWHC |Court_Original_Name=England and Wales High Court |Court_English_Name=England and Wales High Court |Court_With_Country=EWHC (United Kingdom) |Case_Number_Name=KB-2025-003673 |ECLI= |Original_Source_Name_1=BAILII |Original_Source_Link_1=https://www.bailii.org/cgi-bin/format.cgi?doc=/ew/cases/EWHC/KB/2025/3255.html&query=(GDPR) |Original_Source_Language_1…” {{COURTdecisionBOX |Jurisdiction=United Kingdom |Court-BG-Color= |Courtlogo=Courts_logo1.png |Court_Abbrevation=EWHC |Court_Original_Name=England and Wales High Court |Court_English_Name=England and Wales High Court |Court_With_Country=EWHC (United Kingdom) |Case_Number_Name=KB-2025-003673 |ECLI= |Original_Source_Name_1=BAILII |Original_Source_Link_1=https://www.bailii.org/cgi-bin/format.cgi?doc=/ew/cases/EWHC/KB/2025/3255.html&query=(GDPR) |Original_Source_Language_1=English |Original_Source_Language__Code_1=EN |Original_Source_Name_2= |Original_Source_Link_2= ... Read more - [ICO (UK) - ZMLUK Limited](https://compliance-by-design.net/2026/01/26/ico-uk-zmluk-limited/): Dt: Created page with “{{DPAdecisionBOX |Jurisdiction=United Kingdom |DPA-BG-Color=background-color:#023868; |DPAlogo=LogoUK.png |DPA_Abbrevation=ICO |DPA_With_Country=ICO (UK) |Case_Number_Name=ZMLUK Limited |ECLI= |Original_Source_Name_1=ICO |Original_Source_Link_1=https://ico.org.uk/media2/ltodxokk/monetary-penalty-notice-zmluk-ltd.pdf |Original_Source_Language_1=English |Original_Source_Language__Code_1=EN |Original_Source_Name_2= |Original_Source_Link_2= |Original_Source_Language_2= |O…” {{DPAdecisionBOX |Jurisdiction=United Kingdom |DPA-BG-Color=background-color:#023868; |DPAlogo=LogoUK.png |DPA_Abbrevation=ICO |DPA_With_Country=ICO (UK) |Case_Number_Name=ZMLUK Limited |ECLI= |Original_Source_Name_1=ICO |Original_Source_Link_1=https://ico.org.uk/media2/ltodxokk/monetary-penalty-notice-zmluk-ltd.pdf |Original_Source_Language_1=English |Original_Source_Language__Code_1=EN |Original_Source_Name_2= |Original_Source_Link_2= |Original_Source_Language_2= |Original_Source_Language__Code_2= |Type=Complaint |Outcome=Upheld |Date_Started= |Date_Decided=11.12.2025 |Date_Published= |Year=2025 |Fine=105,000 |Currency=GBP |GDPR_Article_1= |GDPR_Article_Link_1= |GDPR_Article_2= |GDPR_Article_Link_2= |EU_Law_Name_1= ... Read more - [TB - 10037/2025](https://compliance-by-design.net/2026/01/26/tb-10037-2025/): Dt: {{COURTdecisionBOX |Jurisdiction=Romania |Court-BG-Color= |Courtlogo=Courts_logo1.png |Court_Abbrevation=TB |Court_Original_Name=Tribunalul București |Court_English_Name=Bucharest Tribunal |Court_With_Country=TB (Romania) |Case_Number_Name=10037/2025 |ECLI= |Original_Source_Name_1=Rejust |Original_Source_Link_1=https://www.rejust.ro/juris/73ee3gg96 |Original_Source_Language_1=Romanian |Original_Source_Language__Code_1=RO |Original_Source_Name_2= |Original_Source_Link_2= |Original_Source_Language_2= |Original_Source_Language__Code_2= |Date_Decided=10.12.2025 |Date_Published= |Year=2025 |GDPR_Article_1=Article 5(1)(a) GDPR |GDPR_Article_Link_1=Article 5 GDPR#1a |GDPR_Article_2=Article 5(1)(b) GDPR |GDPR_Article_Link_2=Article 5 GDPR#1b |GDPR_Article_3=Article 5(2) GDPR |GDPR_Article_Link_3=Article 5 GDPR#2 |GDPR_Article_4=Article 6(1) GDPR |GDPR_Article_Link_4=Article 6 GDPR#1 |GDPR_Article_5= |GDPR_Article_Link_5= |GDPR_Article_6= |GDPR_Article_Link_6= |EU_Law_Name_1= |EU_Law_Link_1= ... Read more - [VfGH - E2189/2025](https://compliance-by-design.net/2026/01/26/vfgh-e2189-2025/): Xz: {{COURTdecisionBOX |Jurisdiction=Austria |Court-BG-Color= |Courtlogo=Courts_logo1.png |Court_Abbrevation=VfGH |Court_Original_Name=Verfassungsgerichtshof |Court_English_Name=Austrian Constitutional Court |Court_With_Country=VfGH (Austria) |Case_Number_Name=E2189/2025 |ECLI=ECLI:AT:VFGH:2025:E2189.2025 |Original_Source_Name_1=RIS |Original_Source_Link_1=https://www.ris.bka.gv.at/Dokument.wxe?Abfrage=Vfgh&Entscheidungsart=Undefined&Sammlungsnummer=&Index=&SucheNachRechtssatz=True&SucheNachText=True&GZ=&VonDatum=&BisDatum=&Norm=&ImRisSeitVonDatum=&ImRisSeitBisDatum=&ImRisSeit=EinerWoche&ResultPageSize=100&Suchworte=DSGVO&Position=1&SkipToDocumentPage=true&ResultFunctionToken=7484320a-562e-46fc-8650-790a0a0b1517&Dokumentnummer=JFT_20251210_25E02189_00 |Original_Source_Language_1=German |Original_Source_Language__Code_1=DE |Original_Source_Name_2= |Original_Source_Link_2= |Original_Source_Language_2= |Original_Source_Language__Code_2= |Date_Decided=10.12.2025 |Date_Published=21.01.2026 |Year=2025 |GDPR_Article_1= |GDPR_Article_Link_1= |GDPR_Article_2= |GDPR_Article_Link_2= |EU_Law_Name_1= |EU_Law_Link_1= |EU_Law_Name_2= |EU_Law_Link_2= |National_Law_Name_1=§1 DSG |National_Law_Link_1=https://www.ris.bka.gv.at/NormDokument.wxe?Abfrage=Bundesnormen&Gesetzesnummer=10001597&Artikel=1&Paragraf=1&Anlage=&Uebergangsrecht= |National_Law_Name_2=§10 WiEReG |National_Law_Link_2=https://www.ris.bka.gv.at/NormDokument.wxe?Abfrage=Bundesnormen&Gesetzesnummer=20009980&FassungVom=2024-12-22&Artikel=&Paragraf=10&Anlage=&Uebergangsrecht=&ShowPrintPreview=True |National_Law_Name_3=Article 7 of The Charter of Fundamental Rights of the European Union |National_Law_Link_3=https://www.europarl.europa.eu/charter/pdf/text_en.pdf |National_Law_Name_4=Article 8 of ... Read more - [Member States discuss national civil society strategy implementation](https://compliance-by-design.net/2026/01/26/member-states-discuss-national-civil-society-strategy-implementation/): Language English Press release 0 Secondary theme Systems Civil society EU Charter of Fundamental Rights EU Charter of Fundamental Rights Title II: Freedoms Article 11 – Freedom of expression and information EU Charter of Fundamental Rights Title II: Freedoms Article 12 – Freedom of assembly and of association Highlights Report / Paper / Summary 18 ... Read more - [FRA signs a Memorandum of Understanding with CEN-CENELEC](https://compliance-by-design.net/2026/01/26/fra-signs-a-memorandum-of-understanding-with-cen-cenelec/): Language English Press release 0 Secondary theme Data Artificial intelligence and big data EU Charter of Fundamental Rights EU Charter of Fundamental Rights Title III: Equality Article 21 – Non-discrimination Highlights Report / Paper / Summary 18 November 2021 Directive (EU) 2017/541 on combating terrorism ― Impact on fundamental rights and freedoms This report examines ... Read more - [Improving the training of guardians](https://compliance-by-design.net/2026/01/26/improving-the-training-of-guardians/): Language English Press release 0 Secondary theme Asylum Child protection EU Charter of Fundamental Rights EU Charter of Fundamental Rights Title II: Freedoms Article 7 – Respect for private and family life Highlights Report / Paper / Summary 18 November 2021 Directive (EU) 2017/541 on combating terrorism ― Impact on fundamental rights and freedoms This ... Read more - [Information session on assessing high-risk artificial intelligence](https://compliance-by-design.net/2026/01/26/information-session-on-assessing-high-risk-artificial-intelligence/): Language English Press release 0 Secondary theme Data Artificial intelligence and big data EU Charter of Fundamental Rights EU Charter of Fundamental Rights Title III: Equality Article 21 – Non-discrimination Highlights Report / Paper / Summary 18 November 2021 Directive (EU) 2017/541 on combating terrorism ― Impact on fundamental rights and freedoms This report examines ... Read more - [FTC’s January 28 Workshop on Age Verification Technologies Will Be Held Online Only](https://compliance-by-design.net/2026/01/23/ftcs-january-28-workshop-on-age-verification-technologies-will-be-held-online-only/): The Federal Trade Commission announced today that its January 28, 2026, workshop to discuss a range of issues related to age verification technologies will now be held online only. View Press Release - [At FTC’s Request, Court Halts Operations of Deceptive Health Care Telemarketers](https://compliance-by-design.net/2026/01/23/at-ftcs-request-court-halts-operations-of-deceptive-health-care-telemarketers/): Agency alleges Florida-based Top Healthcare Options caused tens of millions of dollars in harm to consumers seeking comprehensive health insurance coverage At the Federal Trade Commission’s request, a U.S. district court in Florida has temporarily stopped the operations of a web of companies and individuals that the FTC alleges caused tens of millions of dollars ... Read more - [FTC Releases Agenda for January 28 Workshop Examining Age Verification Technologies](https://compliance-by-design.net/2026/01/21/ftc-releases-agenda-for-january-28-workshop-examining-age-verification-technologies/): The workshop will be held online and in-person The Federal Trade Commission released the agenda for its January 28, 2026, workshop that will examine a range of issues related to age verification and estimation technologies. View Press Release - [EDPB and EDPS support streamlining AI Act implementation but call for stronger safeguards to protect fundamental rights](https://compliance-by-design.net/2026/01/21/edpb-and-edps-support-streamlining-ai-act-implementation-but-call-for-stronger-safeguards-to-protect-fundamental-rights/): Brussels, 21 January – The European Data Protection Board (EDPB) and the European Data Protection Supervisor (EDPS) have adopted a Joint Opinion on the European Commission’s Proposal for the ‘Digital Omnibus on AI’. The Proposal seeks to simplify the implementation of certain harmonised rules under the AI Act to ensure their effective application.The EDPB and ... Read more - [FTC Appeals Ruling in Meta Monopolization Case](https://compliance-by-design.net/2026/01/20/ftc-appeals-ruling-in-meta-monopolization-case/): Today, the Federal Trade Commission filed a notice that it will appeal the U.S. District Court for the District of Columbia’s November 2025 ruling in favor of Meta Platforms, Inc. (“Meta”) in the FTC’s monopolization case against Meta. The appeal will be heard by the U.S. Court of Appeals for the District of Columbia. View ... Read more - [EDPB contributes to the LED evaluation and adopts recommendations on the application for Processor BCR](https://compliance-by-design.net/2026/01/19/edpb-contributes-to-the-led-evaluation-and-adopts-recommendations-on-the-application-for-processor-bcr/): Brussels, 19 January – During its latest plenary, the EDPB adopted a report to support the European Commission’s evaluation of the Law Enforcement Directive (LED).  The Commission has to submit its public report* on the evaluation and review of this Directive to the European Parliament and to the Council by 6 May 2026. Ahead of ... Read more - [FTC Announces 2026 Update of Jurisdictional and Fee Thresholds for Premerger Notification Filings](https://compliance-by-design.net/2026/01/14/ftc-announces-2026-update-of-jurisdictional-and-fee-thresholds-for-premerger-notification-filings/): The Federal Trade Commission has approved revised jurisdictional thresholds and a revised filing fee schedule under the Hart‑Scott‑Rodino (HSR) Antitrust Improvements Act of 1976. View Press Release - [FTC Announces 2026 Jurisdictional Threshold Updates for Interlocking Directorates](https://compliance-by-design.net/2026/01/14/ftc-announces-2026-jurisdictional-threshold-updates-for-interlocking-directorates/): The Federal Trade Commission has approved revised jurisdictional thresholds for Section 8 of the Clayton Act, which prohibits interlocking directorates. For 2026, thresholds under Section 8 of the Act that trigger prohibitions on certain interlocking memberships on corporate boards of directors are $54,402,000 for Section 8(a)(l) and $5,440,200for Section 8(a)(2)(A). View Press Release - [FTC Finalizes Order Settling Allegations that GM and OnStar Collected and Sold Geolocation Data Without Consumers’ Informed Consent](https://compliance-by-design.net/2026/01/14/ftc-finalizes-order-settling-allegations-that-gm-and-onstar-collected-and-sold-geolocation-data-without-consumers-informed-consent/): The Federal Trade Commission finalized an order with General Motors and OnStar settling allegations that they collected, used, and sold consumers’ precise geolocation data and driving behavior data from millions of vehicles without adequately notifying consumers and obtaining their affirmative consent. View Press Release - [FTC Sues JustAnswer for Deceiving Consumers into Enrolling in a Costly Recurring Monthly Subscription](https://compliance-by-design.net/2026/01/13/ftc-sues-justanswer-for-deceiving-consumers-into-enrolling-in-a-costly-recurring-monthly-subscription/): Agency alleges question-and-answer service falsely claims consumers can get access to experts for a small one-time fee when in reality JustAnswer actually signs every consumer up for a recurring subscription The Federal Trade Commission today sued JustAnswer LLC and its CEO, alleging the online question-and-answer service deceives people seeking expert advice into enrolling in a monthly ... Read more - [FTC Asks Court to Hold Payment Processors in Contempt for Systematically Violating 2015 Order](https://compliance-by-design.net/2026/01/13/ftc-asks-court-to-hold-payment-processors-in-contempt-for-systematically-violating-2015-order/): Agency is seeking at least $52.9 million in relief for consumers from Cliq, Andrew Phillips, and John Blaugrund The Federal Trade Commission has asked a federal court to hold the operators of a payment processing operation in contempt for systematically violating their 2015 order with the agency over allegations they illegally processed credit card payments. ... Read more - [FTC is Seeking Information from 20 Universities on Sports Agents’ Compliance with Law Aimed at Protecting Student Athletes](https://compliance-by-design.net/2026/01/12/ftc-is-seeking-information-from-20-universities-on-sports-agents-compliance-with-law-aimed-at-protecting-student-athletes/): The Federal Trade Commission is seeking information from 20 universities about whether sports agents who work with student athletes have complied with requirements of the Sports Agent Responsibility and Trust Act (SPARTA), which requires specific disclosures to student athletes and notice to schools. View Press Release - [Statement on FTC Victory Halting Anticompetitive Medical Device Deal](https://compliance-by-design.net/2026/01/12/statement-on-ftc-victory-halting-anticompetitive-medical-device-deal/): The Federal Trade Commission secured an important victory to lower healthcare costs and expand access to lifesaving medical devices for Americans by halting Edwards Lifesciences Corp.’s (Edwards) proposed acquisition of JenaValve Technology, Inc (JenaValve). On January 9, 2026, after a six-day trial, the U.S.View Press Release - [FTC Issues Annual Report on Ethanol Market Concentration 2025](https://compliance-by-design.net/2026/01/09/ftc-issues-annual-report-on-ethanol-market-concentration-2025/): The Federal Trade Commission has issued its 2025 Report on Ethanol Market Concentration. The Clean Air Act, as amended by the Energy Policy Act of 2005, directs the Commission to perform an annual reviView Press Release - [FTC to Host Workshop on Consumer Injuries and Benefits in the Data-Driven Economy](https://compliance-by-design.net/2026/01/08/ftc-to-host-workshop-on-consumer-injuries-and-benefits-in-the-data-driven-economy/): The February 26, 2026, event will be held in-person and online The Federal Trade Commission will host a workshop on February 26, 2026, to examine how the agency can better understand and measure consumer injuries and benefits that may result from the collection, use, or disclosure of consumer data. View Press Release - [Digital Identities: Getting to Know the Verifiable Digital Credential Ecosystem](https://compliance-by-design.net/2026/01/07/digital-identities-getting-to-know-the-verifiable-digital-credential-ecosystem-2/): Understanding mDL credential formats Standards in the VDC Ecosystem In our first blog post in this series, we highlighted that VDCs can represent a wide range of credentials, from a driver’s license to a diploma to proof of age. The ability to use VDCs in a wide variety of use cases is a major reason ... Read more - [FTC Issues Biennial Report to Congress on the National Do Not Call Registry](https://compliance-by-design.net/2026/01/06/ftc-issues-biennial-report-to-congress-on-the-national-do-not-call-registry/): In FY 2025, the agency received more than 2.6 million complaints and 4.8 million new numbers were added to the DNC Registry The Federal Trade Commission issued its biennial report to Congress on the National Do Not Call (DNC) Registry that shows consumers placed more than 258 million telephone numbers on the Registry as of ... Read more - [FTC Announces Refund Claims Process for NGL Users Affected by Deceptive Tactics and Unauthorized Charges](https://compliance-by-design.net/2026/01/06/ftc-announces-refund-claims-process-for-ngl-users-affected-by-deceptive-tactics-and-unauthorized-charges/): NGL customers who paid for a NGL Pro subscription between January 2022 and July 2024 may be eligible The Federal Trade Commission has launched a refund claims process for some consumers who were charged for a subscription to the anonymous messaging app NGL without their authorization. View Press Release - [Court Approves Order Requiring Disney to Pay $10 Million to Settle FTC Allegations the Firm Enabled the Unlawful Collection of Children’s Personal Data](https://compliance-by-design.net/2025/12/31/court-approves-order-requiring-disney-to-pay-10-million-to-settle-ftc-allegations-the-firm-enabled-the-unlawful-collection-of-childrens-personal-data/): A federal judge has approved an order requiring Disney to pay $10 million to settle Federal Trade Commission allegations that the company allowed personal data to be collected from children who viewed kid-directed videos on YouTube without noView Press Release - [Coordinated Enforcement Framework: EDPB selects topic for 2026](https://compliance-by-design.net/2025/12/29/coordinated-enforcement-framework-edpb-selects-topic-for-2026/): Brussels, 14 October – During its October plenary, the European Data Protection Board (EDPB) picked the topic for its fifth coordinated enforcement action, which will concern compliance with the obligations of transparency and information under the General Data Protection Regulation (GDPR).  The GDPR ensures that individuals are informed when their data is being processed (under ... Read more - [Draft UK adequacy decisions: EDPB adopts opinions](https://compliance-by-design.net/2025/12/29/draft-uk-adequacy-decisions-edpb-adopts-opinions/): Brussels, 20 October – During its latest plenary, the EDPB adopted two opinions on the European Commission’s draft decisions on the extension of the validity of the UK adequacy decisions under the General Data Protection Regulation (GDPR) and the Law Enforcement Directive (LED) until December 2031.* The EDPB opinions, requested by the Commission as per ... Read more - [Draft adequacy decision for Brazil: EDPB adopts opinion](https://compliance-by-design.net/2025/12/29/draft-adequacy-decision-for-brazil-edpb-adopts-opinion/): Brussels, 5 November – During its latest plenary, the EDPB adopted an opinion on the European Commission’s draft decision on the adequate level of protection of personal data in Brazil.* Once adopted, the decision will ensure that personal data can flow freely from Europe to Brazil and that individuals can retain control over their data. ... Read more - [Help make GDPR compliance easy for organisations: what templates would be helpful for you? Provide your feedback](https://compliance-by-design.net/2025/12/29/help-make-gdpr-compliance-easy-for-organisations-what-templates-would-be-helpful-for-you-provide-your-feedback/): Brussels, 5 November – The European Data Protection Board (EDPB) is taking an important step towards facilitating GDPR compliance for organisations by developing a series of ready-to-use templates. This initiative, announced following the Helsinki Statement on enhanced clarity, support, and engagement, aims to provide practical tools that organisations can readily implement to meet their data ... Read more - [FTC Warns 10 Companies About Possible Violations of the Agency’s New Consumer Review Rule](https://compliance-by-design.net/2025/12/22/ftc-warns-10-companies-about-possible-violations-of-the-agencys-new-consumer-review-rule/): The Rule prohibits fake reviews and allows the Commission to seek civil penalties for violations Federal Trade Commission staff sent letters to 10 companies, warning them of potential violations of the agency’s View Press Release - [FTC Reopens and Sets Aside Rytr Final Order in Response to the Trump Administration’s AI Action Plan](https://compliance-by-design.net/2025/12/22/ftc-reopens-and-sets-aside-rytr-final-order-in-response-to-the-trump-administrations-ai-action-plan/): Today, the Federal Trade Commission issued an order to reopen and set aside a 2024 final consent order involving Rytr LLC.View Press Release - [FTC Analysis shows Consumers Have Lost Millions to Rental Scams](https://compliance-by-design.net/2025/12/22/ftc-analysis-shows-consumers-have-lost-millions-to-rental-scams/): People 18-29 were three times more likely to report losing money to a rental scam than other adults New analysis from the Federal Trade Commission shows that since 2020 consumers reported nearly 65,000 rental scams, many of which originated from fake listings on sites like Facebook and Craigslist, and losses totaling about $65 million. View ... Read more - [FTC Approves Modifications to Horseracing Integrity and Safety Authority’s Enforcement Rule](https://compliance-by-design.net/2025/12/19/ftc-approves-modifications-to-horseracing-integrity-and-safety-authoritys-enforcement-rule/): The Federal Trade Commission issued an order approving a proposed modification from the Horseracing Integrity and Safety Authority to its Enforcement Rule.View Press Release - [Instacart to Pay $60 Million in Consumer Refunds to Settle FTC Lawsuit Over Allegations it Engaged in Deceptive Tactics](https://compliance-by-design.net/2025/12/18/instacart-to-pay-60-million-in-consumer-refunds-to-settle-ftc-lawsuit-over-allegations-it-engaged-in-deceptive-tactics/): FTC settlement resolves allegations that Instacart deceived consumers with false advertising, failure to provide refunds, and unlawful subscription enrollment processes Today, the Federal Trade Commission announced that grocery delivery provider Instacart will pay $60 million in refunds to consumers to settle allegations that the company engaged in numerous unlawful tactics that harmed shoppers and raised ... Read more - [Shield
A tool to detect CSAM and other harmful/ abusive images](https://compliance-by-design.net/2025/12/18/shield/): Shield Canada A tool to detect CSAM and other harmful/ abusive images - [AppCensus](https://compliance-by-design.net/2025/12/17/mobile-application-privacy-scanner/): A privacy scanner for Android mobile applications - [FTC Will Require Illusory Systems to Return Money Stolen by Hackers and Implement an Information Security Program](https://compliance-by-design.net/2025/12/16/ftc-will-require-illusory-systems-to-return-money-stolen-by-hackers-and-implement-an-information-security-program/): The FTC alleged that Illusory’s security failures allowed hackers to exploit a coding vulnerability and steal $186 million from consumers The Federal Trade Commission is taking action against Illusory Systems Inc. for failing to implement adequate data security measures, leading to a major security breach in which hackers stole $186 million from consumers. View Press ... Read more - [Corporate Sustainability Reporting Directive (EU)](https://compliance-by-design.net/2025/12/16/eu-csrd/): TLDR; The Corporate Sustainability Reporting Directive (“CSRD”) updates company-reporting rules for companies active in the European Union to give investors and the public consistent, comparable, and assured information about the sustainability of a company’s activities. The CSRD applies to large EU companies, EU-listed Small-Medium-Enterprises, and non-EU groups with substantial EU turnover. They must capture and ... Read more - [FTC and States File Amended Complaint Against Uber for Deceptive Billing and Cancellation Practices](https://compliance-by-design.net/2025/12/15/ftc-and-states-file-amended-complaint-against-uber-for-deceptive-billing-and-cancellation-practices/): Twenty one states and the District of Columbia join amended complaint seeking civil penalties The Federal Trade Commission—joined by 21 states and the District of Columbia—today filed an amended complaint alleging that Uber charged consumers for its subscription without their consent, failed to deliver promised savings including $0 delivery fees, and made it difficult for ... Read more - [FTC Releases Annual Do Not Call Registry Data Book](https://compliance-by-design.net/2025/12/11/ftc-releases-annual-do-not-call-registry-data-book/): The Federal Trade Commission today released the National Do Not Call Registry Data Book for Fiscal Year 2025, which shows that, while overall complaints rose in FY 2025, unwanted calls remain about 48View Press Release - [FTC Sends More Than $27.6 Million to Consumers Harmed by Unauthorized Billing Schemes](https://compliance-by-design.net/2025/12/09/ftc-sends-more-than-27-6-million-to-consumers-harmed-by-unauthorized-billing-schemes/): The Federal Trade Commission is sending payments totaling more than $27.6 million to consumers who were enrolled, without their knowledge, in plans where they were shipped and charged repeatedly for products marketed to promote weight loss, clear skin, and other healthcare benefits. View Press Release Rust Consulting, Inc. Refund Administrator 1-866-914-9330 - [FTC Sends Warning Letters to 13 Property Management Software Providers Nationwide](https://compliance-by-design.net/2025/12/09/ftc-sends-warning-letters-to-13-property-management-software-providers-nationwide/): The notifications follow a recent $24 million settlement with nation’s largest multi-family rental property manager for allegedly deceptive rental price advertising practices The Federal Trade Commission sent letters to 13 property management software providers nationwide, warning them they may be violating the law if they inhibit rental View Press Release - [FTC Announces Workshop on Age Verification Technologies](https://compliance-by-design.net/2025/12/08/ftc-announces-workshop-on-age-verification-technologies/): January 28 event will bring together researchers, academics, industry representatives and consumer advocates The Federal Trade Commission will hold a workshop on January 28, 2026, to discuss a range of issues related to age verification and estimation technologies, which can help companies obtain age information of potential visitors to websites and other online services. View ... Read more - [Bureau of Competition Statement on Termination of Healthcare Managed Services Merger](https://compliance-by-design.net/2025/12/05/bureau-of-competition-statement-on-termination-of-healthcare-managed-services-merger/): In response to yesterday’s announcement that Aya Healthcare terminated its proposed acquisition of Cross Country Healthcare, FTC Bureau of Competition Director Daniel Guarnera issued the following statement: View Press Release - [EDPB gives recommendations to make online shopping more respectful of users’ privacy, discusses the Digital Omnibus proposal and appoints new Deputy Chair](https://compliance-by-design.net/2025/12/04/edpb-gives-recommendations-to-make-online-shopping-more-respectful-of-users-privacy-discusses-the-digital-omnibus-proposal-and-appoints-new-deputy-chair/): Brussels, 4 December – During its latest plenary, the EDPB adopted recommendations on the legal basis for requiring the creation of user accounts on e-commerce websites. In addition, the Board had a preliminary discussion on the Digital Omnibus proposal and appointed the new EDPB Deputy Chair. Internet users visit e-commerce websites for a variety of ... Read more - [FTC Approves Final Order against Telehealth Provider NextMed Over Charges It Used Deceptive Advertising Claims to Sell GLP-1 Weight-Loss Programs](https://compliance-by-design.net/2025/12/03/ftc-approves-final-order-against-telehealth-provider-nextmed-over-charges-it-used-deceptive-advertising-claims-to-sell-glp-1-weight-loss-programs-2/): The Federal Trade Commission has given final approval to an order against telemedicine company NextMed and its principals, requiring them to stop deceptively advertising weight-loss programs and to stop using deceptive and unfair billing and cancellation practices. View Press Release - [Stakeholder event on anonymisation and pseudonymisation: express your interest](https://compliance-by-design.net/2025/12/03/stakeholder-event-on-anonymisation-and-pseudonymisation-express-your-interest/): Brussels, 17 November – The EDPB organises a remote event to collect  stakeholders’ input on anonymisation and pseudonymisation on implications of the judgement of the Court of Justice of the European Union (CJEU) in EDPS v Single Resolution Board (SRB). The event will take place on 12 December 2025 (time to be confirmed). This will ... Read more - [Support the EDPB’s work as an expert](https://compliance-by-design.net/2025/12/03/support-the-edpbs-work-as-an-expert/): Brussels, 28 November – The EDPB launched a call for expression of interest to establish a new reserve list for the Support Pool of Experts (SPE) programme. The objective is set up a reserve list of legal and technical experts. The legal expertise sought includes a wide range of fields, such as data protection, policy ... Read more - [Strengthening data protection worldwide: EDPB meets with the countries and organisation with an adequacy decision](https://compliance-by-design.net/2025/12/03/strengthening-data-protection-worldwide-edpb-meets-with-the-countries-and-organisation-with-an-adequacy-decision/): Brussels, 3 December – As part of its December’s plenary meeting, the European Data Protection Board (EDPB) held yesterday an online meeting with Commissioners and representatives of Data Protection Authorities (DPAs) from the countries and the organisation with an EU adequacy decision. This meeting marked the second of its kind, following the first gathering in ... Read more - [FTC Endorses Texas Supreme Court’s Proposed Rule Change Eliminating ABA’s Monopoly Control Over Bar Admission](https://compliance-by-design.net/2025/12/02/ftc-endorses-texas-supreme-courts-proposed-rule-change-eliminating-abas-monopoly-control-over-bar-admission/): Federal Trade Commission staff endorsed a proposed amendment that eliminates the American Bar Association’s (ABA) authority to dictate the education requirements needed to take the bar exam and practice law in Texas.View Press Release - [Greystar Agrees to Pay $24 Million and Stop Deceptive Advertising Practices as a Result of FTC and Colorado Lawsuit Alleging the Firm Deceived Consumers About Rent Prices](https://compliance-by-design.net/2025/12/02/greystar-agrees-to-pay-24-million-and-stop-deceptive-advertising-practices-as-a-result-of-ftc-and-colorado-lawsuit-alleging-the-firm-deceived-consumers-about-rent-prices/): Order requires company to clearly and conspicuously display total monthly leasing price and mandatory fees Greystar, the nation’s largest multi-family rental property manager, has agreed to pay $23 million to the Federal Trade Commission and $1 million to the State of Colorado and stop its deceptive advertising practices to resolve charges that the company misled ... Read more - [FTC Sends Payments to Consumers Impacted by Avast’s Deceptive Privacy Claims](https://compliance-by-design.net/2025/12/02/ftc-sends-payments-to-consumers-impacted-by-avasts-deceptive-privacy-claims-2/): The Federal Trade Commission is sending payments totaling nearly $15.3 million to consumers who were affected by deceptively marketed antivirus software from Avast. View Press Release Media Contacts Kimberly Wong Office of Public Affairs Office of Public Affairs 202-326-2180 - [FTC Sends Payments to Consumers Impacted by Avast’s Deceptive Privacy Claims](https://compliance-by-design.net/2025/12/02/ftc-sends-payments-to-consumers-impacted-by-avasts-deceptive-privacy-claims/): The Federal Trade Commission is sending payments totaling nearly $15.3 million to consumers who were affected by deceptively marketed antivirus software from Avast. View Press Release Media Contacts Kimberly Wong Office of Public Affairs Office of Public Affairs 202-326-2180 - [A NICE Retrospective on Shaping Cybersecurity’s Future](https://compliance-by-design.net/2025/12/02/a-nice-retrospective-on-shaping-cybersecuritys-future/): Rodney Petersen has served as the Director of NICE at the National Institute for Standards and Technology (NIST) for the past eleven years where his focus has been on advancing cybersecurity education and workforce development. He will be retiring from federal government service at the end of the 2025 calendar year. Prior to his role ... Read more - [FTC Issues Annual Report to Congress on Agency’s Actions to Protect Older Adults](https://compliance-by-design.net/2025/12/01/ftc-issues-annual-report-to-congress-on-agencys-actions-to-protect-older-adults/): The report highlights a dramatic increase in the number of older adults reporting losses of over $100,000 to scams Today, the Federal Trade Commission issued its annual report to Congress on protecting older adults, which shows a big increase in the number of older adults reporting losses of over $100,000 to scams. View Press Release - [FTC Takes Action Against Education Technology Provider for Failing to Secure Students’ Personal Data](https://compliance-by-design.net/2025/12/01/ftc-takes-action-against-education-technology-provider-for-failing-to-secure-students-personal-data/): Illuminate Education will be required to implement an information security program to address data security failures after a breach involving data of more than 10 million students The Federal Trade Commission will require education technology provider Illuminate Education, Inc. (Illuminate) to implement a data security program and delete unnecessary data to settle allegations that the ... Read more - [FTC Approves Final Order Prohibiting Noncompete Enforcement by Gateway Services](https://compliance-by-design.net/2025/11/26/ftc-approves-final-order-prohibiting-noncompete-enforcement-by-gateway-services/): The Federal Trade Commission finalized a consent order that requires pet cremation company Gateway Services, Inc. and its subsidiary to stop enforcing noncompete agreements against their employees. View Press Release - [Privacy-by-Design Masterclass](https://compliance-by-design.net/2025/11/25/privacy-by-design-masterclass/): Course: Ultimate Privacy by Design Data Protection Course (GDPR, LGPD) Overview You need to comply with privacy and data protection laws in your software product and the supporting operations. Getting privacy-by-design wrong is costly, because it creates friction and reduces time-to-market. It also causes technical debt. On top of that, laws around the world increasingly require ... Read more - [FTC Approves Final Consent Order in ACT-Giant Eagle Deal](https://compliance-by-design.net/2025/11/19/ftc-approves-final-consent-order-in-act-giant-eagle-deal/): The Federal Trade Commission finalized a consent order that resolves antitrust concerns surrounding Alimentation Couche-Tard Inc.’s (ACT) $1.57 billion acquisition of 270 retail fuel outlets from grocery store chain Giant Eagle, Inc. (Giant Eagle). ACT currently operates more than 7,100 stores in the United States, primarily under the Circle K brand.View Press Release - [FTC Commissioner Melissa Holyoak appointed as Interim US Attorney](https://compliance-by-design.net/2025/11/17/ftc-commissioner-melissa-holyoak-appointed-as-interim-us-attorney/): Melissa Holyoak, who has served as Commissioner of the Federal Trade Commission since March 2024, has been appointed by United States Attorney General Pam Bondi to be Interim US Attorney for the District of Utah. Her final day as a Commissioner was November 17, 2025. View Press Release - [Seek Capital and CEO are Permanently Banned from Providing Business Financing, Other Services to Settle FTC Allegations](https://compliance-by-design.net/2025/11/17/seek-capital-and-ceo-are-permanently-banned-from-providing-business-financing-other-services-to-settle-ftc-allegations/): FTC alleged Seek Capital promised new and aspiring small business owners loans or lines of credit but instead charged them thousands to open up credit cards Seek Capital and its CEO have been permanently banned from providing business financing, debt relief and credit repair services to settle Federal Trade Commission allegations that the firm deceived ... Read more - [FTC Requires Divestiture of Oil Change Shops in Valvoline-Greenbriar Deal](https://compliance-by-design.net/2025/11/14/ftc-requires-divestiture-of-oil-change-shops-in-valvoline-greenbriar-deal/): Proposed FTC order seeks to protect Americans from higher oil change costs, lower service quality The Federal Trade Commission will require automotive services company Valvoline Inc. and private equity firm Greenbriar Equity Fund V., L.P. (Greenbriar) to divest 45 quick-lube oil change shops to resolve antitrust concerns surrounding their $625 million deal.View Press Release - [FTC, State of Nevada Sue to Stop Tax Debt Relief Scammers from Falsely Impersonating the Government, Making False Claims and Threats to Consumers](https://compliance-by-design.net/2025/10/17/ftc-state-of-nevada-sue-to-stop-tax-debt-relief-scammers-from-falsely-impersonating-the-government-making-false-claims-and-threats-to-consumers/): American Tax Service allegedly promised fake tax debt relief and pocketed tens of millions of consumers’ dollars At the Federal Trade Commission’s request, a federal court has temporarily halted alleged tax debt relief scammers from falsely impersonating government agencies, including the Internal Revenue Service, deceptively promising tax debt relief, sending threats to consumers about their debts ... Read more - [FTC Approves Final Divestiture Order in Synopsys and Ansys Deal](https://compliance-by-design.net/2025/10/17/ftc-approves-final-divestiture-order-in-synopsys-and-ansys-deal/): The Federal Trade Commission finalized a consent order that requires Synopsys, Inc. and Ansys, Inc. to divest certain assets to resolve antitrust concerns surrounding their $35 billion merger. View Press Release - [Strengthening Schengen security and preventing irregular migration: EU Entry Exit System enters into operation](https://compliance-by-design.net/2025/10/10/strengthening-schengen-security-and-preventing-irregular-migration-eu-entry-exit-system-enters-into-operation/): Brussels, 10 October –   On the occasion of the upcoming entry into operation of the EU Entry Exit System (EES) on 12 October 2025, the Coordinated Supervision Committee (CSC) will include the EES system under its scope. This system registers non-Schengen nationals travelling with a short stay visa or travellers who are visa exempt. ... Read more - [Anonymisation and pseudonymisation: take part in the stakeholder event](https://compliance-by-design.net/2025/10/09/anonymisation-and-pseudonymisation-take-part-in-the-stakeholder-event/): Brussels, 9 October – The EDPB is organising a remote stakeholder event to collect stakeholders’ input on anonymisation and pseudonymisation following the clarification on the scope of the concept of personal data provided by the Court of Justice of the European Union (CJEU) in its judgement in EDPS v Single Resolution Board (SRB). The event ... Read more - [DMA and GDPR: EDPB and European Commission endorse joint guidelines to clarify common touchpoints](https://compliance-by-design.net/2025/10/09/dma-and-gdpr-edpb-and-european-commission-endorse-joint-guidelines-to-clarify-common-touchpoints/): Brussels, 09 October – The European Data Protection Board (EDPB) and the European Commission endorsed joint guidelines on the interplay between the Digital Markets Act (DMA) and the General Data Protection Regulation (GDPR). These are the first joint guidelines by the Board and the European Commission. In line with its 2024-2027 Strategy and the recent ... Read more - [Digital Personal Data Protection Bill, 2023 (India)](https://compliance-by-design.net/2025/10/03/digital-personal-data-protection-bill-2023-india/): Jurisdiction: India Status: Received presidential assent on 11th August 2023. History and What It’s About The Digital Personal Data Protection Bill, 2023 was introduced in the Lok Sabha (Indian Parliament) as Bill No. 113 of 2023. The Bill aims to regulate the processing of digital personal data while balancing the right to privacy of individuals with the necessity of processing personal data for ... Read more - [NIS2 Directive (EU)](https://compliance-by-design.net/2025/10/03/the-european-unions-nis2-directive/): Jurisdiction: European Union / Economic Area Status: Adopted. European countries have until 17 October 2024 to impose through national law. History and what it’s about The NIS2 Directive (Directive (EU) 2022/2555) was adopted on December 14, 2022, as a revision to the original NIS Directive (Directive on Security of Network and Information Systems) that was ... Read more - [The European Union Accessibility Act](https://compliance-by-design.net/2025/10/03/the-european-union-accessibility-act/): Jurisdiction: European Union / Economic Area Status: Adopted. European countries have until 28 June 2025 to impose through national law. History and what it’s about The European Accessibility Act (EAA) was adopted on April 17, 2019, and is intended to enhance the accessibility of products and services for persons with disabilities across the European Union ... Read more - [General Data Protection Regulation (EU)](https://compliance-by-design.net/2025/10/03/eu-general-data-protection-regulation/): Jurisdiction: European Union / Economic Area Status: Adopted and Enforceable History and what it’s about The General Data Protection Regulation (GDPR) was adopted on April 27, 2016. It became enforceable on May 25, 2018. The GDPR’s purpose is to protect the fundamental rights of individuals in the European Union (EU), and specifically their personal data ... Read more - [Consent Management Platform to Satisfy Notice and Consent Obligations](https://compliance-by-design.net/2025/10/02/consent-management-platform-to-satisfy-notice-and-consent-obligations/): by Usercentrics GmbH - [Powerful Content Safety API to Secure Kids Online](https://compliance-by-design.net/2025/10/02/powerful-content-safety-api-to-secure-kids-online/): by Google Inc - [Fast and Secure Online Identity Verification Tool for KYC Compliance](https://compliance-by-design.net/2025/10/02/fast-and-secure-online-identity-verification-tool-for-kyc-compliance/): by Sum and Substance Ltd. - [Best Data Retention Tool for Global Record Keeping Compliance](https://compliance-by-design.net/2025/10/02/best-data-retention-tool-for-global-record-keeping-compliance/): by FilersKeepers - [Reliable Age Verification for Compliance with Age Restrictions](https://compliance-by-design.net/2025/10/02/reliable-age-verification-for-compliance-with-age-restrictions/): by Yoti Ltd - [The child rights handbook now in 12 additional languages](https://compliance-by-design.net/2026/03/05/the-child-rights-handbook-now-in-12-additional-languages/): Language English Press release 0 Secondary theme Equality Children, youth and older people EU Charter of Fundamental Rights EU Charter of Fundamental Rights Title III: Equality Article 24 – The rights of the child EU Charter of Fundamental Rights Title III: Equality Article 25 – The rights of the elderly Highlights Report / Paper / ... Read more - [EU-wide survey highlights scale of psychological, economic, and cyber violence against women](https://compliance-by-design.net/2026/03/04/eu-wide-survey-highlights-scale-of-psychological-economic-and-cyber-violence-against-women/): Language English Press release 1 Secondary theme Equality Sex, sexual orientation and gender EU Charter of Fundamental Rights EU Charter of Fundamental Rights Title III: Equality Article 21 – Non-discrimination EU Charter of Fundamental Rights Title III: Equality Article 23 – Equality between women and men Highlights Report / Paper / Summary 18 November 2021 ... Read more - [Conference on cross-regulatory cooperation in the EU (17 March) - Programme available now](https://compliance-by-design.net/2026/03/03/conference-on-cross-regulatory-cooperation-in-the-eu-17-march-programme-available-now/): The conference “Cross- regulatory interplay and cooperation in the EU: a data protection perspective” takes place on 17 March 2026 from 9.15 to 15.30. This event will offer a high-level overview of the EDPB’s work in the EU’s cross-regulatory landscape, focusing in particular on how regulatory frameworks interact and how cooperation between authorities is ensured. See ... Read more - [Country reports for FRA’s fundamental rights and housing report now available](https://compliance-by-design.net/2026/02/27/country-reports-for-fras-fundamental-rights-and-housing-report-now-available/): Language English Press release 0 Secondary theme environmental-social-sustainability Just and green transition EU Charter of Fundamental Rights EU Charter of Fundamental Rights Title IV: Solidarity Article 37 – Environmental protection EU Charter of Fundamental Rights Title IV: Solidarity Article 38 – Consumer protection Highlights Report / Paper / Summary 18 November 2021 Directive (EU) 2017/541 ... Read more - [FTC Issues COPPA Policy Statement to Incentivize the Use of Age Verification Technologies to Protect Children Online](https://compliance-by-design.net/2026/02/26/ftc-issues-coppa-policy-statement-to-incentivize-the-use-of-age-verification-technologies-to-protect-children-online/): Policy statement announces enforcement approach regarding the collection, use, and disclosure of personal data to determine the age of a user The Federal Trade Commission issued a policy statement today announcing that the Commission will not bring an enforcement action under the Children’s Online Privacy Protection Rule (COPPA Rule) against certain website and online service ... Read more - [EEA Civil Society Fund opening event in Hungary](https://compliance-by-design.net/2026/02/26/eea-civil-society-fund-opening-event-in-hungary/): Language English Press release 0 Secondary theme Systems Civil society EU Charter of Fundamental Rights EU Charter of Fundamental Rights Title II: Freedoms Article 11 – Freedom of expression and information EU Charter of Fundamental Rights Title II: Freedoms Article 12 – Freedom of assembly and of association Highlights Report / Paper / Summary 18 ... Read more - [OECD holds Innovative Citizen Participation Network meeting](https://compliance-by-design.net/2026/02/26/oecd-holds-innovative-citizen-participation-network-meeting/): Language English Press release 0 Secondary theme Systems Civil society EU Charter of Fundamental Rights EU Charter of Fundamental Rights Title II: Freedoms Article 11 – Freedom of expression and information EU Charter of Fundamental Rights Title II: Freedoms Article 12 – Freedom of assembly and of association Highlights Report / Paper / Summary 18 ... Read more - [FRA’s work on Schengen matters](https://compliance-by-design.net/2026/02/26/fras-work-on-schengen-matters/): Language English Press release 0 Secondary theme Asylum Borders and information systems EU Charter of Fundamental Rights EU Charter of Fundamental Rights Title II: Freedoms Article 19 – Protection in the event of removal, expulsion or extradition EU Charter of Fundamental Rights Title II: Freedoms Article 8 – Protection of personal data Highlights Report / ... Read more - [FRA presents the EU gender-based violence survey at a UN preparatory event](https://compliance-by-design.net/2026/02/26/fra-presents-the-eu-gender-based-violence-survey-at-a-un-preparatory-event/): Language English Press release 0 Secondary theme Equality Sex, sexual orientation and gender EU Charter of Fundamental Rights EU Charter of Fundamental Rights Title III: Equality Article 21 – Non-discrimination EU Charter of Fundamental Rights Title III: Equality Article 23 – Equality between women and men Highlights Report / Paper / Summary 18 November 2021 ... Read more - [FRA issues legal opinion on the proposed simplified European Sustainability Reporting Standards](https://compliance-by-design.net/2026/02/26/fra-issues-legal-opinion-on-the-proposed-simplified-european-sustainability-reporting-standards/): Language English Press release 0 Secondary theme environmental-social-sustainability Climate change and environmental protection EU Charter of Fundamental Rights EU Charter of Fundamental Rights Title IV: Solidarity Article 37 – Environmental protection Highlights Report / Paper / Summary 18 November 2021 Directive (EU) 2017/541 on combating terrorism ― Impact on fundamental rights and freedoms This report ... Read more - [Walmart Agrees to $100 Million Judgment to Settle FTC, States’ Charges Over Deceptive Earnings Claims Related to the Company’s Spark Driver Delivery Service](https://compliance-by-design.net/2026/02/26/walmart-agrees-to-100-million-judgment-to-settle-ftc-states-charges-over-deceptive-earnings-claims-related-to-the-companys-spark-driver-delivery-service/): FTC, states alleged Walmart has deceived Spark drivers about the amount of base pay, tips and incentive pay they will receive for deliveries Walmart, Inc. has agreed to a $100 million judgment to settle allegations from the Federal Trade Commission and 11 states that the company caused delivery drivers to lose tens of millions of ... Read more - [FRA presents its gender-based violence work at the TACTICS conference](https://compliance-by-design.net/2026/02/26/fra-presents-its-gender-based-violence-work-at-the-tactics-conference/): Language English Press release 0 Secondary theme Equality Sex, sexual orientation and gender EU Charter of Fundamental Rights EU Charter of Fundamental Rights Title III: Equality Article 21 – Non-discrimination EU Charter of Fundamental Rights Title III: Equality Article 23 – Equality between women and men Highlights Report / Paper / Summary 18 November 2021 ... Read more - [FTC to Host February 26 Workshop on Measuring Injuries and Benefits in the Data-Driven Economy](https://compliance-by-design.net/2026/02/25/ftc-to-host-february-26-workshop-on-measuring-injuries-and-benefits-in-the-data-driven-economy/): WHAT:The Federal Trade Commission is hosting a workshop, “Measuring Injuries and Benefits in the Data-Driven Economy,” to explore efforts to measure consumers’ privacy preferences, as well as the impacts of data breaches on consumers.WHEN:Thursday, February 26, 2026, from 9:30 a.m. ET – 5:00 p.m.View Press Release - [Women fleeing the war in Ukraine face abuse, harassment and exploitation, FRA survey finds](https://compliance-by-design.net/2026/02/24/women-fleeing-the-war-in-ukraine-face-abuse-harassment-and-exploitation-fra-survey-finds/): Language English Press release 1 Secondary theme Equality Sex, sexual orientation and gender EU Charter of Fundamental Rights EU Charter of Fundamental Rights Title III: Equality Article 21 – Non-discrimination EU Charter of Fundamental Rights Title III: Equality Article 23 – Equality between women and men Highlights Report / Paper / Summary 18 November 2021 ... Read more - [Federal Trade Commission and Department of Justice Seek Public Comment for Guidance on Business Collaborations](https://compliance-by-design.net/2026/02/24/federal-trade-commission-and-department-of-justice-seek-public-comment-for-guidance-on-business-collaborations/): Agencies Launch Joint Public Inquiry for Consideration of Guidance on Collaborations Among Competitors to Promote Certainty and Competition Today, the Federal Trade Commission and the Department of Justice’s Antitrust Division launched a joint public inquiry regarding potential additional guidance on collaborations among competitors. The joint inquiry seeks input on the value and potential content of ... Read more - [Celebrating Two Years of CSF 2.0!](https://compliance-by-design.net/2026/02/24/celebrating-two-years-of-csf-2-0/): Celebrate this milestone with us! Email us at csf [at] nist.gov (csf[at]nist[dot]gov) or tag @NISTcyber on X telling us what your favorite CSF 2.0 resource is (or how your organization has benefitted from implementing the CSF 2.0). Today marks two years since the publication of the Cybersecurity Framework (CSF) 2.0! Published in 2024, the CSF ... Read more - [AI-generated imagery and protection of privacy: EDPB supports joint Global Privacy Assembly’s statement](https://compliance-by-design.net/2026/02/23/ai-generated-imagery-and-protection-of-privacy-edpb-supports-joint-global-privacy-assemblys-statement/): Brussels, 23 February – EDPB Chair Anu Talus has signed a Joint Statement on AI-Generated Imagery and the Protection of Privacy on behalf of the EDPB. The statement, coordinated by the Global Privacy Assembly’s (GPA) International Enforcement Cooperation Working Group (IEWG), represents the united position of 61 authorities across the world. This reflects the Board’s ... Read more - [FRA's new climate-friendly headquarters in Vienna](https://compliance-by-design.net/2026/02/20/fras-new-climate-friendly-headquarters-in-vienna/): Language English Press release 0 Primary theme Systems Support for human rights systems and defenders Many organisations work to defend your rights. We help their efforts with independent evidence, advice and expertise. We support their frontline work. And we shine a light on potential risks and priority areas. Together we make your rights a reality. ... Read more - [AEPD (Spain) - EXP202408793](https://compliance-by-design.net/2026/02/20/aepd-spain-exp202408793/): Rp: Created page with “{{DPAdecisionBOX |Jurisdiction=Spain |DPA-BG-Color=background-color:#ffffff; |DPAlogo=LogoES.jpg |DPA_Abbrevation=AEPD |DPA_With_Country=AEPD (Spain) |Case_Number_Name=EXP202408793 |ECLI= |Original_Source_Name_1=AEPD |Original_Source_Link_1=https://www.aepd.es/documento/ps-00279-2024.pdf |Original_Source_Language_1=Spanish |Original_Source_Language__Code_1=ES |Original_Source_Name_2= |Original_Source_Link_2= |Original_Source_Language_2= |Original_Source_Language__Code…” {{DPAdecisionBOX |Jurisdiction=Spain |DPA-BG-Color=background-color:#ffffff; |DPAlogo=LogoES.jpg |DPA_Abbrevation=AEPD |DPA_With_Country=AEPD (Spain) |Case_Number_Name=EXP202408793 |ECLI= |Original_Source_Name_1=AEPD |Original_Source_Link_1=https://www.aepd.es/documento/ps-00279-2024.pdf |Original_Source_Language_1=Spanish |Original_Source_Language__Code_1=ES |Original_Source_Name_2= |Original_Source_Link_2= |Original_Source_Language_2= |Original_Source_Language__Code_2= |Type=Complaint |Outcome=Upheld |Date_Started=14.02.2025 |Date_Decided= |Date_Published=19.02.2026 |Year= |Fine=100.000 |Currency=EUR |GDPR_Article_1=Article 5(1)(f) GDPR |GDPR_Article_Link_1=Article 5 GDPR#1f |GDPR_Article_2=Article 9 GDPR ... Read more - [AEPD (Spain) - EXP202410843](https://compliance-by-design.net/2026/02/20/aepd-spain-exp202410843/): Rp: Created page with “{{DPAdecisionBOX |Jurisdiction=Spain |DPA-BG-Color=background-color:#ffffff; |DPAlogo=LogoES.jpg |DPA_Abbrevation=AEPD |DPA_With_Country=AEPD (Spain) |Case_Number_Name=EXP202410843 |ECLI= |Original_Source_Name_1=AEPD |Original_Source_Link_1=https://www.aepd.es/documento/ps-00476-2024.pdf |Original_Source_Language_1=Spanish |Original_Source_Language__Code_1=ES |Original_Source_Name_2= |Original_Source_Link_2= |Original_Source_Language_2= |Original_Source_Language__Code…” {{DPAdecisionBOX |Jurisdiction=Spain |DPA-BG-Color=background-color:#ffffff; |DPAlogo=LogoES.jpg |DPA_Abbrevation=AEPD |DPA_With_Country=AEPD (Spain) |Case_Number_Name=EXP202410843 |ECLI= |Original_Source_Name_1=AEPD |Original_Source_Link_1=https://www.aepd.es/documento/ps-00476-2024.pdf |Original_Source_Language_1=Spanish |Original_Source_Language__Code_1=ES |Original_Source_Name_2= |Original_Source_Link_2= |Original_Source_Language_2= |Original_Source_Language__Code_2= |Type=Complaint |Outcome=Upheld |Date_Started=08.01.2024 |Date_Decided=09.12.2025 |Date_Published=19.02.2026 |Year=2025 |Fine=10,000 |Currency=EUR |GDPR_Article_1=Article 5(1)(c) GDPR |GDPR_Article_Link_1=Article 5 GDPR#1c |GDPR_Article_2= |GDPR_Article_Link_2= |GDPR_Article_3= ... Read more - [APD/GBA (Belgium) - 28/2026](https://compliance-by-design.net/2026/02/20/apd-gba-belgium-28-2026/): Dt: Created page with “{{DPAdecisionBOX |Jurisdiction=Belgium |DPA-BG-Color= |DPAlogo=LogoBE.png |DPA_Abbrevation=APD/GBA |DPA_With_Country=APD/GBA (Belgium) |Case_Number_Name=28/2026 |ECLI= |Original_Source_Name_1=APD |Original_Source_Link_1=https://www.gegevensbeschermingsautoriteit.be/publications/bevel-nr.-28-2026.pdf |Original_Source_Language_1=French |Original_Source_Language__Code_1=FR |Original_Source_Name_2= |Original_Source_Link_2= |Original_Source_Language_2= |Original_Source_Lan…” {{DPAdecisionBOX |Jurisdiction=Belgium |DPA-BG-Color= |DPAlogo=LogoBE.png |DPA_Abbrevation=APD/GBA |DPA_With_Country=APD/GBA (Belgium) |Case_Number_Name=28/2026 |ECLI= |Original_Source_Name_1=APD |Original_Source_Link_1=https://www.gegevensbeschermingsautoriteit.be/publications/bevel-nr.-28-2026.pdf |Original_Source_Language_1=French |Original_Source_Language__Code_1=FR |Original_Source_Name_2= |Original_Source_Link_2= |Original_Source_Language_2= |Original_Source_Language__Code_2= |Type=Complaint |Outcome=Upheld |Date_Started= |Date_Decided=10.02.2026 |Date_Published= |Year=2026 |Fine= |Currency= |GDPR_Article_1=Article 15(1) GDPR |GDPR_Article_Link_1=Article 15 GDPR#1 |GDPR_Article_2= |GDPR_Article_Link_2= |GDPR_Article_3= ... Read more - [AKI (Estonia) - 2.1.-4/25/1239-2660-6](https://compliance-by-design.net/2026/02/20/aki-estonia-2-1-4-25-1239-2660-6/): Dt: Created page with “{{DPAdecisionBOX |Jurisdiction=Estonia |DPA-BG-Color= |DPAlogo=LogoEE.png |DPA_Abbrevation=AKI |DPA_With_Country=AKI (Estonia) |Case_Number_Name=2.1.-4/25/1239-2660-6 |ECLI= |Original_Source_Name_1=AKI |Original_Source_Link_1=https://www.aki.ee/sites/default/files/documents/2026-01/Ettekirjutus-hoiatus%20isikuandmete%20kaitse%20asjas%20nr%202.1.-4%2025%201239-2660-6%20Zu%20Disain%20O%C3%9C.pdf |Original_Source_Language_1=Estonian |Original_Source_Language__Code_1=ET |…” {{DPAdecisionBOX |Jurisdiction=Estonia |DPA-BG-Color= |DPAlogo=LogoEE.png |DPA_Abbrevation=AKI |DPA_With_Country=AKI (Estonia) |Case_Number_Name=2.1.-4/25/1239-2660-6 |ECLI= |Original_Source_Name_1=AKI |Original_Source_Link_1=https://www.aki.ee/sites/default/files/documents/2026-01/Ettekirjutus-hoiatus%20isikuandmete%20kaitse%20asjas%20nr%202.1.-4%2025%201239-2660-6%20Zu%20Disain%20O%C3%9C.pdf |Original_Source_Language_1=Estonian |Original_Source_Language__Code_1=ET |Original_Source_Name_2= |Original_Source_Link_2= |Original_Source_Language_2= |Original_Source_Language__Code_2= |Type=Investigation |Outcome=Violation Found |Date_Started= |Date_Decided=06.10.2025 |Date_Published= |Year=2025 |Fine= |Currency= |GDPR_Article_1=Article 5(1)(a) GDPR |GDPR_Article_Link_1=Article 5 GDPR#1a |GDPR_Article_2=Article 6(1) GDPR |GDPR_Article_Link_2=Article 6 ... Read more - [ANSPDCP (Romania) - 03.02.2026](https://compliance-by-design.net/2026/02/20/anspdcp-romania-03-02-2026/): Dt: Created page with “{{DPAdecisionBOX |Jurisdiction=Romania |DPA-BG-Color=background-color:#ffffff; |DPAlogo=LogoRO.jpg |DPA_Abbrevation=ANSPDCP |DPA_With_Country=ANSPDCP (Romania) |Case_Number_Name=03.02.2026 |ECLI= |Original_Source_Name_1=ANSPDCP |Original_Source_Link_1=https://www.dataprotection.ro/?page=Comunicat_Presa_03_02_2026&lang=ro |Original_Source_Language_1=Romanian |Original_Source_Language__Code_1=RO |Original_Source_Name_2= |Original_Source_Link_2= |Original_Source_Language…” {{DPAdecisionBOX |Jurisdiction=Romania |DPA-BG-Color=background-color:#ffffff; |DPAlogo=LogoRO.jpg |DPA_Abbrevation=ANSPDCP |DPA_With_Country=ANSPDCP (Romania) |Case_Number_Name=03.02.2026 |ECLI= |Original_Source_Name_1=ANSPDCP |Original_Source_Link_1=https://www.dataprotection.ro/?page=Comunicat_Presa_03_02_2026&lang=ro |Original_Source_Language_1=Romanian |Original_Source_Language__Code_1=RO |Original_Source_Name_2= |Original_Source_Link_2= |Original_Source_Language_2= |Original_Source_Language__Code_2= |Type=Complaint |Outcome=Upheld |Date_Started= |Date_Decided= |Date_Published=03.02.2026 |Year= |Fine=5,089 |Currency=RON |GDPR_Article_1=Article 12(3) GDPR |GDPR_Article_Link_1=Article 12 GDPR#3 |GDPR_Article_2=Article 12(4) GDPR |GDPR_Article_Link_2=Article ... Read more - [ICO (UK) - Allay Claims Ltd](https://compliance-by-design.net/2026/02/20/ico-uk-allay-claims-ltd/): Dt: {{DPAdecisionBOX |Jurisdiction=United Kingdom |DPA-BG-Color=background-color:#023868; |DPAlogo=LogoUK.png |DPA_Abbrevation=ICO |DPA_With_Country=ICO (UK) |Case_Number_Name=Allay Claims Ltd |ECLI= |Original_Source_Name_1=ICO |Original_Source_Link_1=https://ico.org.uk/media2/mrwhxwoe/monetary-penalty-notice-allay-claims-ltd.pdf |Original_Source_Language_1=Estonian |Original_Source_Language__Code_1=ET |Original_Source_Name_2= |Original_Source_Link_2= |Original_Source_Language_2= |Original_Source_Language__Code_2= |Type=Complaint |Outcome=Upheld |Date_Started= |Date_Decided=15.01.2026 |Date_Published= |Year=2026 |Fine=120,000 |Currency=GBP |GDPR_Article_1= |GDPR_Article_Link_1= |GDPR_Article_2= |GDPR_Article_Link_2= |EU_Law_Name_1= |EU_Law_Link_1= |EU_Law_Name_2= |EU_Law_Link_2= |National_Law_Name_1=Regulation 22 PECR |National_Law_Link_1= |National_Law_Name_2= |National_Law_Link_2= |National_Law_Name_3= |National_Law_Link_3= |Party_Name_1=Allay Claims Ltd |Party_Link_1= |Party_Name_2= |Party_Link_2= |Party_Name_3= |Party_Link_3= |Appeal_To_Body= |Appeal_To_Case_Number_Name= ... Read more - [Garante per la protezione dei dati personali (Italy) - 10213894](https://compliance-by-design.net/2026/02/20/garante-per-la-protezione-dei-dati-personali-italy-10213894/): Ligialagev: Created page with “{{DPAdecisionBOX |Jurisdiction=Italy |DPA-BG-Color=background-color:#095d7e; |DPAlogo=LogoIT.png |DPA_Abbrevation=Garante per la protezione dei dati personali |DPA_With_Country=Garante per la protezione dei dati personali (Italy) |Case_Number_Name=10213894 |ECLI= |Original_Source_Name_1=Garante per la protezione dei dati personali |Original_Source_Link_1=https://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/10213894 |Original_Source_Language_1=I…” {{DPAdecisionBOX |Jurisdiction=Italy |DPA-BG-Color=background-color:#095d7e; |DPAlogo=LogoIT.png |DPA_Abbrevation=Garante per la protezione dei dati personali |DPA_With_Country=Garante per la protezione dei dati personali (Italy) |Case_Number_Name=10213894 |ECLI= ... Read more - [Transposing EU Directives on Equality Bodies’ Standards](https://compliance-by-design.net/2026/02/20/transposing-eu-directives-on-equality-bodies-standards/): Language English Press release 0 Secondary theme Systems National human rights systems and bodies EU Charter of Fundamental Rights EU Charter of Fundamental Rights Title VI: Justice Article 47 – Right to an effective remedy and to a fair trial Highlights Report / Paper / Summary 18 November 2021 Directive (EU) 2017/541 on combating terrorism ... Read more - [TI - 9/2026](https://compliance-by-design.net/2026/02/20/ti-9-2026/): Dt: {{COURTdecisionBOX |Jurisdiction=Romania |Court-BG-Color= |Courtlogo=Courts_logo1.png |Court_Abbrevation=TI |Court_Original_Name=Tribunalul Ilfov |Court_English_Name=Ilfov Tribunal |Court_With_Country=TI (Romania) |Case_Number_Name=9/2026 |ECLI= |Original_Source_Name_1=Rejust |Original_Source_Link_1=https://www.rejust.ro/juris/84284d3g4 |Original_Source_Language_1=Romanian |Original_Source_Language__Code_1=RO |Original_Source_Name_2= |Original_Source_Link_2= |Original_Source_Language_2= |Original_Source_Language__Code_2= |Date_Decided=12.01.2026 |Date_Published= |Year=2026 |GDPR_Article_1=Article 12 GDPR |GDPR_Article_Link_1=Article 12 GDPR |GDPR_Article_2=Article 13 GDPR |GDPR_Article_Link_2=Article 13 GDPR |GDPR_Article_3=Article 14 GDPR |GDPR_Article_Link_3=Article 14 GDPR |GDPR_Article_4= |GDPR_Article_Link_4= |GDPR_Article_5= |GDPR_Article_Link_5= |EU_Law_Name_1= |EU_Law_Link_1= |EU_Law_Name_2= |EU_Law_Link_2= |National_Law_Name_1=Article 4(5)(a) & (b) ... Read more - [EDPB identifies challenges hindering the full implementation of the right to erasure](https://compliance-by-design.net/2026/02/19/edpb-identifies-challenges-hindering-the-full-implementation-of-the-right-to-erasure/): Brussels, 18 February – The European Data Protection Board (EDPB) has adopted a report on its Coordinated Enforcement Framework (CEF) action on the right to be forgotten (Art.17 GDPR).  The Board selected this topic as it is one of the most frequently exercised GDPR rights and one about which DPAs frequently receive complaints from individuals. The main objectives of this coordinated action ... Read more - [ECtHR - GREEN ALLIANCE v. BULGARIA - 6580/22](https://compliance-by-design.net/2026/02/19/ecthr-green-alliance-v-bulgaria-6580-22/): Xz: Created page with “{{COURTdecisionBOX |Jurisdiction=European Union |Court-BG-Color= |Courtlogo=Courts_logo1.png |Court_Abbrevation=ECtHR |Court_Original_Name=European Court of Human Rights |Court_English_Name=European Court of Human Rights |Court_With_Country=ECtHR (European Union) |Case_Number_Name=GREEN ALLIANCE v. BULGARIA – 6580/22 |ECLI= |Original_Source_Name_1=Bailii |Original_Source_Link_1=https://www.bailii.org/cgi-bin/format.cgi?doc=/eu/cases/ECHR/2026/30.html&query=(GDPR)#_Toc…” {{COURTdecisionBOX |Jurisdiction=European Union |Court-BG-Color= |Courtlogo=Courts_logo1.png |Court_Abbrevation=ECtHR |Court_Original_Name=European Court of Human Rights |Court_English_Name=European Court of Human Rights |Court_With_Country=ECtHR (European Union) |Case_Number_Name=GREEN ALLIANCE v. BULGARIA ... Read more - [ENISA publishes Cybersecurity Exercise Methodology](https://compliance-by-design.net/2026/02/18/enisa-publishes-cybersecurity-exercise-methodology/): On 16 February 2026, ENISA published “The ENISA Cybersecurity Exercise Methodology”—a practical, end-to-end framework for planning, running, and evaluating cybersecurity exercises, paired with a support toolkit of templates and guiding materials to help teams execute consistently. If you’re accountable for uptime, customer trust, and regulatory exposure, exercises are one of the fastest ways to turn “we have a plan” into “we ... Read more - [FTC Finalizes Consent Order in Boeing, Spirit Acquisition](https://compliance-by-design.net/2026/02/18/ftc-finalizes-consent-order-in-boeing-spirit-acquisition/): The Federal Trade Commission finalized a consent order involving the Boeing Company’s (Boeing) acquisition of Spirit AeroSystems Holdings, Inc. (Spirit). View Press Release - [Tribunale di Roma - N. R.G. 54031/2025](https://compliance-by-design.net/2026/02/18/tribunale-di-roma-n-r-g-54031-2025/): Lde: {{COURTdecisionBOX |Jurisdiction=Italy |Court-BG-Color= |Courtlogo=Courts_logo1.png |Court_Abbrevation=Tribunale di Roma |Court_Original_Name=Tribunale di Roma |Court_English_Name=Court of Rome |Court_With_Country=Tribunale di Roma (Italy) |Case_Number_Name=N. R.G. 54031/2025 |ECLI= |Original_Source_Name_1=Il Corriere del Giorno |Original_Source_Link_1=https://www.ilcorrieredelgiorno.it/wp-content/uploads/2026/01/CdG-REPORT_PRIVACY.pdf |Original_Source_Language_1=Italian |Original_Source_Language__Code_1=IT |Original_Source_Name_2= |Original_Source_Link_2= |Original_Source_Language_2= |Original_Source_Language__Code_2= |Date_Decided=22.01.2026 |Date_Published= |Year=2026 |GDPR_Article_1= |GDPR_Article_Link_1= |GDPR_Article_2= |GDPR_Article_Link_2= |EU_Law_Name_1= |EU_Law_Link_1= |EU_Law_Name_2= |EU_Law_Link_2= |National_Law_Name_1=Article 21 Italian Constitution |National_Law_Link_1=https://www.senato.it/documenti/repository/istituzione/costituzione_inglese.pdf |National_Law_Name_2= |National_Law_Link_2= |National_Law_Name_3= |National_Law_Link_3= |Party_Name_1= |Party_Link_1= ... Read more - [APD/GBA (Belgium) - 23/2026](https://compliance-by-design.net/2026/02/17/apd-gba-belgium-23-2026/): Dt: Created page with “{{DPAdecisionBOX |Jurisdiction=Belgium |DPA-BG-Color= |DPAlogo=LogoBE.png |DPA_Abbrevation=APD/GBA |DPA_With_Country=APD/GBA (Belgium) |Case_Number_Name=23/2026 |ECLI= |Original_Source_Name_1=APD |Original_Source_Link_1=https://www.gegevensbeschermingsautoriteit.be/publications/bevel-nr.-23-2026.pdf |Original_Source_Language_1=French |Original_Source_Language__Code_1=FR |Original_Source_Name_2= |Original_Source_Link_2= |Original_Source_Language_2= |Original_Source_Lan…” {{DPAdecisionBOX |Jurisdiction=Belgium |DPA-BG-Color= |DPAlogo=LogoBE.png |DPA_Abbrevation=APD/GBA |DPA_With_Country=APD/GBA (Belgium) |Case_Number_Name=23/2026 |ECLI= |Original_Source_Name_1=APD |Original_Source_Link_1=https://www.gegevensbeschermingsautoriteit.be/publications/bevel-nr.-23-2026.pdf |Original_Source_Language_1=French |Original_Source_Language__Code_1=FR |Original_Source_Name_2= |Original_Source_Link_2= |Original_Source_Language_2= |Original_Source_Language__Code_2= |Type=Complaint |Outcome=Upheld |Date_Started= |Date_Decided=02.02.2026 |Date_Published= |Year=2026 |Fine= |Currency= |GDPR_Article_1=Article 12 GDPR |GDPR_Article_Link_1=Article 12 GDPR |GDPR_Article_2=Article 17(1) GDPR ... Read more - [APD/GBA (Belgium) - 25/2026](https://compliance-by-design.net/2026/02/17/apd-gba-belgium-25-2026/): Dt: Created page with “{{DPAdecisionBOX |Jurisdiction=Belgium |DPA-BG-Color= |DPAlogo=LogoBE.png |DPA_Abbrevation=APD/GBA |DPA_With_Country=APD/GBA (Belgium) |Case_Number_Name=25/2026 |ECLI= |Original_Source_Name_1=APD |Original_Source_Link_1=https://www.gegevensbeschermingsautoriteit.be/publications/waarschuwing-en-berisping-nr.-25-2026.pdf |Original_Source_Language_1=French |Original_Source_Language__Code_1=FR |Original_Source_Name_2= |Original_Source_Link_2= |Original_Source_Language_2=…” {{DPAdecisionBOX |Jurisdiction=Belgium |DPA-BG-Color= |DPAlogo=LogoBE.png |DPA_Abbrevation=APD/GBA |DPA_With_Country=APD/GBA (Belgium) |Case_Number_Name=25/2026 |ECLI= |Original_Source_Name_1=APD |Original_Source_Link_1=https://www.gegevensbeschermingsautoriteit.be/publications/waarschuwing-en-berisping-nr.-25-2026.pdf |Original_Source_Language_1=French |Original_Source_Language__Code_1=FR |Original_Source_Name_2= |Original_Source_Link_2= |Original_Source_Language_2= |Original_Source_Language__Code_2= |Type=Complaint |Outcome=Upheld |Date_Started= |Date_Decided=05.02.2026 |Date_Published= |Year=2026 |Fine= |Currency= |GDPR_Article_1=Article 5(1)(f) GDPR |GDPR_Article_Link_1=Article 5 GDPR#1f |GDPR_Article_2= |GDPR_Article_Link_2= |GDPR_Article_3= |GDPR_Article_Link_3= ... Read more - [ANSPDCP (Romania) - 04.02.2026](https://compliance-by-design.net/2026/02/17/anspdcp-romania-04-02-2026/): Dt: Created page with “{{DPAdecisionBOX |Jurisdiction=Romania |DPA-BG-Color=background-color:#ffffff; |DPAlogo=LogoRO.jpg |DPA_Abbrevation=ANSPDCP |DPA_With_Country=ANSPDCP (Romania) |Case_Number_Name=04.02.2026 |ECLI= |Original_Source_Name_1=ANSPDCP |Original_Source_Link_1=https://www.dataprotection.ro/?page=Comunicat_Presa_04_02_2026&lang=ro |Original_Source_Language_1=Romanian |Original_Source_Language__Code_1=RO |Original_Source_Name_2= |Original_Source_Link_2= |Original_Source_Language…” {{DPAdecisionBOX |Jurisdiction=Romania |DPA-BG-Color=background-color:#ffffff; |DPAlogo=LogoRO.jpg |DPA_Abbrevation=ANSPDCP |DPA_With_Country=ANSPDCP (Romania) |Case_Number_Name=04.02.2026 |ECLI= |Original_Source_Name_1=ANSPDCP |Original_Source_Link_1=https://www.dataprotection.ro/?page=Comunicat_Presa_04_02_2026&lang=ro |Original_Source_Language_1=Romanian |Original_Source_Language__Code_1=RO |Original_Source_Name_2= |Original_Source_Link_2= |Original_Source_Language_2= |Original_Source_Language__Code_2= |Type=Investigation |Outcome=Violation Found |Date_Started= |Date_Decided= |Date_Published=04.02.2026 |Year= |Fine=50,899 |Currency=RON |GDPR_Article_1=Article 32(1)(b) GDPR |GDPR_Article_Link_1=Article 32 GDPR#1b |GDPR_Article_2=Article 32(2) GDPR ... Read more - [CC - 04.02.2026](https://compliance-by-design.net/2026/02/17/cc-04-02-2026/): Dt: Created page with “{{COURTdecisionBOX |Jurisdiction=Romania |Court-BG-Color= |Courtlogo=Courts_logo1.png |Court_Abbrevation=CC |Court_Original_Name=Curtea Constituțională |Court_English_Name=Constitutional Court |Court_With_Country=CC (Romania) |Case_Number_Name=04.02.2026 |ECLI= |Original_Source_Name_1=Constitutional Court |Original_Source_Link_1=https://www.ccr.ro/comunicat-de-presa-iii-4-februarie-2026/ |Original_Source_Language_1=Romanian |Original_Source_Language__Code_1=RO |Orig…” {{COURTdecisionBOX |Jurisdiction=Romania |Court-BG-Color= |Courtlogo=Courts_logo1.png |Court_Abbrevation=CC |Court_Original_Name=Curtea Constituțională |Court_English_Name=Constitutional Court |Court_With_Country=CC (Romania) |Case_Number_Name=04.02.2026 |ECLI= |Original_Source_Name_1=Constitutional Court |Original_Source_Link_1=https://www.ccr.ro/comunicat-de-presa-iii-4-februarie-2026/ |Original_Source_Language_1=Romanian |Original_Source_Language__Code_1=RO |Original_Source_Name_2= |Original_Source_Link_2= |Original_Source_Language_2= |Original_Source_Language__Code_2= |Date_Decided=04.02.2026 |Date_Published= |Year=2026 |GDPR_Article_1= |GDPR_Article_Link_1= |GDPR_Article_2= |GDPR_Article_Link_2= |EU_Law_Name_1=Article 7 EU ... Read more - [RVS - 202203874/1/A3](https://compliance-by-design.net/2026/02/17/rvs-202203874-1-a3/): Lde: Created page with “{{COURTdecisionBOX |Jurisdiction=Netherlands |Court-BG-Color= |Courtlogo=Courts_logo1.png |Court_Abbrevation=RVS |Court_Original_Name=Raad van State |Court_English_Name=Council of State |Court_With_Country=RVS (Netherlands) |Case_Number_Name=202203874/1/A3 |ECLI=ECLI:NL:RVS:2026:746 |Original_Source_Name_1=Rechtspraak |Original_Source_Link_1=https://uitspraken.rechtspraak.nl/details?id=ECLI:NL:RVS:2026:746&showbutton=true&keyword=avg&idx=7 |Original_Source_Language_1=…” {{COURTdecisionBOX |Jurisdiction=Netherlands |Court-BG-Color= |Courtlogo=Courts_logo1.png |Court_Abbrevation=RVS |Court_Original_Name=Raad van State |Court_English_Name=Council of State |Court_With_Country=RVS (Netherlands) |Case_Number_Name=202203874/1/A3 |ECLI=ECLI:NL:RVS:2026:746 |Original_Source_Name_1=Rechtspraak |Original_Source_Link_1=https://uitspraken.rechtspraak.nl/details?id=ECLI:NL:RVS:2026:746&showbutton=true&keyword=avg&idx=7 |Original_Source_Language_1=Dutch |Original_Source_Language__Code_1=NL |Original_Source_Name_2= |Original_Source_Link_2= |Original_Source_Language_2= |Original_Source_Language__Code_2= |Date_Decided=11.02.2026 |Date_Published=11.02.2026 |Year=2026 |GDPR_Article_1=Article 6(1)(b) GDPR |GDPR_Article_Link_1=Article 6 GDPR#1b |GDPR_Article_2= ... Read more - [Tietosuojavaltuutetun toimisto (Finland) - TSV/258/2022](https://compliance-by-design.net/2026/02/17/tietosuojavaltuutetun-toimisto-finland-tsv-258-2022/): Lde: Created page with “{{DPAdecisionBOX |Jurisdiction=Finland |DPA-BG-Color= |DPAlogo=LogoFI.png |DPA_Abbrevation=Tietosuojavaltuutetun toimisto |DPA_With_Country=Tietosuojavaltuutetun toimisto (Finland) |Case_Number_Name=TSV/258/2022 |ECLI= |Original_Source_Name_1=Finlex |Original_Source_Link_1=https://www.finlex.fi/fi/viranomaiset/tietosuojavaltuutettu/2026/2 |Original_Source_Language_1=Finnish |Original_Source_Language__Code_1=FI |Original_Source_Name_2= |Original_Source_Link_2= |Origina…” {{DPAdecisionBOX |Jurisdiction=Finland |DPA-BG-Color= |DPAlogo=LogoFI.png |DPA_Abbrevation=Tietosuojavaltuutetun toimisto |DPA_With_Country=Tietosuojavaltuutetun toimisto (Finland) |Case_Number_Name=TSV/258/2022 |ECLI= |Original_Source_Name_1=Finlex |Original_Source_Link_1=https://www.finlex.fi/fi/viranomaiset/tietosuojavaltuutettu/2026/2 |Original_Source_Language_1=Finnish |Original_Source_Language__Code_1=FI |Original_Source_Name_2= |Original_Source_Link_2= |Original_Source_Language_2= |Original_Source_Language__Code_2= |Type=Complaint |Outcome=Upheld |Date_Started= |Date_Decided=03.02.2026 |Date_Published= |Year=2026 |Fine= |Currency= |GDPR_Article_1=Article 12(2) GDPR |GDPR_Article_Link_1=Article 12 GDPR#2 ... Read more - [CA Paris - 25/04270](https://compliance-by-design.net/2026/02/17/ca-paris-25-04270/): Dt: Created page with “{{COURTdecisionBOX |Jurisdiction=France |Court-BG-Color= |Courtlogo=Courts_logo1.png |Court_Abbrevation=CA Paris |Court_Original_Name=Cour d’appel de Paris |Court_English_Name=Paris Court of Appeal |Court_With_Country=CA Paris (France) |Case_Number_Name=25/04270 |ECLI= |Original_Source_Name_1=Court de Cassation |Original_Source_Link_1=https://www.courdecassation.fr/decision/69450ecb75782d5f06ade99c |Original_Source_Language_1=French |Original_Source_Language__Code_1=F…” {{COURTdecisionBOX |Jurisdiction=France |Court-BG-Color= |Courtlogo=Courts_logo1.png |Court_Abbrevation=CA Paris |Court_Original_Name=Cour d’appel de Paris |Court_English_Name=Paris Court of Appeal |Court_With_Country=CA Paris (France) |Case_Number_Name=25/04270 |ECLI= |Original_Source_Name_1=Court de Cassation |Original_Source_Link_1=https://www.courdecassation.fr/decision/69450ecb75782d5f06ade99c |Original_Source_Language_1=French |Original_Source_Language__Code_1=FR |Original_Source_Name_2= ... Read more - [OLG Bamberg - 10 U 61/25 e](https://compliance-by-design.net/2026/02/17/olg-bamberg-10-u-61-25-e/): Lde: Created page with “{{COURTdecisionBOX |Jurisdiction=Germany |Court-BG-Color= |Courtlogo=Courts_logo1.png |Court_Abbrevation=OLG Bamberg |Court_Original_Name=Oberlandesgericht Bamberg |Court_English_Name=Higher Regional Court Bamberg |Court_With_Country=OLG Bamberg (Germany) |Case_Number_Name=10 U 61/25 e |ECLI= |Original_Source_Name_1=REWIS |Original_Source_Link_1=https://rewis.io/urteile/urteil/uaf-21-01-2026-10-u-6125-e/ |Original_Source_Language_1=German |Original_Source_Language__Co…” {{COURTdecisionBOX |Jurisdiction=Germany |Court-BG-Color= |Courtlogo=Courts_logo1.png |Court_Abbrevation=OLG Bamberg |Court_Original_Name=Oberlandesgericht Bamberg |Court_English_Name=Higher Regional Court Bamberg |Court_With_Country=OLG Bamberg (Germany) |Case_Number_Name=10 U 61/25 e |ECLI= |Original_Source_Name_1=REWIS |Original_Source_Link_1=https://rewis.io/urteile/urteil/uaf-21-01-2026-10-u-6125-e/ |Original_Source_Language_1=German |Original_Source_Language__Code_1=DE |Original_Source_Name_2= |Original_Source_Link_2= |Original_Source_Language_2= ... Read more - [VDAI (Lithuania) - Nr. 3R-219 (2.13-1.E)](https://compliance-by-design.net/2026/02/17/vdai-lithuania-nr-3r-219-2-13-1-e/): Lde: Created page with “{{DPAdecisionBOX |Jurisdiction=Lithuania |DPA-BG-Color= |DPAlogo= |DPA_Abbrevation=VDAI |DPA_With_Country=VDAI (Lithuania) |Case_Number_Name=Nr. 3R-219 (2.13-1.E) |ECLI= |Original_Source_Name_1=VDAI |Original_Source_Link_1=https://vdai.lrv.lt/public/canonical/1770722929/1274/2026-02-06%20Sprendimas%20Nr.%203R-219%20(2.13-1.E).pdf |Original_Source_Language_1=Lithuanian |Original_Source_Language__Code_1=LT |Original_Source_Name_2= |Original_Source_Link_2= |Original_Sour…” {{DPAdecisionBOX |Jurisdiction=Lithuania |DPA-BG-Color= |DPAlogo= |DPA_Abbrevation=VDAI |DPA_With_Country=VDAI (Lithuania) |Case_Number_Name=Nr. 3R-219 (2.13-1.E) |ECLI= |Original_Source_Name_1=VDAI |Original_Source_Link_1=https://vdai.lrv.lt/public/canonical/1770722929/1274/2026-02-06%20Sprendimas%20Nr.%203R-219%20(2.13-1.E).pdf |Original_Source_Language_1=Lithuanian |Original_Source_Language__Code_1=LT |Original_Source_Name_2= |Original_Source_Link_2= |Original_Source_Language_2= |Original_Source_Language__Code_2= |Type=Complaint |Outcome=Partly Upheld |Date_Started= |Date_Decided=06.02.2026 |Date_Published= |Year=2026 |Fine= |Currency= |GDPR_Article_1=Article 5(1)(f) GDPR |GDPR_Article_Link_1=Article 5 ... Read more - [LG Kassel - 10 O 81/24](https://compliance-by-design.net/2026/02/15/lg-kassel-10-o-81-24/): Avalang: Link fixed. {{COURTdecisionBOX |Jurisdiction=Germany |Court-BG-Color= |Courtlogo=Courts_logo1.png |Court_Abbrevation=LG Kassel |Court_Original_Name=Landgericht Kassel |Court_English_Name=Regional Court Kassel |Court_With_Country=LG Kassel (Germany) |Case_Number_Name=10 O 81/24 |ECLI=ECLI:DE:LGKASSE:2024:0906.10O81.24.0A |Original_Source_Name_1=GRUR-RS 2024, 25765 |Original_Source_Link_1=https://beck-online.beck.de/Dokument?vpath=bibdata%252Fents%252Fgrurrs%252F2024%252Fcont%252Fgrurrs.2024.25765.htm&pos=10&hlwords=on |Original_Source_Language_1=German |Original_Source_Language__Code_1=DE |Original_Source_Name_2= |Original_Source_Link_2= |Original_Source_Language_2= |Original_Source_Language__Code_2= |Date_Decided=06.09.2024 |Date_Published=18.10.2024 |Year=2024 |GDPR_Article_1=Article 6(1)(f) GDPR |GDPR_Article_Link_1=Article 6 GDPR#1f |GDPR_Article_2=Article 82(1) GDPR |GDPR_Article_Link_2=Article 82 GDPR#1 |GDPR_Article_3= |GDPR_Article_Link_3= |GDPR_Article_4= |GDPR_Article_Link_4= |EU_Law_Name_1= |EU_Law_Link_1= |EU_Law_Name_2= |EU_Law_Link_2= |National_Law_Name_1= ... Read more - [OGS Zagreb - Pn-877/2023-29](https://compliance-by-design.net/2026/02/14/ogs-zagreb-pn-877-2023-29/): Rp: Created page with “{{COURTdecisionBOX |Jurisdiction=Croatia |Court-BG-Color= |Courtlogo=Courts_logo1.png |Court_Abbrevation=OGS Zagreb |Court_Original_Name=Općinski građanski sud u Zagrebu |Court_English_Name=Municipal Civil Court in Zagreb |Court_With_Country=OGS Zagreb (Croatia) |Case_Number_Name=Pn-877/2023-29 |ECLI= |Original_Source_Name_1=OGS Zagreb |Original_Source_Link_1=https://odluke.sudovi.hr/Document/View?id=dbadb0f4-bf7a-41a9-b560-fd90e582056a&q=Op%25c4%2587a+uredba+o+za%2…” {{COURTdecisionBOX |Jurisdiction=Croatia |Court-BG-Color= |Courtlogo=Courts_logo1.png |Court_Abbrevation=OGS Zagreb |Court_Original_Name=Općinski građanski sud u Zagrebu |Court_English_Name=Municipal Civil Court in Zagreb |Court_With_Country=OGS Zagreb (Croatia) |Case_Number_Name=Pn-877/2023-29 |ECLI= |Original_Source_Name_1=OGS Zagreb |Original_Source_Link_1=https://odluke.sudovi.hr/Document/View?id=dbadb0f4-bf7a-41a9-b560-fd90e582056a&q=Op%25c4%2587a+uredba+o+za%25c5%25a1titi+podataka |Original_Source_Language_1=Croatian |Original_Source_Language__Code_1=HR |Original_Source_Name_2= ... Read more - [VG Osnabrück - 7 A 6/24](https://compliance-by-design.net/2026/02/14/vg-osnabruck-7-a-6-24/): Avalang: Fixed a link. {{COURTdecisionBOX |Jurisdiction=Germany |Court-BG-Color= |Courtlogo=Courts_logo1.png |Court_Abbrevation=VG Osnabrück |Court_Original_Name=Verwaltungsgericht Osnabrück |Court_English_Name=Administrative Court Osnabrück |Court_With_Country=VG Osnabrück (Germany) |Case_Number_Name=7 A 6/24 |ECLI=ECLI:DE::2026:0113.7A6.24.00 |Original_Source_Name_1=NI-VORIS |Original_Source_Link_1=https://voris.wolterskluwer-online.de/browse/document/cbc9e80e-da1a-4df7-b6fa-5efc902bc680 |Original_Source_Language_1=German |Original_Source_Language__Code_1=DE |Original_Source_Name_2= |Original_Source_Link_2= |Original_Source_Language_2= |Original_Source_Language__Code_2= |Date_Decided=13.01.2026 |Date_Published=12.02.2026 |Year=2026 |GDPR_Article_1=Article 12(3) GDPR |GDPR_Article_Link_1=Article 12 GDPR#3 |GDPR_Article_2=Article 15(1) GDPR |GDPR_Article_Link_2=Article 15 GDPR#1 |GDPR_Article_3=Article 15(3) GDPR |GDPR_Article_Link_3=Article 15 GDPR#3 |GDPR_Article_4= |GDPR_Article_Link_4= |GDPR_Article_5= |GDPR_Article_Link_5= ... Read more - [Making GDPR compliance easier through new initiatives: a key focus of the EDPB work programme 2026-2027](https://compliance-by-design.net/2026/02/14/making-gdpr-compliance-easier-through-new-initiatives-a-key-focus-of-the-edpb-work-programme-2026-2027/): Brussels, 13 February – The EDPB has recently adopted its work programme for 2026-2027,  which is grounded in the four pillars of the EDPB strategy 2024-2027. The work programme is based on the priorities set out in the EDPB strategy and it also takes into account the commitments made in the Helsinki Statement on enhanced ... Read more - [Information session on FRA’s Single Programming Document](https://compliance-by-design.net/2026/02/12/information-session-on-fras-single-programming-document/): Language English Press release 0 Secondary theme Systems National human rights systems and bodies EU Charter of Fundamental Rights EU Charter of Fundamental Rights Title VI: Justice Article 47 – Right to an effective remedy and to a fair trial Highlights Report / Paper / Summary 18 November 2021 Directive (EU) 2017/541 on combating terrorism ... Read more - [National Preventive Mechanisms discuss fundamental rights monitoring in migration](https://compliance-by-design.net/2026/02/12/national-preventive-mechanisms-discuss-fundamental-rights-monitoring-in-migration/): Language English Press release 0 Primary theme Asylum Asylum, migration and borders The increase in migration has presented opportunities and challenges across Europe. FRA encourages rights-compliant responses. We provide practical expertise on this complex issue. This includes regular updates, focus papers and toolkits. We also outline policy alternatives and best practices. Access to asylum Borders ... Read more - [AEPD (Spain) - EXP202406574](https://compliance-by-design.net/2026/02/12/aepd-spain-exp202406574/): Rp: Created page with “{{DPAdecisionBOX |Jurisdiction=Spain |DPA-BG-Color=background-color:#ffffff; |DPAlogo=LogoES.jpg |DPA_Abbrevation=AEPD |DPA_With_Country=AEPD (Spain) |Case_Number_Name=EXP202406574 |ECLI= |Original_Source_Name_1=AEPD |Original_Source_Link_1=https://www.aepd.es/documento/ps-00255-2024.pdf |Original_Source_Language_1=Spanish |Original_Source_Language__Code_1=ES |Original_Source_Name_2= |Original_Source_Link_2= |Original_Source_Language_2= |Original_Source_Language__Code…” {{DPAdecisionBOX |Jurisdiction=Spain |DPA-BG-Color=background-color:#ffffff; |DPAlogo=LogoES.jpg |DPA_Abbrevation=AEPD |DPA_With_Country=AEPD (Spain) |Case_Number_Name=EXP202406574 |ECLI= |Original_Source_Name_1=AEPD |Original_Source_Link_1=https://www.aepd.es/documento/ps-00255-2024.pdf |Original_Source_Language_1=Spanish |Original_Source_Language__Code_1=ES |Original_Source_Name_2= |Original_Source_Link_2= |Original_Source_Language_2= |Original_Source_Language__Code_2= |Type=Complaint |Outcome=Upheld |Date_Started=22.03.2024 |Date_Decided=10.10.2025 |Date_Published=12.02.2026 |Year=2025 |Fine=500 |Currency=EUR |GDPR_Article_1=Article 5(1)(a) GDPR |GDPR_Article_Link_1=Article 5 GDPR#1a |GDPR_Article_2=Article 6(1) GDPR ... Read more - [EDPB work programme 2026-2027: easing compliance and strengthening cooperation across the evolving digital landscape](https://compliance-by-design.net/2026/02/12/edpb-work-programme-2026-2027-easing-compliance-and-strengthening-cooperation-across-the-evolving-digital-landscape/): Brussels, 12 February – During its latest plenary, the EDPB adopted its work programme for 2026-2027.  This is the second work programme to support the implementation of the EDPB strategy 2024-2027*. The work programme is based on the priorities set out in the EDPB strategy and the needs identified as most critical for stakeholders. It ... Read more - [FTC Finalizes Consent Order in Adamas No-Hire Agreement Matter](https://compliance-by-design.net/2026/02/12/ftc-finalizes-consent-order-in-adamas-no-hire-agreement-matter/): The Federal Trade Commission finalized a consent order that requires building services contractor Adamas Amenity Services LLC (Adamas) and its affiliated businesses to cease their enforcement of no-hire agreements. The FTC’s action helps free American workers from labor practices that limit wage and job growth. View Press Release - [Federal Trade Commission Chairman Andrew N. Ferguson Issues Warning Letter to Apple CEO Tim Cook](https://compliance-by-design.net/2026/02/12/federal-trade-commission-chairman-andrew-n-ferguson-issues-warning-letter-to-apple-ceo-tim-cook/): Federal Trade Commission Chairman Andrew N. Ferguson issued a letter to Apple CEO Tim Cook, reminding him of Apple’s obligations to its customers.View Press Release - [VG Düsseldorf - 29 K 511/24](https://compliance-by-design.net/2026/02/12/vg-dusseldorf-29-k-511-24/): Avalang: Created page with “{{COURTdecisionBOX |Jurisdiction=Germany |Court-BG-Color= |Courtlogo=Courts_logo1.png |Court_Abbrevation=VG Düsseldorf |Court_Original_Name=Verwaltungsgericht Düsseldorf |Court_English_Name=Administrative Court Düsseldorf |Court_With_Country=VG Düsseldorf (Germany) |Case_Number_Name=29 K 511/24 |ECLI=ECLI:DE:VGD:2024:0325.29K511.24.00 |Original_Source_Name_1=Justiz NRW |Original_Source_Link_1=https://nrwe.justiz.nrw.de/ovgs/vg_duesseldorf/j2024/29_K_511_24_Urteil_…” {{COURTdecisionBOX |Jurisdiction=Germany |Court-BG-Color= |Courtlogo=Courts_logo1.png |Court_Abbrevation=VG Düsseldorf |Court_Original_Name=Verwaltungsgericht Düsseldorf |Court_English_Name=Administrative Court Düsseldorf |Court_With_Country=VG Düsseldorf (Germany) |Case_Number_Name=29 K 511/24 |ECLI=ECLI:DE:VGD:2024:0325.29K511.24.00 |Original_Source_Name_1=Justiz NRW |Original_Source_Link_1=https://nrwe.justiz.nrw.de/ovgs/vg_duesseldorf/j2024/29_K_511_24_Urteil_20240325.html |Original_Source_Language_1=German |Original_Source_Language__Code_1=DE |Original_Source_Name_2= |Original_Source_Link_2= |Original_Source_Language_2= |Original_Source_Language__Code_2= |Date_Decided=25.03.2024 |Date_Published=25.03.2024 |Year=2024 ... Read more - [AEPD (Spain) - EXP202306354 (PS/00312/2024)](https://compliance-by-design.net/2026/02/11/aepd-spain-exp202306354-ps-00312-2024/): Rp: /* Facts */ {{DPAdecisionBOX |Jurisdiction=Spain |DPA-BG-Color=background-color:#ffffff; |DPAlogo=LogoES.jpg |DPA_Abbrevation=AEPD |DPA_With_Country=AEPD (Spain) |Case_Number_Name=EXP202306354 (PS/00312/2024) |ECLI= |Original_Source_Name_1=AEPD |Original_Source_Link_1=https://www.aepd.es/documento/ps-00312-2024.pdf |Original_Source_Language_1=Spanish |Original_Source_Language__Code_1=ES |Original_Source_Name_2= |Original_Source_Link_2= |Original_Source_Language_2= |Original_Source_Language__Code_2= |Type=Complaint |Outcome=Upheld |Date_Started=03.09.2024 |Date_Decided= |Date_Published=15.01.2026 |Year= |Fine=150,000 |Currency=EUR |GDPR_Article_1=Article 5(1)(a) GDPR |GDPR_Article_Link_1=Article 5 GDPR#1a |GDPR_Article_2=Article 6(1) GDPR |GDPR_Article_Link_2=Article 6 GDPR#1 |GDPR_Article_3= |GDPR_Article_Link_3= |GDPR_Article_4= |GDPR_Article_Link_4= |EU_Law_Name_1= |EU_Law_Link_1= |EU_Law_Name_2= |EU_Law_Link_2= |National_Law_Name_1= |National_Law_Link_1= |National_Law_Name_2= |National_Law_Link_2= |Party_Name_1= ... Read more - [FTC Sends Checks to Consumers Who Bought Certain Products from Golden Sunrise Nutraceutical Between 2017 and 2020](https://compliance-by-design.net/2026/02/11/ftc-sends-checks-to-consumers-who-bought-certain-products-from-golden-sunrise-nutraceutical-between-2017-and-2020/): Eligible consumers who have not yet submitted a claim may submit one online through May 12, 2026 The Federal Trade Commission is sending checks to eligible consumers who bought certain products deceptively marketed by Golden Sunrise Nutraceutical, Inc. between July 2017 and July 2020. View Press Release - [Digital Omnibus: EDPB and EDPS support simplification and competitiveness while raising key concerns](https://compliance-by-design.net/2026/02/11/digital-omnibus-edpb-and-edps-support-simplification-and-competitiveness-while-raising-key-concerns/): Brussels, 11 February – The European Data Protection Board (EDPB) and the European Data Protection Supervisor (EDPS) have adopted a Joint Opinion on the Digital Omnibus Regulation proposal.* This proposal aims to simplify the EU’s digital regulatory framework, reduce administrative burden and enhance the competitiveness of European organisations. The EDPB and the EDPS focus on ... Read more - [VDAI (Lithuania) - Nr. 3R-206 (2.13-1 E)](https://compliance-by-design.net/2026/02/10/vdai-lithuania-nr-3r-206-2-13-1-e/): Lde: Created page with “{{DPAdecisionBOX |Jurisdiction=Lithuania |DPA-BG-Color= |DPAlogo= |DPA_Abbrevation=VDAI |DPA_With_Country=VDAI (Lithuania) |Case_Number_Name=Nr. 3R-206 (2.13-1 E) |ECLI= |Original_Source_Name_1=VDAI |Original_Source_Link_1=https://vdai.lrv.lt/public/canonical/1770620497/1266/2026-02-04%20Sprendimas%20Nr.%203R-206%20(2.13-1.E).pdf |Original_Source_Language_1=Lithuanian |Original_Source_Language__Code_1=LT |Original_Source_Name_2= |Original_Source_Link_2= |Original_Sour…” {{DPAdecisionBOX |Jurisdiction=Lithuania |DPA-BG-Color= |DPAlogo= |DPA_Abbrevation=VDAI |DPA_With_Country=VDAI (Lithuania) |Case_Number_Name=Nr. 3R-206 (2.13-1 E) |ECLI= |Original_Source_Name_1=VDAI |Original_Source_Link_1=https://vdai.lrv.lt/public/canonical/1770620497/1266/2026-02-04%20Sprendimas%20Nr.%203R-206%20(2.13-1.E).pdf |Original_Source_Language_1=Lithuanian |Original_Source_Language__Code_1=LT |Original_Source_Name_2= |Original_Source_Link_2= |Original_Source_Language_2= |Original_Source_Language__Code_2= |Type=Complaint |Outcome=Partly Upheld |Date_Started= |Date_Decided= |Date_Published= |Year= |Fine= |Currency= |GDPR_Article_1=Article 5(1)(a) GDPR ... Read more - [Garante per la protezione dei dati personali (Italy) - 10218564](https://compliance-by-design.net/2026/02/10/garante-per-la-protezione-dei-dati-personali-italy-10218564/): Lde: Created page with “{{DPAdecisionBOX |Jurisdiction=Italy |DPA-BG-Color=background-color:#095d7e; |DPAlogo=LogoIT.png |DPA_Abbrevation=Garante per la protezione dei dati personali |DPA_With_Country=Garante per la protezione dei dati personali (Italy) |Case_Number_Name=10218564 |ECLI= |Original_Source_Name_1=GPDP |Original_Source_Link_1=https://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/10218564 |Original_Source_Language_1=Italian |Original_Source_Language__Code_1=…” {{DPAdecisionBOX |Jurisdiction=Italy |DPA-BG-Color=background-color:#095d7e; |DPAlogo=LogoIT.png |DPA_Abbrevation=Garante per la protezione dei dati personali |DPA_With_Country=Garante per la protezione dei dati personali (Italy) |Case_Number_Name=10218564 |ECLI= |Original_Source_Name_1=GPDP |Original_Source_Link_1=https://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/10218564 |Original_Source_Language_1=Italian |Original_Source_Language__Code_1=IT |Original_Source_Name_2= ... Read more - [OLG Dresden - Az. 4 U 196/25](https://compliance-by-design.net/2026/02/10/olg-dresden-az-4-u-196-25/): Lde: {{COURTdecisionBOX |Jurisdiction=Germany |Court-BG-Color= |Courtlogo=Courts_logo1.png |Court_Abbrevation=OLG Dresden |Court_Original_Name=Oberlandesgericht Dresden |Court_English_Name=Higher Regional Court Dresden |Court_With_Country=OLG Dresden (Germany) |Case_Number_Name=Az. 4 U 196/25 |ECLI= |Original_Source_Name_1=beck-aktuell |Original_Source_Link_1=https://rsw.beck.de/aktuell/daily/meldung/detail/olg-dresden-daten-dsgvo-meta-schadensersatz-business-tools |Original_Source_Language_1=German |Original_Source_Language__Code_1=DE |Original_Source_Name_2= |Original_Source_Link_2= |Original_Source_Language_2= |Original_Source_Language__Code_2= |Date_Decided=03.02.2026 |Date_Published= |Year=2026 |GDPR_Article_1=Article 6 GDPR |GDPR_Article_Link_1=Article 6 GDPR |GDPR_Article_2=Article 82 GDPR |GDPR_Article_Link_2=Article 82 GDPR |GDPR_Article_3= |GDPR_Article_Link_3= |GDPR_Article_4= |GDPR_Article_Link_4= |EU_Law_Name_1= |EU_Law_Link_1= |EU_Law_Name_2= |EU_Law_Link_2= |National_Law_Name_1= |National_Law_Link_1= |National_Law_Name_2= ... Read more - [VG Düsseldorf - 29 K 9469/23](https://compliance-by-design.net/2026/02/10/vg-dusseldorf-29-k-9469-23/): Lde: Created page with “{{COURTdecisionBOX |Jurisdiction=Germany |Court-BG-Color= |Courtlogo=Courts_logo1.png |Court_Abbrevation=VG Düsseldorf |Court_Original_Name=Verwaltungsgericht Düsseldorf |Court_English_Name=Administrative Court Düsseldorf |Court_With_Country=VG Düsseldorf (Germany) |Case_Number_Name=29 K 9469/23 |ECLI= |Original_Source_Name_1=openjur |Original_Source_Link_1=https://openjur.de/u/2541967.html |Original_Source_Language_1=German |Original_Source_Language__Code_1=DE |O…” {{COURTdecisionBOX |Jurisdiction=Germany |Court-BG-Color= |Courtlogo=Courts_logo1.png |Court_Abbrevation=VG Düsseldorf |Court_Original_Name=Verwaltungsgericht Düsseldorf |Court_English_Name=Administrative Court Düsseldorf |Court_With_Country=VG Düsseldorf (Germany) |Case_Number_Name=29 K 9469/23 |ECLI= |Original_Source_Name_1=openjur |Original_Source_Link_1=https://openjur.de/u/2541967.html |Original_Source_Language_1=German |Original_Source_Language__Code_1=DE |Original_Source_Name_2= |Original_Source_Link_2= |Original_Source_Language_2= |Original_Source_Language__Code_2= |Date_Decided=28.01.2026 |Date_Published= ... Read more - [DSB (Austria) - 2025-0.789.117](https://compliance-by-design.net/2026/02/10/dsb-austria-2025-0-789-117/): Mba: /* Facts */ {{DPAdecisionBOX |Jurisdiction=Austria |DPA-BG-Color= |DPAlogo=LogoAT.png |DPA_Abbrevation=DSB |DPA_With_Country=DSB (Austria) |Case_Number_Name=2025-0.789.117 |ECLI=ECLI:AT:DSB:2025:2025.0.789.117 |Original_Source_Name_1=RIS |Original_Source_Link_1=https://www.ris.bka.gv.at/Dokument.wxe?ResultFunctionToken=0c680f0e-8f27-45c7-978f-508c23d5c6da&Position=1&SkipToDocumentPage=True&Abfrage=Dsk&Entscheidungsart=Undefined&Organ=Undefined&SucheNachRechtssatz=True&SucheNachText=True&GZ=&VonDatum=01.01.1990&BisDatum=&Norm=&ImRisSeitVonDatum=&ImRisSeitBisDatum=&ImRisSeit=EinerWoche&ResultPageSize=100&Suchworte=DSGVO&Dokumentnummer=DSBT_20251010_2025_0_789_117_00 |Original_Source_Language_1=German |Original_Source_Language__Code_1=DE |Original_Source_Name_2= |Original_Source_Link_2= |Original_Source_Language_2= |Original_Source_Language__Code_2= |Type=Complaint |Outcome=Rejected |Date_Started=16.09.2025 |Date_Decided=10.10.2025 |Date_Published=09.02.2026 |Year=2025 |Fine= |Currency= |GDPR_Article_1=Article 12(3) GDPR |GDPR_Article_Link_1=Article 12 GDPR#3 |GDPR_Article_2=Article 15 GDPR |GDPR_Article_Link_2=Article 15 GDPR |GDPR_Article_3=Article 27 GDPR |GDPR_Article_Link_3=Article 27 GDPR |GDPR_Article_4= |GDPR_Article_Link_4= |GDPR_Article_5= |GDPR_Article_Link_5= |EU_Law_Name_1= |EU_Law_Link_1= |EU_Law_Name_2= |EU_Law_Link_2= ... Read more - [SN - I NO 14/23](https://compliance-by-design.net/2026/02/10/sn-i-no-14-23/): Rp: Created page with “{{COURTdecisionBOX |Jurisdiction=Poland |Court-BG-Color= |Courtlogo=Courts_logo1.png |Court_Abbrevation=SN |Court_Original_Name=Sąd Najwyższy |Court_English_Name=Supreme Court of Poland |Court_With_Country=SN (Poland) |Case_Number_Name=I NO 14/23 |ECLI= |Original_Source_Name_1=SN |Original_Source_Link_1=https://www.sn.pl/sites/orzecznictwo/OrzeczeniaHTML/i%20no%2014-23.docx.html |Original_Source_Language_1=Polish |Original_Source_Language__Code_1=PL |Original_Source…” {{COURTdecisionBOX |Jurisdiction=Poland |Court-BG-Color= |Courtlogo=Courts_logo1.png |Court_Abbrevation=SN |Court_Original_Name=Sąd Najwyższy |Court_English_Name=Supreme Court of Poland |Court_With_Country=SN (Poland) |Case_Number_Name=I NO 14/23 |ECLI= |Original_Source_Name_1=SN |Original_Source_Link_1=https://www.sn.pl/sites/orzecznictwo/OrzeczeniaHTML/i%20no%2014-23.docx.html |Original_Source_Language_1=Polish |Original_Source_Language__Code_1=PL |Original_Source_Name_2= |Original_Source_Link_2= |Original_Source_Language_2= |Original_Source_Language__Code_2= |Date_Decided= |Date_Published= |Year= |GDPR_Article_1=Article ... Read more - [Rb. Midden-Nederland - UTR 23/4785](https://compliance-by-design.net/2026/02/10/rb-midden-nederland-utr-23-4785/): Anisuzmeyan: Created page with “{{COURTdecisionBOX |Jurisdiction=Netherlands |Court-BG-Color= |Courtlogo=Courts_logo1.png |Court_Abbrevation=Rb. Midden-Nederland |Court_Original_Name=Rechtbank Midden-Nederland |Court_English_Name=District Court Midden-Nederland |Court_With_Country=Rb. Midden-Nederland (Netherlands) |Case_Number_Name=UTR 23/4785 |ECLI=ECLI:NL:RBMNE:2024:7801 |Original_Source_Name_1=Rechtspraak.nl |Original_Source_Link_1=https://uitspraken.rechtspraak.nl/details?id=ECLI:NL:RBMNE:2024:…” {{COURTdecisionBOX |Jurisdiction=Netherlands |Court-BG-Color= |Courtlogo=Courts_logo1.png |Court_Abbrevation=Rb. Midden-Nederland |Court_Original_Name=Rechtbank Midden-Nederland |Court_English_Name=District Court Midden-Nederland |Court_With_Country=Rb. Midden-Nederland (Netherlands) |Case_Number_Name=UTR 23/4785 |ECLI=ECLI:NL:RBMNE:2024:7801 |Original_Source_Name_1=Rechtspraak.nl |Original_Source_Link_1=https://uitspraken.rechtspraak.nl/details?id=ECLI:NL:RBMNE:2024:7801&showbutton=true&keyword=avg&idx=5 |Original_Source_Language_1=Dutch |Original_Source_Language__Code_1=NL |Original_Source_Name_2= |Original_Source_Link_2= |Original_Source_Language_2= |Original_Source_Language__Code_2= |Date_Decided=31.12.2024 |Date_Published=04.02.2026 |Year=2024 |GDPR_Article_1=Article 86 GDPR |GDPR_Article_Link_1=Article ... Read more - [DSB (Austria) - 2025-0.813.131](https://compliance-by-design.net/2026/02/10/dsb-austria-2025-0-813-131/): Mba: /* Facts */ {{DPAdecisionBOX |Jurisdiction=Austria |DPA-BG-Color= |DPAlogo=LogoAT.png |DPA_Abbrevation=DSB |DPA_With_Country=DSB (Austria) |Case_Number_Name=2025-0.813.131 |ECLI=DSBT_20251010_2025_0_813_131_00 |Original_Source_Name_1=RIS |Original_Source_Link_1=https://www.ris.bka.gv.at/Dokument.wxe?ResultFunctionToken=71798ae9-5897-4ab1-893d-25b7443a8397&Position=1&SkipToDocumentPage=True&Abfrage=Dsk&Entscheidungsart=Undefined&Organ=Undefined&SucheNachRechtssatz=True&SucheNachText=True&GZ=&VonDatum=01.01.1990&BisDatum=&Norm=&ImRisSeitVonDatum=&ImRisSeitBisDatum=&ImRisSeit=EinerWoche&ResultPageSize=100&Suchworte=DSGVO&Dokumentnummer=DSBT_20251010_2025_0_813_131_00 |Original_Source_Language_1=German |Original_Source_Language__Code_1=DE |Original_Source_Name_2= |Original_Source_Link_2= |Original_Source_Language_2= |Original_Source_Language__Code_2= |Type=Complaint |Outcome=Upheld |Date_Started=19.09.2025 |Date_Decided=10.10.2025 |Date_Published=09.02.2026 |Year=2025 |Fine= |Currency= |GDPR_Article_1=Article 5 GDPR |GDPR_Article_Link_1=Article 5 GDPR |GDPR_Article_2= |GDPR_Article_Link_2= |GDPR_Article_3= |GDPR_Article_Link_3= |EU_Law_Name_1= |EU_Law_Link_1= |EU_Law_Name_2= |EU_Law_Link_2= |National_Law_Name_1=§1 DSG |National_Law_Link_1=https://www.ris.bka.gv.at/NormDokument.wxe?Abfrage=Bundesnormen&Gesetzesnummer=10001597&Artikel=1&Paragraf=1&Anlage=&Uebergangsrecht= |National_Law_Name_2= |National_Law_Link_2= |National_Law_Name_3= |National_Law_Link_3= |Party_Name_1= |Party_Link_1= |Party_Name_2= |Party_Link_2= |Appeal_To_Body= ... Read more - [FTC Reminds Data Brokers of Their Obligations to Comply with PADFAA](https://compliance-by-design.net/2026/02/09/ftc-reminds-data-brokers-of-their-obligations-to-comply-with-padfaa/): The law prohibits data brokers from providing personally identifiable sensitive data about Americans to any foreign adversary The Federal Trade Commission sent letters to 13 data brokers warning them of their responsibility to comply with the Protecting Americans’ Data from Foreign Adversaries Act of 2024 (PADFAA). View Press Release - [Datatilsynet (Denmark) - 2025-431-0053](https://compliance-by-design.net/2026/02/09/datatilsynet-denmark-2025-431-0053/): Xz: {{DPAdecisionBOX |Jurisdiction=Denmark |DPA-BG-Color= |DPAlogo=LogoDK.png |DPA_Abbrevation=Datatilsynet |DPA_With_Country=Datatilsynet (Denmark) |Case_Number_Name=2025-431-0053 |ECLI= |Original_Source_Name_1=Datatilsynet |Original_Source_Link_1=https://www.datatilsynet.dk/afgoerelser/afgoerelser/2026/jan/datatilsynet-giver-51-kommuner-alvorlig-kritik-i-chromebook-sag |Original_Source_Language_1=Danish |Original_Source_Language__Code_1=DA |Original_Source_Name_2= |Original_Source_Link_2= |Original_Source_Language_2= |Original_Source_Language__Code_2= |Type=Investigation |Outcome=Other Outcome |Date_Started=10.07.2024 |Date_Decided=29.01.2026 |Date_Published=29.01.2026 |Year=2026 |Fine= |Currency= |GDPR_Article_1=Article 5 GDPR |GDPR_Article_Link_1=Article 5 GDPR |GDPR_Article_2=Article 6 GDPR |GDPR_Article_Link_2=Article 6 GDPR |GDPR_Article_3=Article 24 GDPR |GDPR_Article_Link_3=Article 24 GDPR |GDPR_Article_4=Article 28 GDPR |GDPR_Article_Link_4=Article 28 GDPR |GDPR_Article_5= |GDPR_Article_Link_5= |GDPR_Article_6= |GDPR_Article_Link_6= ... Read more - [OVG Saarlouis - 2 A 165/24](https://compliance-by-design.net/2026/02/07/ovg-saarlouis-2-a-165-24/): Avalang: Created page with “{{COURTdecisionBOX |Jurisdiction=Germany |Court-BG-Color= |Courtlogo=Courts_logo1.png |Court_Abbrevation=OVG Saarlouis |Court_Original_Name=Oberverwaltungsgericht des Saarlandes |Court_English_Name=Superior Administrative Court Saarlouis |Court_With_Country=OVG Saarlouis (Germany) |Case_Number_Name=2 A 165/24 |ECLI=ECLI:DE:OVGSL:2025:0513.2A165.24.00 |Original_Source_Name_1=Bürgerservice Saarland |Original_Source_Link_1=https://recht.saarland.de/bssl/document/NJRE001…” {{COURTdecisionBOX |Jurisdiction=Germany |Court-BG-Color= |Courtlogo=Courts_logo1.png |Court_Abbrevation=OVG Saarlouis |Court_Original_Name=Oberverwaltungsgericht des Saarlandes |Court_English_Name=Superior Administrative Court Saarlouis |Court_With_Country=OVG Saarlouis (Germany) |Case_Number_Name=2 A 165/24 |ECLI=ECLI:DE:OVGSL:2025:0513.2A165.24.00 |Original_Source_Name_1=Bürgerservice Saarland |Original_Source_Link_1=https://recht.saarland.de/bssl/document/NJRE001609667 |Original_Source_Language_1=German |Original_Source_Language__Code_1=DE |Original_Source_Name_2= |Original_Source_Link_2= |Original_Source_Language_2= ... Read more - [FTC is Sending Nearly $23 Million to Consumers Who Invested in the Deceptive Sanctuary Belize and Kanantik Real Estate Development Schemes](https://compliance-by-design.net/2026/02/06/ftc-is-sending-nearly-23-million-to-consumers-who-invested-in-the-deceptive-sanctuary-belize-and-kanantik-real-estate-development-schemes/): Sanctuary Belize deceived consumers about its luxury real estate investment scheme The Federal Trade Commission is returning nearly $23 million to consumers nationwide who bought deceptively marketed overseas real estate lots in what the sellers pitched as Sanctuary Belize, a supposed luxury development in southern, coastal Belize, as well as its nearby sister development, Kanantik. View ... Read more - [FTC Issues Second Report to Congress on its Work to Fight Ransomware and other Cyberattacks](https://compliance-by-design.net/2026/02/06/ftc-issues-second-report-to-congress-on-its-work-to-fight-ransomware-and-other-cyberattacks/): The Federal Trade Commission issued a second report to Congress detailing the agency’s efforts to fight against ransomware and other cyberattacks. View Press Release - [APD/GBA (Belgium) - 10/2026](https://compliance-by-design.net/2026/02/06/apd-gba-belgium-10-2026/): Dt: {{DPAdecisionBOX |Jurisdiction=Belgium |DPA-BG-Color= |DPAlogo=LogoBE.png |DPA_Abbrevation=APD/GBA |DPA_With_Country=APD/GBA (Belgium) |Case_Number_Name=10/2026 |ECLI= |Original_Source_Name_1=APD |Original_Source_Link_1=https://www.gegevensbeschermingsautoriteit.be/publications/waarschuwing-nr.-10-2026.pdf |Original_Source_Language_1=Dutch |Original_Source_Language__Code_1=NL |Original_Source_Name_2= |Original_Source_Link_2= |Original_Source_Language_2= |Original_Source_Language__Code_2= |Type=Complaint |Outcome=Upheld |Date_Started= |Date_Decided=27.01.2026 |Date_Published= |Year=2026 |Fine= |Currency= |GDPR_Article_1=Article 5(2) GDPR |GDPR_Article_Link_1=Article 5 GDPR#2 |GDPR_Article_2=Article 6(1) GDPR |GDPR_Article_Link_2=Article 6 GDPR#1 |GDPR_Article_3=Article 24(1) GDPR |GDPR_Article_Link_3=Article 24 GDPR#1 |GDPR_Article_4= |GDPR_Article_Link_4= |GDPR_Article_5= |GDPR_Article_Link_5= |EU_Law_Name_1= |EU_Law_Link_1= |EU_Law_Name_2= |EU_Law_Link_2= |National_Law_Name_1= |National_Law_Link_1= |National_Law_Name_2= ... Read more - [APD/GBA (Belgium) - 11/2026](https://compliance-by-design.net/2026/02/06/apd-gba-belgium-11-2026/): Dt: Created page with “{{DPAdecisionBOX |Jurisdiction=Belgium |DPA-BG-Color= |DPAlogo=LogoBE.png |DPA_Abbrevation=APD/GBA |DPA_With_Country=APD/GBA (Belgium) |Case_Number_Name=11/2026 |ECLI= |Original_Source_Name_1=APD |Original_Source_Link_1=https://www.gegevensbeschermingsautoriteit.be/publications/waarschuwing-nr.-11-2026.pdf |Original_Source_Language_1=Dutch |Original_Source_Language__Code_1=NL |Original_Source_Name_2= |Original_Source_Link_2= |Original_Source_Language_2= |Original_Sour…” {{DPAdecisionBOX |Jurisdiction=Belgium |DPA-BG-Color= |DPAlogo=LogoBE.png |DPA_Abbrevation=APD/GBA |DPA_With_Country=APD/GBA (Belgium) |Case_Number_Name=11/2026 |ECLI= |Original_Source_Name_1=APD |Original_Source_Link_1=https://www.gegevensbeschermingsautoriteit.be/publications/waarschuwing-nr.-11-2026.pdf |Original_Source_Language_1=Dutch |Original_Source_Language__Code_1=NL |Original_Source_Name_2= |Original_Source_Link_2= |Original_Source_Language_2= |Original_Source_Language__Code_2= |Type=Complaint |Outcome=Upheld |Date_Started= |Date_Decided=27.01.2026 |Date_Published= |Year=2026 |Fine= |Currency= |GDPR_Article_1=Article 5(1)(c) GDPR |GDPR_Article_Link_1=Article 5 GDPR#1c |GDPR_Article_2=Article 6(1)(c) GDPR ... Read more - [ANSPDCP (Romania) - 30.01.2026](https://compliance-by-design.net/2026/02/06/anspdcp-romania-30-01-2026/): Dt: Created page with “{{DPAdecisionBOX |Jurisdiction=Romania |DPA-BG-Color=background-color:#ffffff; |DPAlogo=LogoRO.jpg |DPA_Abbrevation=ANSPDCP |DPA_With_Country=ANSPDCP (Romania) |Case_Number_Name=30.01.2026 |ECLI= |Original_Source_Name_1=ANSPDCP |Original_Source_Link_1=https://www.dataprotection.ro/?page=Comunicat_Presa_30.01.2026&lang=ro |Original_Source_Language_1=Romanian |Original_Source_Language__Code_1=RO |Original_Source_Name_2= |Original_Source_Link_2= |Original_Source_Language…” {{DPAdecisionBOX |Jurisdiction=Romania |DPA-BG-Color=background-color:#ffffff; |DPAlogo=LogoRO.jpg |DPA_Abbrevation=ANSPDCP |DPA_With_Country=ANSPDCP (Romania) |Case_Number_Name=30.01.2026 |ECLI= |Original_Source_Name_1=ANSPDCP |Original_Source_Link_1=https://www.dataprotection.ro/?page=Comunicat_Presa_30.01.2026&lang=ro |Original_Source_Language_1=Romanian |Original_Source_Language__Code_1=RO |Original_Source_Name_2= |Original_Source_Link_2= |Original_Source_Language_2= |Original_Source_Language__Code_2= |Type=Complaint |Outcome=Upheld |Date_Started= |Date_Decided= |Date_Published=30.01.2026 |Year= |Fine=50,890 |Currency=RON |GDPR_Article_1=Article 5 GDPR |GDPR_Article_Link_1=Article 5 GDPR |GDPR_Article_2=Article 6 GDPR |GDPR_Article_Link_2=Article ... Read more - [ANSPDCP (Romania) - 05.02.2026](https://compliance-by-design.net/2026/02/06/anspdcp-romania-05-02-2026/): Dt: Created page with “{{DPAdecisionBOX |Jurisdiction=Romania |DPA-BG-Color=background-color:#ffffff; |DPAlogo=LogoRO.jpg |DPA_Abbrevation=ANSPDCP |DPA_With_Country=ANSPDCP (Romania) |Case_Number_Name=05.02.2026 |ECLI= |Original_Source_Name_1=ANSPDCP |Original_Source_Link_1=https://www.dataprotection.ro/?page=Comunicat_Presa_05_02_2026&lang=ro |Original_Source_Language_1=Romanian |Original_Source_Language__Code_1=RO |Original_Source_Name_2= |Original_Source_Link_2= |Original_Source_Language…” {{DPAdecisionBOX |Jurisdiction=Romania |DPA-BG-Color=background-color:#ffffff; |DPAlogo=LogoRO.jpg |DPA_Abbrevation=ANSPDCP |DPA_With_Country=ANSPDCP (Romania) |Case_Number_Name=05.02.2026 |ECLI= |Original_Source_Name_1=ANSPDCP |Original_Source_Link_1=https://www.dataprotection.ro/?page=Comunicat_Presa_05_02_2026&lang=ro |Original_Source_Language_1=Romanian |Original_Source_Language__Code_1=RO |Original_Source_Name_2= |Original_Source_Link_2= |Original_Source_Language_2= |Original_Source_Language__Code_2= |Type=Complaint |Outcome=Upheld |Date_Started= |Date_Decided= |Date_Published=05.02.2026 |Year= |Fine=101,794 |Currency=RON |GDPR_Article_1=Article 58(1)(a) GDPR |GDPR_Article_Link_1=Article 58 GDPR#1a |GDPR_Article_2=Article 83(5)(e) GDPR |GDPR_Article_Link_2=Article ... Read more - [ICO (UK) - Staines Health Group](https://compliance-by-design.net/2026/02/06/ico-uk-staines-health-group/): Dt: Created page with “{{DPAdecisionBOX |Jurisdiction=United Kingdom |DPA-BG-Color=background-color:#023868; |DPAlogo=LogoUK.png |DPA_Abbrevation=ICO |DPA_With_Country=ICO (UK) |Case_Number_Name=Staines Health Group |ECLI= |Original_Source_Name_1=ICO |Original_Source_Link_1=https://ico.org.uk/media2/ydzp0vgm/20251216-staines-health-group-reprimand.pdf |Original_Source_Language_1=English |Original_Source_Language__Code_1=EN |Original_Source_Name_2= |Original_Source_Link_2= |Original_Source_L…” {{DPAdecisionBOX |Jurisdiction=United Kingdom |DPA-BG-Color=background-color:#023868; |DPAlogo=LogoUK.png |DPA_Abbrevation=ICO |DPA_With_Country=ICO (UK) |Case_Number_Name=Staines Health Group |ECLI= |Original_Source_Name_1=ICO |Original_Source_Link_1=https://ico.org.uk/media2/ydzp0vgm/20251216-staines-health-group-reprimand.pdf |Original_Source_Language_1=English |Original_Source_Language__Code_1=EN |Original_Source_Name_2= |Original_Source_Link_2= |Original_Source_Language_2= |Original_Source_Language__Code_2= |Type=Complaint |Outcome=Upheld |Date_Started= |Date_Decided=16.12.2025 |Date_Published= |Year=2025 |Fine= |Currency= |GDPR_Article_1= |GDPR_Article_Link_1= |GDPR_Article_2= |GDPR_Article_Link_2= ... Read more - [FRA stakeholder feedback survey 2025 now open](https://compliance-by-design.net/2026/02/05/fra-stakeholder-feedback-survey-2025-now-open/): Language English Press release 0 Primary theme Systems Support for human rights systems and defenders Many organisations work to defend your rights. We help their efforts with independent evidence, advice and expertise. We support their frontline work. And we shine a light on potential risks and priority areas. Together we make your rights a reality. ... Read more - [Cooperation in action with the EEA/Norway Grants](https://compliance-by-design.net/2026/02/05/cooperation-in-action-with-the-eea-norway-grants/): Language English Press release 0 Secondary theme Equality Roma EU Charter of Fundamental Rights EU Charter of Fundamental Rights Title III: Equality Article 21 – Non-discrimination EU Charter of Fundamental Rights Title III: Equality Article 22 – Cultural, religious and linguistic diversity Highlights Report / Paper / Summary 18 November 2021 Directive (EU) 2017/541 on ... Read more - [Fundamental rights awareness for Europol guest officers](https://compliance-by-design.net/2026/02/05/fundamental-rights-awareness-for-europol-guest-officers/): Language English Press release 0 Secondary theme Asylum Borders and information systems EU Charter of Fundamental Rights EU Charter of Fundamental Rights Title II: Freedoms Article 19 – Protection in the event of removal, expulsion or extradition EU Charter of Fundamental Rights Title II: Freedoms Article 8 – Protection of personal data Highlights Report / ... Read more - [Fundamental rights training when using biometrics](https://compliance-by-design.net/2026/02/05/fundamental-rights-training-when-using-biometrics/): Language English Press release 0 Secondary theme Asylum Borders and information systems EU Charter of Fundamental Rights EU Charter of Fundamental Rights Title II: Freedoms Article 19 – Protection in the event of removal, expulsion or extradition EU Charter of Fundamental Rights Title II: Freedoms Article 8 – Protection of personal data Highlights Report / ... Read more - [Ss. v Bratislave - BA-1S/27/2022](https://compliance-by-design.net/2026/02/05/ss-v-bratislave-ba-1s-27-2022/): Rp: Created page with “{{COURTdecisionBOX |Jurisdiction=Slovakia |Court-BG-Color= |Courtlogo=Courts_logo1.png |Court_Abbrevation=Ss. v Bratislave |Court_Original_Name=Správny súd v Bratislave |Court_English_Name=Administrative Court in Bratislava |Court_With_Country=Ss. v Bratislave (Slovakia) |Case_Number_Name=BA-1S/27/2022 |ECLI= |Original_Source_Name_1=Ss. v Bratislave |Original_Source_Link_1=https://www.justice.gov.sk/sudy-a-rozhodnutia/sudy/rozhodnutia/d4a100a9-a16a-4740-a4af-f0113e4…” {{COURTdecisionBOX |Jurisdiction=Slovakia |Court-BG-Color= |Courtlogo=Courts_logo1.png |Court_Abbrevation=Ss. v Bratislave |Court_Original_Name=Správny súd v Bratislave |Court_English_Name=Administrative Court in Bratislava |Court_With_Country=Ss. v Bratislave (Slovakia) |Case_Number_Name=BA-1S/27/2022 |ECLI= |Original_Source_Name_1=Ss. v Bratislave |Original_Source_Link_1=https://www.justice.gov.sk/sudy-a-rozhodnutia/sudy/rozhodnutia/d4a100a9-a16a-4740-a4af-f0113e4da313:54750841-b15b-4069-8148-78010d7c1036 |Original_Source_Language_1=Slovak ... Read more - [BAG - 8 AZR 91/22](https://compliance-by-design.net/2026/02/04/bag-8-azr-91-22/): Avalang: Created page with “{{COURTdecisionBOX |Jurisdiction=Germany |Court-BG-Color= |Courtlogo=Courts_logo1.png |Court_Abbrevation=BAG |Court_Original_Name=Bundesarbeitsgericht |Court_English_Name=Federal Labour Court |Court_With_Country=BAG (Germany) |Case_Number_Name=8 AZR 91/22 |ECLI= |Original_Source_Name_1=openJur |Original_Source_Link_1=https://openjur.de/u/2496033.html |Original_Source_Language_1=German |Original_Source_Language__Code_1=DE |Original_Source_Name_2= |Original_Source_Link_…” {{COURTdecisionBOX |Jurisdiction=Germany |Court-BG-Color= |Courtlogo=Courts_logo1.png |Court_Abbrevation=BAG |Court_Original_Name=Bundesarbeitsgericht |Court_English_Name=Federal Labour Court |Court_With_Country=BAG (Germany) |Case_Number_Name=8 AZR 91/22 |ECLI= |Original_Source_Name_1=openJur |Original_Source_Link_1=https://openjur.de/u/2496033.html |Original_Source_Language_1=German |Original_Source_Language__Code_1=DE |Original_Source_Name_2= |Original_Source_Link_2= |Original_Source_Language_2= |Original_Source_Language__Code_2= |Date_Decided=20.06.2024 |Date_Published=20.06.2024 |Year=2024 |GDPR_Article_1=Article 15(1) GDPR |GDPR_Article_Link_1=Article ... Read more - [FTC Secures Landmark Settlement with Express Scripts to Lower Drug Costs for American Patients](https://compliance-by-design.net/2026/02/04/ftc-secures-landmark-settlement-with-express-scripts-to-lower-drug-costs-for-american-patients/): Settlement resolves FTC lawsuit alleging that Express Scripts’ conduct resulted in artificially inflated insulin drug prices The Federal Trade Commission secured a landmark settlement with one of the nation’s largest pharmacy benefit managers (“PBMs”), Express Scripts, Inc., and its affiliated entities (collectively “ESI”).View Press Release - [CNIL (France) - SAN–2026-003](https://compliance-by-design.net/2026/02/04/cnil-france-san-2026-003/): Xz: {{DPAdecisionBOX |Jurisdiction=France |DPA-BG-Color= |DPAlogo=LogoFR.png |DPA_Abbrevation=CNIL |DPA_With_Country=CNIL (France) |Case_Number_Name=SAN–2026-003 |ECLI= |Original_Source_Name_1=CNIL |Original_Source_Link_1=https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000053408671?page=1&pageSize=10&query=2016%252F679&searchField=ALL&searchType=ALL&sortValue=DATE_DECISION_DESC&tab_selection=cnil&typePagination=DEFAULT |Original_Source_Language_1=French |Original_Source_Language__Code_1=FR |Original_Source_Name_2= |Original_Source_Link_2= |Original_Source_Language_2= |Original_Source_Language__Code_2= |Type=Investigation |Outcome=Violation Found |Date_Started= |Date_Decided=22.01.2026 |Date_Published=29.01.2026 |Year=2026 |Fine=5,000,000 |Currency=EUR |GDPR_Article_1=Article 32 GDPR |GDPR_Article_Link_1=Article 32 GDPR |GDPR_Article_2= |GDPR_Article_Link_2= |GDPR_Article_3= |GDPR_Article_Link_3= |EU_Law_Name_1= |EU_Law_Link_1= |EU_Law_Name_2= |EU_Law_Link_2= |National_Law_Name_1= |National_Law_Link_1= |National_Law_Name_2= |National_Law_Link_2= |Party_Name_1=FRANCE TRAVAIL |Party_Link_1=https://www.francetravail.fr/accueil/ |Party_Name_2= |Party_Link_2= |Party_Name_3= |Party_Link_3= |Appeal_To_Body= |Appeal_To_Case_Number_Name= |Appeal_To_Status=Unknown ... Read more - [KHO - 391/2024](https://compliance-by-design.net/2026/02/04/kho-391-2024/): Lde: Created page with “{{COURTdecisionBOX |Jurisdiction=Finland |Court-BG-Color= |Courtlogo=Courts_logo1.png |Court_Abbrevation=KHO |Court_Original_Name=Korkein hallinto-oikeus |Court_English_Name=Supreme Administrative Court |Court_With_Country=KHO (Finland) |Case_Number_Name=391/2024 |ECLI=ECLI:FI:KHO:2025:86 |Original_Source_Name_1=Finlex |Original_Source_Link_1=https://www.finlex.fi/fi/oikeuskaytanto/korkein-hallinto-oikeus/ennakkopaatokset/2025/86?language=fin&highlightId=972199&highli…” {{COURTdecisionBOX |Jurisdiction=Finland |Court-BG-Color= |Courtlogo=Courts_logo1.png |Court_Abbrevation=KHO |Court_Original_Name=Korkein hallinto-oikeus |Court_English_Name=Supreme Administrative Court |Court_With_Country=KHO (Finland) |Case_Number_Name=391/2024 |ECLI=ECLI:FI:KHO:2025:86 |Original_Source_Name_1=Finlex |Original_Source_Link_1=https://www.finlex.fi/fi/oikeuskaytanto/korkein-hallinto-oikeus/ennakkopaatokset/2025/86?language=fin&highlightId=972199&highlightParams=%257B%2522type%2522%253A%2522EXTENDED%2522%252C%2522and%2522%253A%2522Yleinen+tietosuoja-asetus%2522%252C%2522or%2522%253A%2522%2522%252C%2522not%2522%253A%2522%2522%252C%2522exact%2522%253A%2522%2522%257D |Original_Source_Language_1=Finnish |Original_Source_Language__Code_1=FI |Original_Source_Name_2= |Original_Source_Link_2= |Original_Source_Language_2= |Original_Source_Language__Code_2= |Date_Decided=29.12.2025 |Date_Published= |Year=2025 |GDPR_Article_1=Article 9 GDPR |GDPR_Article_Link_1=Article 9 GDPR |GDPR_Article_2=Article 9(2)(g) GDPR |GDPR_Article_Link_2=Article ... Read more - [Rb. Midden-Nederland - UTR 25/2541](https://compliance-by-design.net/2026/02/04/rb-midden-nederland-utr-25-2541/): Jruw: {{COURTdecisionBOX |Jurisdiction=Netherlands |Court-BG-Color= |Courtlogo=Courts_logo1.png |Court_Abbrevation=Rb. Midden-Nederland |Court_Original_Name=Rechtbank Midden-Nederland |Court_English_Name=District Court Midden-Nederland |Court_With_Country=Rb. Midden-Nederland (Netherlands) |Case_Number_Name=UTR 25/2541 |ECLI=ECLI:NL:RBMNE:2026:70 |Original_Source_Name_1=Rechtspraak.nl |Original_Source_Link_1=https://deeplink.rechtspraak.nl/uitspraak?id=ECLI:NL:RBMNE:2026:70 |Original_Source_Language_1=Dutch |Original_Source_Language__Code_1=NL |Original_Source_Name_2= |Original_Source_Link_2= |Original_Source_Language_2= |Original_Source_Language__Code_2= |Date_Decided=14.01.2026 |Date_Published=02.02.2026 |Year=2026 |GDPR_Article_1=Article 15(3) GDPR |GDPR_Article_Link_1=Article 15 GDPR#3 |GDPR_Article_2= |GDPR_Article_Link_2= |GDPR_Article_3= |GDPR_Article_Link_3= |EU_Law_Name_1= |EU_Law_Link_1= |EU_Law_Name_2= |EU_Law_Link_2= |National_Law_Name_1= |National_Law_Link_1= |National_Law_Name_2= |National_Law_Link_2= |Party_Name_1=Data subject |Party_Link_1= |Party_Name_2=National Coordinator for Counterterrorism and ... Read more - [VDSS - VDS00089378](https://compliance-by-design.net/2026/02/03/vdss-vds00089378/): Lde: Created page with “{{COURTdecisionBOX |Jurisdiction=Slovenia |Court-BG-Color= |Courtlogo=Courts_logo1.png |Court_Abbrevation=VDSS |Court_Original_Name=Višje delovno in socialno sodišče |Court_English_Name=Higher Labor and Social Court |Court_With_Country=VDSS (Slovenia) |Case_Number_Name=VDS00089378 |ECLI=ECLI:SI:VDSS:2025:X.PDP.343.2025 |Original_Source_Name_1=Sodna Praska |Original_Source_Link_1=https://www.sodnapraksa.si/?q=ZVOP&database%5BSOVS%5D=SOVS&database%5BIESP%5D=IESP&data…” {{COURTdecisionBOX |Jurisdiction=Slovenia |Court-BG-Color= |Courtlogo=Courts_logo1.png |Court_Abbrevation=VDSS |Court_Original_Name=Višje delovno in socialno sodišče |Court_English_Name=Higher Labor and Social Court |Court_With_Country=VDSS (Slovenia) |Case_Number_Name=VDS00089378 |ECLI=ECLI:SI:VDSS:2025:X.PDP.343.2025 |Original_Source_Name_1=Sodna Praska |Original_Source_Link_1=https://www.sodnapraksa.si/?q=ZVOP&database%5BSOVS%5D=SOVS&database%5BIESP%5D=IESP&database%5BVDSS%5D=VDSS&database%5BUPRS%5D=UPRS&_submit=i%25C5%25A1%25C4%258Di&order=date&direction=desc&rowsPerPage=20&page=0&id=2015081111486970 |Original_Source_Language_1=Slovenian |Original_Source_Language__Code_1=SL |Original_Source_Name_2= |Original_Source_Link_2= |Original_Source_Language_2= |Original_Source_Language__Code_2= |Date_Decided=26.11.2025 ... Read more - [Register now for our conference on cross-regulatory cooperation in the EU (17 March)](https://compliance-by-design.net/2026/02/03/register-now-for-our-conference-on-cross-regulatory-cooperation-in-the-eu-17-march/): The European Data Protection Board (EDPB) invites you to register for its conference, “Cross-regulatory interplay and cooperation in the EU: a data protection perspective”, taking place on 17 March 2026 in Brussels. This event will offer a high-level overview of the EDPB’s work in the EU’s cross-regulatory landscape, focusing in particular on how regulatory frameworks ... Read more - [VwGH - Ro 2023/04/0028](https://compliance-by-design.net/2026/02/03/vwgh-ro-2023-04-0028/): Lde: Fixed Category {{COURTdecisionBOX |Jurisdiction=Austria |Court-BG-Color= |Courtlogo=Courts_logo1.png |Court_Abbrevation=VwGH |Court_Original_Name=Verwaltungsgerichtshof |Court_English_Name=Austrian Administrative Supreme Court |Court_With_Country=VwGH (Austria) |Case_Number_Name=Ro 2023/04/0028 |ECLI=ECLI:AT:VWGH:2025:RO2023040028. J00 |Original_Source_Name_1=RIS |Original_Source_Link_1=https://www.ris.bka.gv.at/Dokument.wxe?Abfrage=Vwgh&Entscheidungsart=Undefined&Sammlungsnummer=&Index=&SucheNachRechtssatz=False&SucheNachText=True&GZ=Ro+2023%252f04%252f0028&VonDatum=&BisDatum=03.02.2026&Norm=&ImRisSeitVonDatum=&ImRisSeitBisDatum=&ImRisSeit=Undefined&ResultPageSize=100&Suchworte=&Position=1&SkipToDocumentPage=true&ResultFunctionToken=4cef7b63-7828-4ba3-87d4-0fbb1dc1ad8c&Dokumentnummer=JWT_2023040028_20251217J00 |Original_Source_Language_1=German |Original_Source_Language__Code_1=DE |Original_Source_Name_2= |Original_Source_Link_2= |Original_Source_Language_2= |Original_Source_Language__Code_2= |Date_Decided=17.12.2025 |Date_Published=27.01.2026 |Year=2025 |GDPR_Article_1=Article 77 GDPR |GDPR_Article_Link_1=Article 77 GDPR |GDPR_Article_2= |GDPR_Article_Link_2= |GDPR_Article_3= |GDPR_Article_Link_3= |EU_Law_Name_1= |EU_Law_Link_1= |EU_Law_Name_2= |EU_Law_Link_2= |National_Law_Name_1=§ 24(4) DSG |National_Law_Link_1=https://www.ris.bka.gv.at/GeltendeFassung.wxe?Abfrage=bundesnormen&Gesetzesnummer=10001597 |National_Law_Name_2= |National_Law_Link_2= |National_Law_Name_3= |National_Law_Link_3= |Party_Name_1= |Party_Link_1= |Party_Name_2= ... Read more - [Datatilsynet (Norway) - 20/02911-20](https://compliance-by-design.net/2026/02/03/datatilsynet-norway-20-02911-20/): Xz: {{DPAdecisionBOX |Jurisdiction=Norway |DPA-BG-Color= |DPAlogo=LogoNO.png |DPA_Abbrevation=Datatilsynet |DPA_With_Country=Datatilsynet (Norway) |Case_Number_Name=20/02911-20 |ECLI= |Original_Source_Name_1=Datatilsynet |Original_Source_Link_1=https://www.datatilsynet.no/contentassets/fd51778709a14285a13d4cca9fc481f6/20206-01-16-vedtak—timegrip-offentlig-versjon.pdf |Original_Source_Language_1=Norwegian |Original_Source_Language__Code_1=NO |Original_Source_Name_2= |Original_Source_Link_2= |Original_Source_Language_2= |Original_Source_Language__Code_2= |Type=Complaint |Outcome=Upheld |Date_Started=30.06.2020 |Date_Decided=16.01.2026 |Date_Published=20.02.2026 |Year=2026 |Fine=250,000 |Currency=NOK |GDPR_Article_1=Article 15(1) GDPR |GDPR_Article_Link_1=Article 15 GDPR#1 |GDPR_Article_2=Article 15(3) GDPR |GDPR_Article_Link_2=Article 15 GDPR#3 |GDPR_Article_3= |GDPR_Article_Link_3= |GDPR_Article_4= |GDPR_Article_Link_4= |EU_Law_Name_1= |EU_Law_Link_1= |EU_Law_Name_2= |EU_Law_Link_2= |National_Law_Name_1= |National_Law_Link_1= |National_Law_Name_2= |National_Law_Link_2= |Party_Name_1= |Party_Link_1= |Party_Name_2= |Party_Link_2= |Appeal_To_Body= ... Read more - [DSB (Austria) - 2025-0.620.443](https://compliance-by-design.net/2026/02/03/dsb-austria-2025-0-620-443/): Xz: {{DPAdecisionBOX |Jurisdiction=Austria |DPA-BG-Color= |DPAlogo=LogoAT.png |DPA_Abbrevation=DSB |DPA_With_Country=DSB (Austria) |Case_Number_Name=2025-0.620.443 |ECLI=ECLI:AT:DSB:2025:2025.0.620.443 |Original_Source_Name_1=RIS |Original_Source_Link_1=https://www.ris.bka.gv.at/GeltendeFassung.wxe?Abfrage=Bundesnormen&Gesetzesnummer=10001597 |Original_Source_Language_1=German |Original_Source_Language__Code_1=DE |Original_Source_Name_2= |Original_Source_Link_2= |Original_Source_Language_2= |Original_Source_Language__Code_2= |Type=Complaint |Outcome=Rejected |Date_Started=03.08.2025 |Date_Decided=08.10.2025 |Date_Published=22.12.2025 |Year=2025 |Fine= |Currency= |GDPR_Article_1= |GDPR_Article_Link_1= |GDPR_Article_2= |GDPR_Article_Link_2= |EU_Law_Name_1= |EU_Law_Link_1= |EU_Law_Name_2= |EU_Law_Link_2= |National_Law_Name_1=§1 DSG |National_Law_Link_1=https://www.ris.bka.gv.at/GeltendeFassung.wxe?Abfrage=Bundesnormen&Gesetzesnummer=10001597 |National_Law_Name_2= |National_Law_Link_2= |National_Law_Name_3= |National_Law_Link_3= |Party_Name_1= |Party_Link_1= |Party_Name_2= |Party_Link_2= |Appeal_To_Body= |Appeal_To_Case_Number_Name= |Appeal_To_Status= |Appeal_To_Link= |Initial_Contributor= | }} The DPA held ... Read more - [Garante per la protezione dei dati personali (Italy) - 10213711](https://compliance-by-design.net/2026/02/02/garante-per-la-protezione-dei-dati-personali-italy-10213711/): Lde: Created page with “{{DPAdecisionBOX |Jurisdiction=Italy |DPA-BG-Color=background-color:#095d7e; |DPAlogo=LogoIT.png |DPA_Abbrevation=Garante per la protezione dei dati personali |DPA_With_Country=Garante per la protezione dei dati personali (Italy) |Case_Number_Name=10213711 |ECLI= |Original_Source_Name_1=GPDP |Original_Source_Link_1=https://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/10213711 |Original_Source_Language_1=Italian |Original_Source_Language__Code_1=…” {{DPAdecisionBOX |Jurisdiction=Italy |DPA-BG-Color=background-color:#095d7e; |DPAlogo=LogoIT.png |DPA_Abbrevation=Garante per la protezione dei dati personali |DPA_With_Country=Garante per la protezione dei dati personali (Italy) |Case_Number_Name=10213711 |ECLI= |Original_Source_Name_1=GPDP |Original_Source_Link_1=https://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/10213711 |Original_Source_Language_1=Italian |Original_Source_Language__Code_1=IT |Original_Source_Name_2= ... Read more - [NAIH (Hungary) - 7905/2025](https://compliance-by-design.net/2026/02/02/naih-hungary-7905-2025/): Lde: Created page with “{{DPAdecisionBOX |Jurisdiction=Hungary |DPA-BG-Color=background-color:#7f0037; |DPAlogo=LogoHU.jpg |DPA_Abbrevation=NAIH |DPA_With_Country=NAIH (Hungary) |Case_Number_Name=7905/2025 |ECLI= |Original_Source_Name_1=NAIH |Original_Source_Link_1=https://naih.hu/hatarozatok-vegzesek |Original_Source_Language_1=Hungarian |Original_Source_Language__Code_1=HU |Original_Source_Name_2= |Original_Source_Link_2= |Original_Source_Language_2= |Original_Source_Language__Code_2= |Ty…” {{DPAdecisionBOX |Jurisdiction=Hungary |DPA-BG-Color=background-color:#7f0037; |DPAlogo=LogoHU.jpg |DPA_Abbrevation=NAIH |DPA_With_Country=NAIH (Hungary) |Case_Number_Name=7905/2025 |ECLI= |Original_Source_Name_1=NAIH |Original_Source_Link_1=https://naih.hu/hatarozatok-vegzesek |Original_Source_Language_1=Hungarian |Original_Source_Language__Code_1=HU |Original_Source_Name_2= |Original_Source_Link_2= |Original_Source_Language_2= |Original_Source_Language__Code_2= |Type=Complaint |Outcome=Partly Upheld |Date_Started= |Date_Decided=17.02.2025 |Date_Published=30.01.2026 |Year=2025 |Fine= |Currency= |GDPR_Article_1=Article 12(3) GDPR |GDPR_Article_Link_1=Article 12 GDPR#3 |GDPR_Article_2=Article ... Read more - [BVerwG - 6 C 1.24](https://compliance-by-design.net/2026/02/02/bverwg-6-c-1-24/): Lde: Created page with “{{COURTdecisionBOX |Jurisdiction=Germany |Court-BG-Color= |Courtlogo=Courts_logo1.png |Court_Abbrevation=BVerwG |Court_Original_Name=Bundesverwaltungsgericht |Court_English_Name=German Federal Administrative Court |Court_With_Country=BVerwG (Germany) |Case_Number_Name=6 C 1.24 |ECLI=ECLI:DE:BVerwG:2025:051125U6C1.24.0 |Original_Source_Name_1=BVerwG |Original_Source_Link_1=https://www.bverwg.de/de/051125U6C1.24.0 |Original_Source_Language_1=German |Original_Source_Lang…” {{COURTdecisionBOX |Jurisdiction=Germany |Court-BG-Color= |Courtlogo=Courts_logo1.png |Court_Abbrevation=BVerwG |Court_Original_Name=Bundesverwaltungsgericht |Court_English_Name=German Federal Administrative Court |Court_With_Country=BVerwG (Germany) |Case_Number_Name=6 C 1.24 |ECLI=ECLI:DE:BVerwG:2025:051125U6C1.24.0 |Original_Source_Name_1=BVerwG |Original_Source_Link_1=https://www.bverwg.de/de/051125U6C1.24.0 |Original_Source_Language_1=German |Original_Source_Language__Code_1=DE |Original_Source_Name_2= |Original_Source_Link_2= |Original_Source_Language_2= |Original_Source_Language__Code_2= |Date_Decided=05.11.2025 |Date_Published=30.01.2026 |Year=2025 |GDPR_Article_1=Article 5 GDPR |GDPR_Article_Link_1=Article ... Read more - [FTC Takes Action to Prevent Anticompetitive Healthcare Services Merger](https://compliance-by-design.net/2026/01/31/ftc-takes-action-to-prevent-anticompetitive-healthcare-services-merger/): Proposed FTC order requires Sevita to divest over 100 facilities to protect healthcare services for vulnerable Americans with intellectual and development disabilities Today, the Federal Trade Commission took action to protect Americans with intellectual and developmental disabilities and their families by requiring Sevita Health (Sevita) to divest more than 100 healthcare facilities to resolve antitrust ... Read more - [FTC Submits Draft ANPRM Related to Negative Option Plans to OMB for Review](https://compliance-by-design.net/2026/01/31/ftc-submits-draft-anprm-related-to-negative-option-plans-to-omb-for-review/): The Federal Trade Commission announced today that it has submitted a draft Advance Notice of Proposed Rulemaking (ANPRM) concerning the agency’s Rule Concerning the Use of Prenotification Negative Option Plans, commonly known as the Negative Option Rule, to the Office of Information and Regulatory Affairs (OIRA) within the Office of Management and Budget. View Press Release - [FTC Announces Agenda for Workshop on Informational Injuries](https://compliance-by-design.net/2026/01/30/ftc-announces-agenda-for-workshop-on-informational-injuries/): The February 26 event will be held online and in-person with registration required The Federal Trade Commission announced the agenda for its February 26 workshop that will focus on how the agency can better understand and measure consumer injuries and benefits that may resuView Press Release - [Federal Trade Commission Chairman Andrew N. Ferguson Appoints Deputy Director for Bureau of Consumer Protection](https://compliance-by-design.net/2026/01/30/federal-trade-commission-chairman-andrew-n-ferguson-appoints-deputy-director-for-bureau-of-consumer-protection/): Federal Trade Commission Chairman Andrew N. Ferguson has appointed Levi Swank as Deputy Director of the agency’s Bureau of Consumer Protection.  View Press Release - [AEPD (Spain) - PS-00456-2025](https://compliance-by-design.net/2026/01/30/aepd-spain-ps-00456-2025/): Arielsan: Created page with “{{DPAdecisionBOX |Jurisdiction=Spain |DPA-BG-Color=background-color:#ffffff; |DPAlogo=LogoES.jpg |DPA_Abbrevation=AEPD |DPA_With_Country=AEPD (Spain) |Case_Number_Name=PS-00456-2025 |ECLI= |Original_Source_Name_1=AEPD |Original_Source_Link_1=https://www.aepd.es/documento/ps-00456-2025.pdf |Original_Source_Language_1=Spanish |Original_Source_Language__Code_1=ES |Original_Source_Name_2= |Original_Source_Link_2= |Original_Source_Language_2= |Original_Source_Language__Cod…” {{DPAdecisionBOX |Jurisdiction=Spain |DPA-BG-Color=background-color:#ffffff; |DPAlogo=LogoES.jpg |DPA_Abbrevation=AEPD |DPA_With_Country=AEPD (Spain) |Case_Number_Name=PS-00456-2025 |ECLI= |Original_Source_Name_1=AEPD |Original_Source_Link_1=https://www.aepd.es/documento/ps-00456-2025.pdf |Original_Source_Language_1=Spanish |Original_Source_Language__Code_1=ES |Original_Source_Name_2= |Original_Source_Link_2= |Original_Source_Language_2= |Original_Source_Language__Code_2= |Type=Complaint |Outcome=Upheld |Date_Started= |Date_Decided=03.12.2025 |Date_Published= |Year=2025 |Fine=80000 |Currency=EUR |GDPR_Article_1=Article 4(1) GDPR |GDPR_Article_Link_1=Article 4 GDPR#1 |GDPR_Article_2=Article 4(2) GDPR ... Read more - [FRA visit to international IDEA](https://compliance-by-design.net/2026/01/30/fra-visit-to-international-idea/): Language English Press release 0 Primary theme Systems Support for human rights systems and defenders Many organisations work to defend your rights. We help their efforts with independent evidence, advice and expertise. We support their frontline work. And we shine a light on potential risks and priority areas. Together we make your rights a reality. ... Read more - [Meeting with Cypriot Commissioner for Administration and Human Rights](https://compliance-by-design.net/2026/01/30/meeting-with-cypriot-commissioner-for-administration-and-human-rights/): Language English Press release 0 Secondary theme Asylum Access to asylum EU Charter of Fundamental Rights EU Charter of Fundamental Rights Title VI: Justice Article 47 – Right to an effective remedy and to a fair trial EU Charter of Fundamental Rights Title II: Freedoms Article 18 – Right to asylum Highlights Report / Paper ... Read more - [FRA Director visits first Reception Centre in Pournara](https://compliance-by-design.net/2026/01/30/fra-director-visits-first-reception-centre-in-pournara/): Language English Press release 0 Primary theme Asylum Asylum, migration and borders The increase in migration has presented opportunities and challenges across Europe. FRA encourages rights-compliant responses. We provide practical expertise on this complex issue. This includes regular updates, focus papers and toolkits. We also outline policy alternatives and best practices. Access to asylum Borders ... Read more - [FREMP meeting: FRA’s contribution to the implementation of the EU Charter](https://compliance-by-design.net/2026/01/30/fremp-meeting-fras-contribution-to-the-implementation-of-the-eu-charter/): Language English Press release 0 Secondary theme Systems Support for human rights systems and defenders Many organisations work to defend your rights. We help their efforts with independent evidence, advice and expertise. We support their frontline work. And we shine a light on potential risks and priority areas. Together we make your rights a reality. ... Read more - [FTC to Ban Kochava and Subsidiary from Selling Sensitive Location Data to Settle Charges They Sold Location Data Linked to Millions of Mobile Devices](https://compliance-by-design.net/2026/05/05/ftc-to-ban-kochava-and-subsidiary-from-selling-sensitive-location-data-to-settle-charges-they-sold-location-data-linked-to-millions-of-mobile-devices/): Data could be used to trace movements of individuals, FTC alleged The Federal Trade Commission will prohibit data broker Kochava and its subsidiary from selling, sharing or disclosing sensitive location data without consumers’ affirmative express consent to settle allegations the companies sold location data from hundreds of millions of mobile devices that could be used to ... Read more - [Stronger Cybersecurity, Stronger Business: NIST Celebrates 2026 National Small Business Week](https://compliance-by-design.net/2026/05/04/stronger-cybersecurity-stronger-business-nist-celebrates-2026-national-small-business-week/): Happy National Small Business Week! For over 60 years, the U.S. Small Business Administration has led this initiative to acknowledge the critical contributions of America’s entrepreneurs and small business owners. Part of the U.S. Department of Commerce, NIST’s mission is to drive U.S. innovation and global competitiveness, and the small business community is central to ... Read more - [FTC Takes Action to Protect Consumers from Anticompetitive Effects of Micromarket Kiosks Deal](https://compliance-by-design.net/2026/05/02/ftc-takes-action-to-protect-consumers-from-anticompetitive-effects-of-micromarket-kiosks-deal/): 365 Retail will be required to divest Cantaloupe’s Three Square Market business to merge with Cantaloupe under proposed FTC order Today, the Federal Trade Commission took action to protect Americans from rising food prices by requiring 365 Retail Markets LLC (365 Retail)—the nation’s largest provider of micromarket kiosks—to divest a competing business to complete its ... Read more - [FTC Urges Tennessee Supreme Court to Oppose the ABA’s Law School Accreditation Monopoly](https://compliance-by-design.net/2026/05/02/ftc-urges-tennessee-supreme-court-to-oppose-the-abas-law-school-accreditation-monopoly/): Federal Trade Commission staff urged the Tennessee Supreme Court yesterday to open law school accreditation to competition by reducing its reliance on the American Bar Association (ABA) in determining which law schools provide sufficient education for their graduates to take the Tennessee bar examination. The letter was joined by the U.S.View Press Release - [FTC to Host Workshop on “Litigate the Fix” Merger Remedy Proposals](https://compliance-by-design.net/2026/05/02/ftc-to-host-workshop-on-litigate-the-fix-merger-remedy-proposals/): WHAT: The FTC will host a workshop titled “Eleventh-Hour Antitrust Remedy Proposals and Litigating the Fix.” It will discuss the rise in litigate-the-fix cases and how federal enforcers and the courts should respond. View Press Release - [EU agencies highlight the role of research in effective policymaking](https://compliance-by-design.net/2026/05/01/eu-agencies-highlight-the-role-of-research-in-effective-policymaking/): Language English Press release 0 Primary theme Systems Support for human rights systems and defenders Many organisations work to defend your rights. We help their efforts with independent evidence, advice and expertise. We support their frontline work. And we shine a light on potential risks and priority areas. Together we make your rights a reality. ... Read more - [Visiting Frontex operational areas in Greece](https://compliance-by-design.net/2026/05/01/visiting-frontex-operational-areas-in-greece/): Language English Press release 0 Primary theme Asylum Asylum, migration and borders The increase in migration has presented opportunities and challenges across Europe. FRA encourages rights-compliant responses. We provide practical expertise on this complex issue. This includes regular updates, focus papers and toolkits. We also outline policy alternatives and best practices. Access to asylum Borders ... Read more - [Seminar on ICT standards and human rights](https://compliance-by-design.net/2026/05/01/seminar-on-ict-standards-and-human-rights/): Language English Press release 0 Secondary theme Data Artificial intelligence and big data EU Charter of Fundamental Rights EU Charter of Fundamental Rights Title III: Equality Article 21 – Non-discrimination Highlights Report / Paper / Summary 18 November 2021 Directive (EU) 2017/541 on combating terrorism ― Impact on fundamental rights and freedoms This report examines ... Read more - [Bridging child rights and environmental policy](https://compliance-by-design.net/2026/05/01/bridging-child-rights-and-environmental-policy/): Language English Press release 0 Secondary theme Equality Children, youth and older people EU Charter of Fundamental Rights EU Charter of Fundamental Rights Title III: Equality Article 24 – The rights of the child EU Charter of Fundamental Rights Title III: Equality Article 25 – The rights of the elderly Highlights Report / Paper / ... Read more - [FRA Director focuses on AI governance at Privacy Symposium 2026](https://compliance-by-design.net/2026/05/01/fra-director-focuses-on-ai-governance-at-privacy-symposium-2026/): Language English Press release 0 Secondary theme Data Artificial intelligence and big data EU Charter of Fundamental Rights EU Charter of Fundamental Rights Title III: Equality Article 21 – Non-discrimination Highlights Report / Paper / Summary 18 November 2021 Directive (EU) 2017/541 on combating terrorism ― Impact on fundamental rights and freedoms This report examines ... Read more - [From DMV to Wallet: Understanding Verifiable Digital Credential Issuance](https://compliance-by-design.net/2026/04/28/from-dmv-to-wallet-understanding-verifiable-digital-credential-issuance/): In our last post in this series, we compared two credential formats that shape the digital identity ecosystem: ISO/IEC 18013-5 and -7 mobile documents (mdocs) and W3C Verifiable Credentials (VCs). Both formats define how a credential is structured and shared, but neither can function without an issuance process. This blog post explores what it takes ... Read more - [Marking 10 years of the GDPR: the evolution of the European data protection landscape](https://compliance-by-design.net/2026/04/28/marking-10-years-of-the-gdpr-the-evolution-of-the-european-data-protection-landscape/): Brussels, 27 April – Today marks the 10th anniversary of the GDPR’s adoption, the first comprehensive data protection framework spanning an entire continent, establishing clear rights for individuals and obligations for organisations across Europe. The moment that led to the creation of the EDPB The GDPR led to the establishment of the European Data Protection ... Read more - [New FTC Data Show People Have Lost Billions to Social Media Scams](https://compliance-by-design.net/2026/04/28/new-ftc-data-show-people-have-lost-billions-to-social-media-scams/): Social media was the costliest fraud contact method in 2025 and reported losses increased eightfold since 2020 New data from the Federal Trade Commission show that, in 2025, nearly 30% of people who reported losing money to a scam said that it started on social media, with reported losses reaching a staggering $2.1 billion. View ... Read more - [FTC Takes Action Against High-Level MLM Participants who Deceived Workers About the Amount of Money They Can Earn](https://compliance-by-design.net/2026/04/28/ftc-takes-action-against-high-level-mlm-participants-who-deceived-workers-about-the-amount-of-money-they-can-earn/): FTC order settling the agency’s allegations will prohibit Steven and Gina Merritt from making deceptive earnings claims The Federal Trade Commission is taking action against high-level participants in a multilevel marketing (MLM) company over allegations they used false or baseless earning claims to recruit workers, most of whom did not earn any money. View Press ... Read more - [Strengthening human rights impact assessments in EU and national laws](https://compliance-by-design.net/2026/04/26/strengthening-human-rights-impact-assessments-in-eu-and-national-laws/): Language English Press release 0 Primary theme Systems Support for human rights systems and defenders Many organisations work to defend your rights. We help their efforts with independent evidence, advice and expertise. We support their frontline work. And we shine a light on potential risks and priority areas. Together we make your rights a reality. ... Read more - [Inclusive strategies and effective coordination to advance LGBTIQ equality nationally](https://compliance-by-design.net/2026/04/26/inclusive-strategies-and-effective-coordination-to-advance-lgbtiq-equality-nationally/): Language English Press release 0 Secondary theme Equality Sex, sexual orientation and gender EU Charter of Fundamental Rights EU Charter of Fundamental Rights Title III: Equality Article 21 – Non-discrimination EU Charter of Fundamental Rights Title III: Equality Article 23 – Equality between women and men Highlights Report / Paper / Summary 18 November 2021 ... Read more - [AI Act (EU)](https://compliance-by-design.net/2026/04/25/ai-act-eu/): The EU Artificial Intelligence Act (“AI Act”) is the first comprehensive horizontal legal framework for artificial intelligence. It applies a risk-based approach, prohibiting a small set of AI practices outright, imposing strict obligations on a defined list of high-risk AI systems, layering transparency duties on certain other systems, and creating a dedicated regime for general-purpose ... Read more - [Protection of Personal Information Act (South Africa)](https://compliance-by-design.net/2026/04/24/protection-of-personal-information-act-south-africa/): TLDR; The Protection of Personal Information Act 4 of 2013 (“POPIA”) is South Africa’s general data protection law. It sets eight conditions for the lawful processing of personal information — accountability, processing limitation, purpose specification, further processing limitation, information quality, openness, security safeguards, and data subject participation — and establishes the Information Regulator as the ... Read more - [Cybersecurity Act (EU)](https://compliance-by-design.net/2026/04/24/eu-cybersecurity-act/): TLDR; The EU Cybersecurity Act (“CSA”) the European Union Agency for Cybersecurity (ENISA) permanently and creates a Union-wide framework for voluntary cybersecurity certification of ICT products, ICT services, ICT processes and (since the 2025 amendment) managed security services. The framework is addresses ENISA, the EU Member States, national accreditation bodies and conformity assessment bodies. Its ... Read more - [Monitoring fundamental rights under the Screening Regulation](https://compliance-by-design.net/2026/04/24/monitoring-fundamental-rights-under-the-screening-regulation/): Language English Press release 0 Secondary theme Asylum Borders and information systems EU Charter of Fundamental Rights EU Charter of Fundamental Rights Title II: Freedoms Article 19 – Protection in the event of removal, expulsion or extradition EU Charter of Fundamental Rights Title II: Freedoms Article 8 – Protection of personal data Highlights Report / ... Read more - [Council of Europe Committee on New and Emerging Technologies holds inaugural meeting](https://compliance-by-design.net/2026/04/24/council-of-europe-committee-on-new-and-emerging-technologies-holds-inaugural-meeting/): Language English Press release 0 Secondary theme Data Artificial intelligence and big data EU Charter of Fundamental Rights EU Charter of Fundamental Rights Title III: Equality Article 21 – Non-discrimination Highlights Report / Paper / Summary 18 November 2021 Directive (EU) 2017/541 on combating terrorism ― Impact on fundamental rights and freedoms This report examines ... Read more - [Stakeholder event on competition and data protection: save the date](https://compliance-by-design.net/2026/04/24/stakeholder-event-on-competition-and-data-protection-save-the-date/): Brussels, 23 April – The EDPB is organising a remote stakeholder event in the context of its joint work with the European Commission on upcoming guidelines on the interplay between competition and data protection. The event will take place on 29 June 2026 and is an opportunity for stakeholders to inform and support the ongoing ... Read more - [FTC Charts Path to Restore Competition in Texas Anesthesia Markets in USAP Litigation](https://compliance-by-design.net/2026/04/24/ftc-charts-path-to-restore-competition-in-texas-anesthesia-markets-in-usap-litigation/): The Federal Trade Commission has reached an agreement in principle with U.S. Anesthesia Partners Inc. (USAP) to settle the litigation and restore competition for anesthesia services in Texas. View Press Release - [EU migration situation: fundamental rights challenges persist](https://compliance-by-design.net/2026/04/23/eu-migration-situation-fundamental-rights-challenges-persist/): Language English Press release 0 Primary theme Asylum Asylum, migration and borders The increase in migration has presented opportunities and challenges across Europe. FRA encourages rights-compliant responses. We provide practical expertise on this complex issue. This includes regular updates, focus papers and toolkits. We also outline policy alternatives and best practices. Access to asylum Borders ... Read more - [FTC Sues to Stop Deceptive Health Care Scheme](https://compliance-by-design.net/2026/04/23/ftc-sues-to-stop-deceptive-health-care-scheme/): FTC alleges scheme has generated millions of dollars by deceiving consumers seeking comprehensive health plans or those who already have coverage At the Federal Trade Commission’s request, a U.S.View Press Release - [Court Orders Operator of Timeshare Exit Scheme to Pay $140 Million Related to FTC Allegations the Scheme Took Millions from Consumers](https://compliance-by-design.net/2026/04/21/court-orders-operator-of-timeshare-exit-scheme-to-pay-140-million-related-to-ftc-allegations-the-scheme-took-millions-from-consumers/): Following an investigation by the Federal Trade Commission, a federal court has ordered one of the key operators of a timeshare exit operation to pay $140 million and has permanently banned him from marketing similar services in the future over allegations the scheme defrauded consumers—mostly older adults—out of more than $90 million. View Press Release - [FRA joins ETIAS Fundamental Rights Guidance Board meeting](https://compliance-by-design.net/2026/04/18/fra-joins-etias-fundamental-rights-guidance-board-meeting/): Language English Press release 0 Secondary theme Asylum Borders and information systems EU Charter of Fundamental Rights EU Charter of Fundamental Rights Title II: Freedoms Article 19 – Protection in the event of removal, expulsion or extradition EU Charter of Fundamental Rights Title II: Freedoms Article 8 – Protection of personal data Highlights Report / ... Read more - [FTC and DOJ Extend Deadline for Public Comment on Guidance on Business Collaborations](https://compliance-by-design.net/2026/04/18/ftc-and-doj-extend-deadline-for-public-comment-on-guidance-on-business-collaborations/): The Federal Trade Commission and the Justice Department’s Antitrust Division (“Agencies”) hereby extend the period for receiving public comments on their inquiry for consideration of guidance on collaborations among competitors that was announced on February 23View Press Release - [FRA civic space consultation open till 10 May](https://compliance-by-design.net/2026/04/18/fra-civic-space-consultation-open-till-10-may/): Language English Press release 0 Secondary theme Systems Civil society EU Charter of Fundamental Rights EU Charter of Fundamental Rights Title II: Freedoms Article 11 – Freedom of expression and information EU Charter of Fundamental Rights Title II: Freedoms Article 12 – Freedom of assembly and of association Highlights Report / Paper / Summary 18 ... Read more - [FRA addresses Finnish rule of law seminar](https://compliance-by-design.net/2026/04/17/fra-addresses-finnish-rule-of-law-seminar/): Language English Press release 0 Secondary theme Systems EU Charter of Fundamental Rights EU Charter of Fundamental Rights EU Charter of Fundamental Rights Title VII: General provisions Article 51 – Field of application EU Charter of Fundamental Rights Title VII: General provisions Article 52 – Scope and interpretation Highlights Report / Paper / Summary 18 ... Read more - [Workshop discusses Roma discrimination in Central and Eastern Europe](https://compliance-by-design.net/2026/04/17/workshop-discusses-roma-discrimination-in-central-and-eastern-europe/): Language English Press release 0 Secondary theme Equality Roma EU Charter of Fundamental Rights EU Charter of Fundamental Rights Title III: Equality Article 21 – Non-discrimination EU Charter of Fundamental Rights Title III: Equality Article 22 – Cultural, religious and linguistic diversity Highlights Report / Paper / Summary 18 November 2021 Directive (EU) 2017/541 on ... Read more - [Roma inclusion and empowerment in Czechia](https://compliance-by-design.net/2026/04/17/roma-inclusion-and-empowerment-in-czechia/): Language English Press release 0 Secondary theme Equality Roma EU Charter of Fundamental Rights EU Charter of Fundamental Rights Title III: Equality Article 21 – Non-discrimination EU Charter of Fundamental Rights Title III: Equality Article 22 – Cultural, religious and linguistic diversity Highlights Report / Paper / Summary 18 November 2021 Directive (EU) 2017/541 on ... Read more - [Discussing the protection of Ukrainian children](https://compliance-by-design.net/2026/04/17/discussing-the-protection-of-ukrainian-children/): Language English Press release 0 Secondary theme Asylum Legal migration and integration EU Charter of Fundamental Rights EU Charter of Fundamental Rights Title II: Freedoms Article 18 – Right to asylum EU Charter of Fundamental Rights Title III: Equality Article 21 – Non-discrimination Highlights Report / Paper / Summary 18 November 2021 Directive (EU) 2017/541 ... Read more - [FTC Stops Operation that Allegedly Targeted People Seeking Student Loan Debt Relief](https://compliance-by-design.net/2026/04/17/ftc-stops-operation-that-allegedly-targeted-people-seeking-student-loan-debt-relief/): Operators of alleged scheme pretended to be affiliated with the federal government and falsely promised students loan forgiveness in exchange for illegal upfront fees The Federal Trade Commission has obtained a temporary restraining order against an alleged student loan debt relief scheme and its operators over allegations they pretended to be affiliated with the U.S.View Press Release - [EDPB brings clarity to data processing for scientific research, speeds up the finalisation of the anonymisation guidelines and approves first European data protection seal as a tool for transfers](https://compliance-by-design.net/2026/04/17/edpb-brings-clarity-to-data-processing-for-scientific-research-speeds-up-the-finalisation-of-the-anonymisation-guidelines-and-approves-first-european-data-protection-seal-as-a-tool-for-transfers/): Brussels, 16 April – During its latest plenary, the EDPB has adopted Guidelines on processing of personal data for scientific research purposes. In addition, the Board has created a team to speed up the finalisation of the guidelines on anonymisation. The EDPB has also adopted two opinions on the two sets of the Europrivacy certification ... Read more - [FRA contributes to WHO expert meeting on violence against women](https://compliance-by-design.net/2026/04/17/fra-contributes-to-who-expert-meeting-on-violence-against-women/): Language English Press release 0 Secondary theme Equality Sex, sexual orientation and gender EU Charter of Fundamental Rights EU Charter of Fundamental Rights Title III: Equality Article 21 – Non-discrimination EU Charter of Fundamental Rights Title III: Equality Article 23 – Equality between women and men Highlights Report / Paper / Summary 18 November 2021 ... Read more - [FTC Testifies Before Senate Commerce, Science and Transportation Committee](https://compliance-by-design.net/2026/04/16/ftc-testifies-before-senate-commerce-science-and-transportation-committee/): Chairman Ferguson highlighted the agency’s priorities and recent achievements The Federal Trade Commission testified before the Senate Committee on Commerce, Science and Transportation today to highlight the agency’s accomplishments in the last year and a half and its ongoing work to protect consumers and promote competition on behalf of the American people. View Press Release - [FTC Takes Action Against Noncompete Agreements, Securing Protections for Workers](https://compliance-by-design.net/2026/04/16/ftc-takes-action-against-noncompete-agreements-securing-protections-for-workers/): FTC orders one of the nation’s largest pest-control companies to stop enforcing noncompete agreements and sends warning letters to other industry employers The Federal Trade Commission today ordered Rollins, Inc.—one of the largest pest-control companies in the United States—to stop enforcing noncompete agreements against more than 18,000 employees nationwide.View Press Release - [FTC Takes Action to Restore Competition in the Digital Advertising Ecosystem](https://compliance-by-design.net/2026/04/16/ftc-takes-action-to-restore-competition-in-the-digital-advertising-ecosystem/): Ad agency giants agree to stop unlawful collusion that imposed uniform standards on “brand safety” The Federal Trade Commission, along with a coalition of states, took decisive action today to stop collusion between the nation’s largest advertising agencies that distorted America’s modern public square. View Press Release - [Implementing the Migration and Asylum Pact: Lessons learnt from the hotspot approach](https://compliance-by-design.net/2026/04/15/implementing-the-migration-and-asylum-pact-lessons-learnt-from-the-hotspot-approach/): Language English Press release 0 Secondary theme Asylum Asylum, migration and borders The increase in migration has presented opportunities and challenges across Europe. FRA encourages rights-compliant responses. We provide practical expertise on this complex issue. This includes regular updates, focus papers and toolkits. We also outline policy alternatives and best practices. Access to asylum Borders ... Read more - [Enhancing compliance and consistency: EDPB adopts DPIA template](https://compliance-by-design.net/2026/04/15/enhancing-compliance-and-consistency-edpb-adopts-dpia-template/): Brussels, 14 April – In line with the EDPB’s Helsinki Statement to make GDPR compliance easier and strengthen consistency across Europe, the EDPB has adopted a template for Data Protection Impact Assessments (DPIA). The template will help organisations structure, harmonise and evidence their DPIA reporting processes. The template is complemented by an explainer document providing ... Read more - [FTC Announces “Made in the USA” Sweep, Including Three Law Enforcement Actions to Protect American Consumers and Businesses](https://compliance-by-design.net/2026/04/15/ftc-announces-made-in-the-usa-sweep-including-three-law-enforcement-actions-to-protect-american-consumers-and-businesses/): The FTC’s actions aim to protect the integrity of “Made in the USA” products, while restoring consumer confidence in American-made goods Today, the Federal Trade Commission announced law enforcement actions involving three companies that deceived American consumers by falsely claiming, in advertising and labeling, that their products were made in the United States.View Press Release - [FTC Seeks Public Comment on Unfair and Deceptive Fee Practices in Online Food and Grocery Delivery Services](https://compliance-by-design.net/2026/04/15/ftc-seeks-public-comment-on-unfair-and-deceptive-fee-practices-in-online-food-and-grocery-delivery-services/): Proposal seeks input on ways to protect consumers from unfair or deceptive fees and to foster competition and price transparency The Federal Trade Commission today announced it is seeking public comment on whether a rule is needed to address unfair or deceptive fee practices in connection with the services provided by online food and grocery ... Read more - [FTC Order to Prohibit Forever Living and its Operators from Deceiving Consumers about Potential Earnings](https://compliance-by-design.net/2026/04/15/ftc-order-to-prohibit-forever-living-and-its-operators-from-deceiving-consumers-about-potential-earnings/): FTC alleged most participants made no money or even lost money despite the company’s claims Operators of multilevel marketing (MLM) company Forever Living will be permanently prohibited from making deceptive earnings claims to resolve Federal Trade Commission allegations that the company deceived consumers into believing that they could earn profits from the venture when the ... Read more - [FTC Takes Action Against TruHeight for Deceptive and Unsubstantiated Advertising of Supposed Height-Enhancing Supplements for Kids and Teens](https://compliance-by-design.net/2026/04/14/ftc-takes-action-against-truheight-for-deceptive-and-unsubstantiated-advertising-of-supposed-height-enhancing-supplements-for-kids-and-teens/): Proposed settlement order requires TruHeight and its principals to pay $750,000; bars them from making false or unsupported health claims and using fake or incentivized consumer reviews Nevada-based Vanilla Chip LLC, which does business as TruHeight, and its two principals, Eden Stelmach and Justin Rapoport, have agreed to settle the Federal Trade Commission’s charges that they ... Read more - [FTC Takes Action Against High-Level MLM Participant who Deceived Workers About the Amount of Money They Can Earn](https://compliance-by-design.net/2026/04/14/ftc-takes-action-against-high-level-mlm-participant-who-deceived-workers-about-the-amount-of-money-they-can-earn/): FTC order settling the agency’s allegations will prohibit Stormy Wellington from making deceptive earnings claims The Federal Trade Commission is taking action against a high-level participant in a multilevel marketing (MLM) company over allegations she used false or baseless earning claims to recruit workers, most of whom did not earn any money from the venture. ... Read more - [Publishing.com to Pay $1.5 Million for Misleading Consumers about How Much Income They Could Earn Using the Company’s Products and Services](https://compliance-by-design.net/2026/04/14/publishing-com-to-pay-1-5-million-for-misleading-consumers-about-how-much-income-they-could-earn-using-the-companys-products-and-services/): Online self-publishing company must clearly disclose when testimonials are incentivized or come from someone with connections to the company Publishing.com LLC and its two principals will pay $1.5 million and be required to substantiate earnings claims in the future to settle Federal Trade Commission charges that the company and its operators misled consumers about how ... Read more - [FTC Issues Order Approving 2026 Horseracing Integrity and Safety Authority Budget](https://compliance-by-design.net/2026/04/14/ftc-issues-order-approving-2026-horseracing-integrity-and-safety-authority-budget/): The Federal Trade Commission issued an order approving the Horseracing Integrity and Safety Authority’s 2026 budget. View Press Release - [FTC Submits Draft ANPRM Related to Online Food Delivery Service Fees to OMB for Review](https://compliance-by-design.net/2026/04/11/ftc-submits-draft-anprm-related-to-online-food-delivery-service-fees-to-omb-for-review/): The Federal Trade Commission announced today that it has submitted an Advance Notice of Proposed Rulemaking (ANPRM) related to online food delivery service fees for review by the Office of Information and Regulatory Affairs (OIRA) within the Office of Management and Budget (OMB). View Press Release - [StubHub Refunding $10 Million in Fees to Consumers After Deceptive Ticket Pricing](https://compliance-by-design.net/2026/04/10/stubhub-refunding-10-million-in-fees-to-consumers-after-deceptive-ticket-pricing/): Company failed to disclose total ticket price for live events in violation of the FTC’s Fees Rule StubHub, the nation’s largest ticket exchange and resale ticket provider, will pay $10 million to settle Federal Trade Commission charges that the company violated the FTC Act and the agency’s Rule on Unfair or Deceptive Fees by deceptively ... Read more - [EDPB annual report 2025: supporting stakeholders through guidance and dialogue](https://compliance-by-design.net/2026/04/10/edpb-annual-report-2025-supporting-stakeholders-through-guidance-and-dialogue/): Brussels, 09 April – The European Data Protection Board (EDPB) has published its 2025 Annual Report. The report provides an overview of the EDPB work carried out in 2025 and reflects on important milestones, such as the adoption of the Helsinki Statement on Enhanced Clarity, Support, and Engagement. “In 2025, we saw the data protection landscape change ... Read more - [EU-gender-based violence survey results presented to the European Parliament](https://compliance-by-design.net/2026/04/10/eu-gender-based-violence-survey-results-presented-to-the-european-parliament/): Language English Press release 0 Secondary theme Equality Sex, sexual orientation and gender EU Charter of Fundamental Rights EU Charter of Fundamental Rights Title III: Equality Article 21 – Non-discrimination EU Charter of Fundamental Rights Title III: Equality Article 23 – Equality between women and men Highlights Report / Paper / Summary 18 November 2021 ... Read more - [Training Hungarian judges on the EU Migration and Asylum Pact](https://compliance-by-design.net/2026/04/10/training-hungarian-judges-on-the-eu-migration-and-asylum-pact/): Language English Press release 0 Primary theme Asylum Asylum, migration and borders The increase in migration has presented opportunities and challenges across Europe. FRA encourages rights-compliant responses. We provide practical expertise on this complex issue. This includes regular updates, focus papers and toolkits. We also outline policy alternatives and best practices. Access to asylum Borders ... Read more - [Presenting the EU-gender-based violence survey results to Member States](https://compliance-by-design.net/2026/04/10/presenting-the-eu-gender-based-violence-survey-results-to-member-states/): Language English Press release 0 Secondary theme Equality Sex, sexual orientation and gender EU Charter of Fundamental Rights EU Charter of Fundamental Rights Title III: Equality Article 21 – Non-discrimination EU Charter of Fundamental Rights Title III: Equality Article 23 – Equality between women and men Highlights Report / Paper / Summary 18 November 2021 ... Read more - [FTC Publishes New Strategic Plan](https://compliance-by-design.net/2026/04/04/ftc-publishes-new-strategic-plan/): The Federal Trade Commission has published its FY 2026-2030 Strategic Plan, which will guide the agency over the next five years. View Press Release - [FTC Submits Annual Budget Request to Congress](https://compliance-by-design.net/2026/04/04/ftc-submits-annual-budget-request-to-congress/): The Federal Trade Commission submitted to Congress its Fiscal Year 2027 budget request, in support of the President’s FY 2027 budget for the federal government. View Press Release - [FTC Seeks Public Comment on Petition to Modify Northrop Grumman Final Order](https://compliance-by-design.net/2026/04/03/ftc-seeks-public-comment-on-petition-to-modify-northrop-grumman-final-order/): The Federal Trade Commission is seeking public comment on a petition filed by Northrop Grumman Corporation requesting that the Commission reopen and set aside a finaView Press Release - [FTC Staff Warn Tennessee Legislature of Risks to Patients if Ballad Health COPA Expires and Support Proposed Repeal of Certificate of Need Requirements](https://compliance-by-design.net/2026/04/03/ftc-staff-warn-tennessee-legislature-of-risks-to-patients-if-ballad-health-copa-expires-and-support-proposed-repeal-of-certificate-of-need-requirements/): Federal Trade Commission staff warned Tennessee legislators of the potential harm to patients if it passes proposed legislation that would terminate a Certificate of Public Advantage (COPA) that providesView Press Release - [FTC, Maryland Attorney General Secure Full Refunds and Additional Penalties Against Lindsay Auto Group for Deceptive Pricing Practices and Unwanted Add-ons](https://compliance-by-design.net/2026/04/03/ftc-maryland-attorney-general-secure-full-refunds-and-additional-penalties-against-lindsay-auto-group-for-deceptive-pricing-practices-and-unwanted-add-ons/): More than $75 million in charges may be eligible for refunds The Federal Trade Commission and Maryland Attorney General today announced Lindsay Automotive Group and its executives will return money to resolve allegations that they deceived consumers for years with falsely advertised low prices and unwanted add-ons that led to buyers paying thousands of dollars ... Read more - [FTC Endorses Florida Supreme Court Action Eliminating the ABA’s Bar Admission Monopoly](https://compliance-by-design.net/2026/04/01/ftc-endorses-florida-supreme-court-action-eliminating-the-abas-bar-admission-monopoly/): Federal Trade Commission staff on Tuesday endorsed the Florida Supreme Court’s decision to eliminate the American Bar Association’s (ABA) status as the sole accrediting agency dictating the educational requirements to take the bar exam and become a licensed attorney in Florida. View Press Release - [Rising pressure on civic space threatens European democracy](https://compliance-by-design.net/2026/04/01/rising-pressure-on-civic-space-threatens-european-democracy/): Language English Press release 0 Primary theme Systems Civil society EU Charter of Fundamental Rights EU Charter of Fundamental Rights Title II: Freedoms Article 11 – Freedom of expression and information EU Charter of Fundamental Rights Title II: Freedoms Article 12 – Freedom of assembly and of association Highlights Report / Paper / Summary 18 ... Read more - [FTC Takes Action Against Match and OkCupid for Deceiving Users by Sharing Personal Data with Third Party](https://compliance-by-design.net/2026/03/31/ftc-takes-action-against-match-and-okcupid-for-deceiving-users-by-sharing-personal-data-with-third-party/): Order follows FTC success in enforcing Civil Investigative Demand in federal court The Federal Trade Commission is taking action against OkCupid and its affiliate Match Group Americas over allegations OkCupid deceived users of its dating app by sharing their personal information, including photos and location information, with an unrelated third party, contrary to OkCupid’s privacy ... Read more - [Europeans deeply concerned about children’s use of social media](https://compliance-by-design.net/2026/03/27/europeans-deeply-concerned-about-childrens-use-of-social-media/): Language English Press release 0 Secondary theme Data Data protection EU Charter of Fundamental Rights EU Charter of Fundamental Rights Title II: Freedoms Article 7 – Respect for private and family life EU Charter of Fundamental Rights Title II: Freedoms Article 8 – Protection of personal data Highlights Report / Paper / Summary 18 November ... Read more - [FRA joins Council of Europe social rights conference](https://compliance-by-design.net/2026/03/27/fra-joins-council-of-europe-social-rights-conference/): Language English Press release 0 Primary theme environmental-social-sustainability Environmental and social sustainability Climate change and environmental protection Just and green transition Business and human rights Human rights due diligence Consumer protection EU Charter of Fundamental Rights EU Charter of Fundamental Rights Title IV: Solidarity Article 37 – Environmental protection EU Charter of Fundamental Rights Title ... Read more - [FRA takes part in EU anti-racism discussions](https://compliance-by-design.net/2026/03/26/fra-takes-part-in-eu-anti-racism-discussions/): Language English Press release 0 Secondary theme Equality Hate crime EU Charter of Fundamental Rights EU Charter of Fundamental Rights Title VI: Justice Article 47 – Right to an effective remedy and to a fair trial EU Charter of Fundamental Rights Title III: Equality Article 21 – Non-discrimination Highlights Report / Paper / Summary 18 ... Read more - [Fundamental Rights at Frontex](https://compliance-by-design.net/2026/03/26/fundamental-rights-at-frontex/): Language English Press release 0 Secondary theme Asylum Borders and information systems EU Charter of Fundamental Rights EU Charter of Fundamental Rights Title II: Freedoms Article 19 – Protection in the event of removal, expulsion or extradition EU Charter of Fundamental Rights Title II: Freedoms Article 8 – Protection of personal data Highlights Report / ... Read more - [European Coalition of Cities against Racism steering committee meets](https://compliance-by-design.net/2026/03/26/european-coalition-of-cities-against-racism-steering-committee-meets/): Language English Press release 0 Secondary theme Equality Hate crime EU Charter of Fundamental Rights EU Charter of Fundamental Rights Title VI: Justice Article 47 – Right to an effective remedy and to a fair trial EU Charter of Fundamental Rights Title III: Equality Article 21 – Non-discrimination Highlights Report / Paper / Summary 18 ... Read more - [FRA joins LIBE committee discussions on asylum, migration, and integration](https://compliance-by-design.net/2026/03/26/fra-joins-libe-committee-discussions-on-asylum-migration-and-integration/): Language English Press release 0 Primary theme Asylum Asylum, migration and borders The increase in migration has presented opportunities and challenges across Europe. FRA encourages rights-compliant responses. We provide practical expertise on this complex issue. This includes regular updates, focus papers and toolkits. We also outline policy alternatives and best practices. Access to asylum Borders ... Read more - [FTC Chairman Andrew N. Ferguson Issues Warning Letters to CEOs of PayPal, Stripe, Visa and Mastercard About Debanking American Consumers](https://compliance-by-design.net/2026/03/26/ftc-chairman-andrew-n-ferguson-issues-warning-letters-to-ceos-of-paypal-stripe-visa-and-mastercard-about-debanking-american-consumers/): Federal Trade Commission Chairman Andrew N. Ferguson sent letters today to four major financial infrastructure platforms and payment providers reminding them of their obligations to their customers under the FTC Act. View Press Release - [FTC Testifies before the Joint Economic Committee on Agency’s Efforts to Combat Fraud](https://compliance-by-design.net/2026/03/25/ftc-testifies-before-the-joint-economic-committee-on-agencys-efforts-to-combat-fraud/): The Federal Trade Commission testified today before the Joint Economic Committee about the agency’s ongoing work to combat fraud and protect consumers from scammers and other bad actors. View Press Release - [Federal Trade Commission and Department of Justice Seek Public Comment on the Premerger Notification and Report Form](https://compliance-by-design.net/2026/03/25/federal-trade-commission-and-department-of-justice-seek-public-comment-on-the-premerger-notification-and-report-form/): Comments will inform potential HSR rulemaking that seeks to reduce the burden for non-problematic transactions while also making necessary updates Today, the Federal Trade Commission (Commission) and the Department of Justice’s Antitrust Division (DOJ) (together, the Agencies) launched a joint public inquiry regarding the effectiveness of the Hart-Scott-Rodino Antitrust Improvements Act’s (HSR Act) premerger reporting ... Read more - [EDPB conference on cross-regulatory cooperation: what we learned](https://compliance-by-design.net/2026/03/24/edpb-conference-on-cross-regulatory-cooperation-what-we-learned/): Brussels, 23 March – On 17 March 2026, the EDPB conference “Cross-regulatory interplay and cooperation in the EU: a data protection perspective” took place in Brussels. The event showcased high-level discussions, featuring contributions from representatives of key EU institutions, European Data Protection Authorities, academia and industry.  Key takeaways from the panel discussions Throughout the day, ... Read more - [Air AI and its Owners will be Banned from Marketing Business Opportunities to Settle FTC Charges the Company Misled Many Entrepreneurs and Small Businesses](https://compliance-by-design.net/2026/03/24/air-ai-and-its-owners-will-be-banned-from-marketing-business-opportunities-to-settle-ftc-charges-the-company-misled-many-entrepreneurs-and-small-businesses/): Agency alleged Air AI made deceptive claims about business growth, earnings potential, and refund guarantees Air AI will be banned from marketing business opportunities as part of a settlement with the Federal Trade Commission over charges the company misled many entrepreneurs and small businesses with deceptive claims about business growth, earnings potential, and refund guarantees. ... Read more - [Reflections from the Second NIST Cyber AI Profile Workshop](https://compliance-by-design.net/2026/03/23/reflections-from-the-second-nist-cyber-ai-profile-workshop/): Thank you to everyone who participated in the Cybersecurity Framework Profile for Artificial Intelligence (Cyber AI Profile) Workshop in January! The input we received on the Preliminary Draft during this workshop has been invaluable and is informing the development of the next draft of the NIST Cyber AI Profile. We are working toward publishing a ... Read more - [FTC Chairman Andrew N. Ferguson Launches Healthcare Task Force](https://compliance-by-design.net/2026/03/20/ftc-chairman-andrew-n-ferguson-launches-healthcare-task-force/): Task force will take a coordinated and integrated approach to protect patients, healthcare workers, and taxpayers Today, Federal Trade Commission Chairman Andrew N. Ferguson directed FTC staff to form a Healthcare Task Force that will engage in a coordinated, integrated approach to healthcare enforcement and advocacy to protect American patients, healthcare workers, and taxpayers. View ... Read more - [All aboard: the NIST Cybersecurity for IoT Program is headed to our next stop! Share your input on where we’re headed during our Future Directions Two-Day Workshop on March 31st.](https://compliance-by-design.net/2026/03/20/all-aboard-the-nist-cybersecurity-for-iot-program-is-headed-to-our-next-stop-share-your-input-on-where-were-headed-during-our-future-directions-two-day-workshop-on-march-31st/): Workshop Details… We’re looking forward to hearing from the community during our “Future Directions” Workshop! Date: March 31 – April 1, 2026 Where: NIST’s Gaithersburg campus! Registration and Details: HERE Can’t make it? We still want to hear from you – email us at IoTSecurity [at] nist.gov (IoTSecurity[at]nist[dot]gov). All Aboard for Product Cybersecurity The NIST ... Read more - [Ways forward on monitoring and recording antisemitism in the EU](https://compliance-by-design.net/2026/03/19/ways-forward-on-monitoring-and-recording-antisemitism-in-the-eu/): Language English Press release 0 Secondary theme Equality Hate crime EU Charter of Fundamental Rights EU Charter of Fundamental Rights Title VI: Justice Article 47 – Right to an effective remedy and to a fair trial EU Charter of Fundamental Rights Title III: Equality Article 21 – Non-discrimination Highlights Report / Paper / Summary 18 ... Read more - [Fundamental rights training at Brussels airport on the use of biometrics](https://compliance-by-design.net/2026/03/19/fundamental-rights-training-at-brussels-airport-on-the-use-of-biometrics/): Language English Press release 0 Secondary theme Asylum Borders and information systems EU Charter of Fundamental Rights EU Charter of Fundamental Rights Title II: Freedoms Article 19 – Protection in the event of removal, expulsion or extradition EU Charter of Fundamental Rights Title II: Freedoms Article 8 – Protection of personal data Highlights Report / ... Read more - [Guidance for border guards now also available in Polish](https://compliance-by-design.net/2026/03/19/guidance-for-border-guards-now-also-available-in-polish/): Language English Press release 0 Secondary theme Asylum Borders and information systems EU Charter of Fundamental Rights EU Charter of Fundamental Rights Title II: Freedoms Article 19 – Protection in the event of removal, expulsion or extradition EU Charter of Fundamental Rights Title II: Freedoms Article 8 – Protection of personal data Highlights Report / ... Read more - [Fundamental rights awareness raising session for Europol](https://compliance-by-design.net/2026/03/19/fundamental-rights-awareness-raising-session-for-europol/): Language English Press release 0 Secondary theme Data Unlawful profiling EU Charter of Fundamental Rights EU Charter of Fundamental Rights Title II: Freedoms Article 8 – Protection of personal data EU Charter of Fundamental Rights Title III: Equality Article 21 – Non-discrimination Highlights Report / Paper / Summary 18 November 2021 Directive (EU) 2017/541 on ... Read more - [Marking the International Holocaust Remembrance Alliance Presidency handover](https://compliance-by-design.net/2026/03/19/marking-the-international-holocaust-remembrance-alliance-presidency-handover/): Language English Press release 0 Secondary theme Equality Racial and ethnic origin EU Charter of Fundamental Rights EU Charter of Fundamental Rights Title III: Equality Article 21 – Non-discrimination EU Charter of Fundamental Rights Title III: Equality Article 22 – Cultural, religious and linguistic diversity Highlights Report / Paper / Summary 18 November 2021 Directive ... Read more - [EDPB and EDPS support strengthening EU’s cybersecurity and easing compliance while protecting individuals’ personal data](https://compliance-by-design.net/2026/03/19/edpb-and-edps-support-strengthening-eus-cybersecurity-and-easing-compliance-while-protecting-individuals-personal-data/): Brussels, 19 March 2026 – The European Data Protection Board (EDPB) and the European Data Protection Supervisor (EDPS) have adopted a Joint Opinion on the European Commission’s proposal for a Cybersecurity Act 2 (CSA2) and the proposal on amendments to the Network and Information Security 2 (NIS2) Directive. On 20 January 2026, the Commission published ... Read more - [CEF 2026: EDPB launches coordinated enforcement action on transparency and information obligations under the GDPR](https://compliance-by-design.net/2026/03/19/cef-2026-edpb-launches-coordinated-enforcement-action-on-transparency-and-information-obligations-under-the-gdpr/): Brussels, 19 March – The EDPB has launched its Coordinated Enforcement Framework (CEF) action for 2026*. Following a year-long coordinated action on the right to erasure in 2025, the CEF’s focus this year will shift to compliance with the obligations of transparency and information under the GDPR. The GDPR ensures that individuals are informed when ... Read more - [Law enforcement webinar on AI fundamental rights issues](https://compliance-by-design.net/2026/03/19/law-enforcement-webinar-on-ai-fundamental-rights-issues/): Language English Press release 0 Secondary theme Data Artificial intelligence and big data EU Charter of Fundamental Rights EU Charter of Fundamental Rights Title III: Equality Article 21 – Non-discrimination Highlights Report / Paper / Summary 18 November 2021 Directive (EU) 2017/541 on combating terrorism ― Impact on fundamental rights and freedoms This report examines ... Read more - [FTC Secures Settlement Against Xponential Fitness for Franchise Rule Violations](https://compliance-by-design.net/2026/03/18/ftc-secures-settlement-against-xponential-fitness-for-franchise-rule-violations/): Fitness franchisor to pay $17 million for allegedly misrepresenting key information in franchise disclosures including time to open and operate studios The Federal Trade Commission has secured a settlement against Xponential Fitness for Franchise Rule violations and related deceptive practices, including $17 million that will be returned to franchisees, which is the largest amount ever ... Read more - [FTC Sends More Than $10.9 Million to Consumers Harmed by Credit Repair Pyramid Scheme](https://compliance-by-design.net/2026/03/17/ftc-sends-more-than-10-9-million-to-consumers-harmed-by-credit-repair-pyramid-scheme/): The Federal Trade Commission is sending more than $10.9 million to consumers harmed by a credit repair operation known by multiple names including Financial Education Services (FES), United Wealth Education, United Credit Education Services, and Youth Financial Literacy Foundation. View Press Release - [FTC Stops Proposed Merger of Leading Cataract-Surgery Device Makers](https://compliance-by-design.net/2026/03/17/ftc-stops-proposed-merger-of-leading-cataract-surgery-device-makers/): Deal threatened to raise prices and reduce innovation for cataract laser eye surgery systems, impacting surgeons and millions of American patients In response to the announcement that Alcon, Inc. and Alcon Research, LLC (collectively referred to as Alcon) has abandoned its efforts to purchase LENSAR, Inc. (Lensar), Federal Trade Commission Bureau of Competition Director Daniel ... Read more - [FTC Warns 97 Auto Dealership Groups About Deceptive Pricing](https://compliance-by-design.net/2026/03/13/ftc-warns-97-auto-dealership-groups-about-deceptive-pricing/): Letters stress the need for truthful and transparent pricing in the automotive industry The Federal Trade Commission is sending letters to 97 auto groups nationwide, warning them that the prices they advertise must be the total price—including all mandatory fees—that consumers will be rView Press Release - [FTC Seeks Public Comment on a Proposed Rulemaking Regarding Unfair or Deceptive Rental Housing Fee Practices](https://compliance-by-design.net/2026/03/12/ftc-seeks-public-comment-on-a-proposed-rulemaking-regarding-unfair-or-deceptive-rental-housing-fee-practices/): Proposal seeks comments on ways to protect consumers from unfair or deceptive rental housing fees and foster competition, price transparency, and marketplace efficiency The Federal Trade Commission today announced it is seeking public comment on a proposed rulemaking to address nationwide potential unfair or deceptive fee practices in connection with rental housing. View Press Release - [EDPB and EDPS support harmonisation of clinical trials under European Biotech Act, but call for specific safeguards for sensitive health data](https://compliance-by-design.net/2026/03/12/edpb-and-edps-support-harmonisation-of-clinical-trials-under-european-biotech-act-but-call-for-specific-safeguards-for-sensitive-health-data-2/): Brussels, 12 March 2026 – The European Data Protection Board (EDPB) and the European Data Protection Supervisor (EDPS) have adopted a Joint Opinion on the European Commission’s Proposal for a European Biotech Act. The Proposal aims to strengthen Europe’s biotechnology and biomanufacturing sectors, particularly in the area of health, by streamlining the regulatory framework and ... Read more - [Information session on FRA’s Better legislation report and Charter-related activities](https://compliance-by-design.net/2026/03/12/information-session-on-fras-better-legislation-report-and-charter-related-activities/): Language English Press release 0 Secondary theme Systems EU Charter of Fundamental Rights EU Charter of Fundamental Rights EU Charter of Fundamental Rights Title VII: General provisions Article 51 – Field of application EU Charter of Fundamental Rights Title VII: General provisions Article 52 – Scope and interpretation Highlights Report / Paper / Summary 18 ... Read more - [EDPB and EDPS support harmonisation of clinical trials under European Biotech Act, but call for specific safeguards for sensitive health data](https://compliance-by-design.net/2026/03/12/edpb-and-edps-support-harmonisation-of-clinical-trials-under-european-biotech-act-but-call-for-specific-safeguards-for-sensitive-health-data/): Brussels, 12 March 2026 – The European Data Protection Board (EDPB) and the European Data Protection Supervisor (EDPS) have adopted a Joint Opinion on the European Commission’s Proposal for a European Biotech Act. The Proposal aims to strengthen Europe’s biotechnology and biomanufacturing sectors, particularly in the area of health, by streamlining the regulatory framework and ... Read more - [EU gender-based violence survey results presented to UN experts on statistics on children](https://compliance-by-design.net/2026/03/11/eu-gender-based-violence-survey-results-presented-to-un-experts-on-statistics-on-children/): Language English Press release 0 Secondary theme Equality Children, youth and older people EU Charter of Fundamental Rights EU Charter of Fundamental Rights Title III: Equality Article 24 – The rights of the child EU Charter of Fundamental Rights Title III: Equality Article 25 – The rights of the elderly Highlights Report / Paper / ... Read more - [Ideas Lab explores fundamental rights implications of EU return policy reforms](https://compliance-by-design.net/2026/03/11/ideas-lab-explores-fundamental-rights-implications-of-eu-return-policy-reforms/): Language English Press release 0 Secondary theme Asylum Irregular migration, return and immigration detention EU Charter of Fundamental Rights EU Charter of Fundamental Rights Title I: Dignity Article 4 – Prohibition of torture and inhuman or degrading treatment or punishment EU Charter of Fundamental Rights Title II: Freedoms Article 19 – Protection in the event ... Read more - [FTC Seeks Public Comment in Response to Advance Notice of Proposed Rulemaking Regarding Negative Option Marketing Practices](https://compliance-by-design.net/2026/03/11/ftc-seeks-public-comment-in-response-to-advance-notice-of-proposed-rulemaking-regarding-negative-option-marketing-practices/): The Commission seeks comment on whether it should consider amending the current Rule to better address deceptive or unfair negative option practices The Federal Trade Commission announced today that it is seeking public comment on an Advance Notice of Proposed Rulemaking (ANPRM) concerning the agency’s Rule Concerning the Use of Prenotification Negative Option Plans, commonly ... Read more - [FTC Sends Checks Totaling More Than $47.2 Million to Consumers Deceived by Invitation Homes’ Undisclosed Fees and Other Unlawful Charges](https://compliance-by-design.net/2026/03/11/ftc-sends-checks-totaling-more-than-47-2-million-to-consumers-deceived-by-invitation-homes-undisclosed-fees-and-other-unlawful-charges/): Eligible consumers include those who paid for certain fees and charges between January 2021 and September 2024 The Federal Trade Commission is sending checks totaling more than $47.2 million to eligible consumers deceived by undisclosed fees and other unlawful charges by Invitation Homes, one of the largest landlords of single-family homes. View Press Release - [FRA speaks at EESC civil society week about the EU’s Civil Society Strategy](https://compliance-by-design.net/2026/03/06/fra-speaks-at-eesc-civil-society-week-about-the-eus-civil-society-strategy/): Language English Press release 0 Secondary theme Systems Civil society EU Charter of Fundamental Rights EU Charter of Fundamental Rights Title II: Freedoms Article 11 – Freedom of expression and information EU Charter of Fundamental Rights Title II: Freedoms Article 12 – Freedom of assembly and of association Highlights Report / Paper / Summary 18 ... Read more - [Stakeholder event on political advertising: agenda available now](https://compliance-by-design.net/2026/03/06/stakeholder-event-on-political-advertising-agenda-available-now/): Brussels, 6 March – The EDPB organises a remote event to collect stakeholders’ input on its Guidelines on the processing of personal data to target or deliver political advertisements under the regulation on the transparency and targeting of political advertising, on 27 March 2026. The agenda is available here This will be an opportunity to ... Read more - [National launch of FRA Roma report in Ireland](https://compliance-by-design.net/2026/03/05/national-launch-of-fra-roma-report-in-ireland/): Language English Press release 0 Secondary theme Equality Roma EU Charter of Fundamental Rights EU Charter of Fundamental Rights Title III: Equality Article 21 – Non-discrimination EU Charter of Fundamental Rights Title III: Equality Article 22 – Cultural, religious and linguistic diversity Highlights Report / Paper / Summary 18 November 2021 Directive (EU) 2017/541 on ... Read more - [Roma inclusion and empowerment in Bulgaria](https://compliance-by-design.net/2026/03/05/roma-inclusion-and-empowerment-in-bulgaria/): Language English Press release 0 Secondary theme Equality Roma EU Charter of Fundamental Rights EU Charter of Fundamental Rights Title III: Equality Article 21 – Non-discrimination EU Charter of Fundamental Rights Title III: Equality Article 22 – Cultural, religious and linguistic diversity Highlights Report / Paper / Summary 18 November 2021 Directive (EU) 2017/541 on ... Read more - [The Spanish DPA fined Securitas Direct 100 000 EUR for making the exercise of data subject rights more difficult by directing individuals to a chargeable telephone number](https://compliance-by-design.net/2026/09/23/the-spanish-dpa-fined-securitas-direct-100-000-eur-for-making-the-exercise-of-data-subject-rights-more-difficult-by-directing-individuals-to-a-chargeable-telephone-number/): Background information Date of final decision: 1 February 2023 National case Controller: SECURITAS DIRECT, S.A. Legal Reference(s): Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject) Decision: Administrative fine, Compliance order Key words: Data subject rights Summary of the Decision Origin of the case   A consumer ... Read more - [FTC Endorses Education Department Proposal to Expand Higher Education Accreditation Options](https://compliance-by-design.net/2026/09/23/ftc-endorses-education-department-proposal-to-expand-higher-education-accreditation-options/): The Federal Trade Commission strongly endorsed the Department of Education’s proposed reforms to promote competition among accreditation agencies. Increased competition among accreditors and lower administrative burdens could lower the cost and improve the quality of higher education for millions of American students. View Press Release - [EDPB harmonises fining methodology and adopts final DSA-GDPR guidelines](https://compliance-by-design.net/2026/09/22/edpb-harmonises-fining-methodology-and-adopts-final-dsa-gdpr-guidelines/): Brussels, 21 September – During its latest plenary, the EDPB has adopted guidelines on the application of the power to impose administrative fines in relation to other corrective powers under the GDPR and the final version of its guidelines on the interplay between the Digital Services Act (DSA) and the GDPR. The new EDPB guidelines ... Read more - [The EU KIDS Act: what your product would have to do](https://compliance-by-design.net/2026/09/21/the-eu-kids-act-what-your-product-would-have-to-do/): On 17 September 2026, the European Commission proposed an EU KIDS Act. It would regulate how age is established online, set an EU-wide minimum age of 15 for social media accounts, and impose binding safe-design rules on social networks, video-sharing platforms, online games, software application stores, and AI companions. It would apply to your product if ... Read more - [FTC Announces Additional Payments to Consumers Stemming from FTC’s Amazon Prime Settlement](https://compliance-by-design.net/2026/09/18/ftc-announces-additional-payments-to-consumers-stemming-from-ftcs-amazon-prime-settlement/): Under a revised order, more consumers will qualify for refunds with the maximum payment increased from $51 to $200 View Press Release - [FTC Takes Historic Action Against Multilevel Marketing Operator Amway for Unfair and Deceptive Business Practices](https://compliance-by-design.net/2026/09/18/ftc-takes-historic-action-against-multilevel-marketing-operator-amway-for-unfair-and-deceptive-business-practices/): Proposed order will require Amway and two of its affiliates to pay $225 million, the largest monetary recovery ever collected from an MLM in an FTC action Amway Corp., one of the largest multilevel marketing companies in the U.S., and two of its affiliates—World Wide Group, L.L.C. (WWG) and Leadership Team Development Inc.View Press Release - [FleetCor Agrees to Pay $100 Million to Resolve Administrative Action After Federal Court Finds that It Violated the FTC Act by Charging Unauthorized Fees](https://compliance-by-design.net/2026/09/18/fleetcor-agrees-to-pay-100-million-to-resolve-administrative-action-after-federal-court-finds-that-it-violated-the-ftc-act-by-charging-unauthorized-fees/): FTC alleged that the company, now known as Corpay, charged customers hidden or otherwise unauthorized fees and deceived users about savings from its fuel cards FleetCor and its CEO will pay $100 million to settle a Federal Trade Commission administrative action alleging that the company charged its customers, who overwhelmingly are small businesses, undisclosed fees ... Read more - [FTC Takes Action to Prevent Anticompetitive Arrangement in Beretta, Ruger Deal](https://compliance-by-design.net/2026/09/17/ftc-takes-action-to-prevent-anticompetitive-arrangement-in-beretta-ruger-deal/): FTC continues crackdown on competitors sharing company directors in violation of Section 8 of the Clayton Act The Federal Trade Commission took action to resolve antitrust concerns arising from a stock purchase agreement between two of the largest firearm manufacturers, Beretta Holding S.A. (Beretta) and Sturm, Ruger & Co. Inc. (Ruger), by accepting a proposed ... Read more - [FTC Publishes Price Transparency FAQs for Auto Dealers](https://compliance-by-design.net/2026/09/16/ftc-publishes-price-transparency-faqs-for-auto-dealers/): Staff of the Federal Trade Commission today published frequently asked questions on price transparency to help the automobile industry comply with the FTC Act.View Press Release - [Failure to respect the rights of individuals: The CNIL fined EXTIA 300 000 EUR](https://compliance-by-design.net/2026/09/12/failure-to-respect-the-rights-of-individuals-the-cnil-fined-extia-300-000-eur/): Background information Date of final decision: 21 July 2026 National case Legal Reference(s): Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 17 (Right to erasure ‘right to be forgotten’) Decision: Administrative fine Key words: Data subject rights Summary of the Decision Origin of the case ... Read more - [FTC Publishes Proposed 2027 Budget for Horseracing Integrity and Safety Authority](https://compliance-by-design.net/2026/09/11/ftc-publishes-proposed-2027-budget-for-horseracing-integrity-and-safety-authority/): The Federal Trade Commission is seeking comment on the Horseracing Integrity and Safety Authority’s proposed 2027 budget as submitted to the Commission and published in the Federal Register. View Press Release - [Health data breach: the CNIL fined Hôpital Privé de la Loire 500 000 EUR](https://compliance-by-design.net/2026/09/10/health-data-breach-the-cnil-fined-hopital-prive-de-la-loire-500-000-eur/): Background information Date of final decision: 3 September 2026 National case Controller: Hôpital Privé de la Loire Legal Reference: Article 32 (Security of processing), Article 34 (Communication of a personal data breach to the data subject),  Decision: Administrative fine Keywords: Cybersecurity, Personal data breaches, Health and research Summary of the Decision Origin of the case In ... Read more - [FTC Withdraws Obsolete Policy Statement](https://compliance-by-design.net/2026/09/10/ftc-withdraws-obsolete-policy-statement/): Commission takes action to rescind unnecessary 2021 guidance document The Federal Trade Commission rescinded the 2021 Policy Statement on Breaches by Health Apps and Other Connected Devices. View Press Release - [FTC Takes Action Against Payment Processor Humboldt Merchant Services for Knowingly Facilitating Payment Processing for Sham Merchants](https://compliance-by-design.net/2026/09/09/ftc-takes-action-against-payment-processor-humboldt-merchant-services-for-knowingly-facilitating-payment-processing-for-sham-merchants/): Under proposed order, defendant will be required to pay $12 million, stop payment processing for certain categories of merchants Payment processing company Humboldt Merchant Services will pay $12 million and be permanently banned from processing payments for merchants with a heightened risk of potential fraud to settle allegations that Humboldt processed payments for merchants that ... Read more - [Payment Processor Nuvei Must Implement Robust Merchant Screening Practices and Pay $4.85 Million to Settle FTC Charges that the Firm Facilitated Merchant Fraud](https://compliance-by-design.net/2026/09/05/payment-processor-nuvei-must-implement-robust-merchant-screening-practices-and-pay-4-85-million-to-settle-ftc-charges-that-the-firm-facilitated-merchant-fraud/): Nuvei and its subsidiaries alleged to have knowingly processed for merchants engaged in fraudulent activity Global payment processor Nuvei will pay $4.85 million to settle the Federal Trade Commission’s charges that the firm opened and maintained payment processing accounts for merchants that it knew or should have known were engaged in deception, including tech support ... Read more - [Data Protection Commission announces Final Decision following Inquiry into the Health Service Executive (HSE)](https://compliance-by-design.net/2026/09/04/data-protection-commission-announces-final-decision-following-inquiry-into-the-health-service-executive-hse/): Background information Date of final decision: 28 August 2026 National case Legal Reference(s): Article 5 (Principles relating to processing of personal data), Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject) Decision: Administrative fine, Compliance ... Read more - [FTC Extends Public Comment on Proposed Policy Statement Regarding Personalized Pricing](https://compliance-by-design.net/2026/09/04/ftc-extends-public-comment-on-proposed-policy-statement-regarding-personalized-pricing/): The Federal Trade Commission extended by seven days the public comment period on the proposed enforcement policy statement regarding personalized pricingView Press Release - [Statement Regarding Fairfield Medical Center’s Sale to Adena Health](https://compliance-by-design.net/2026/09/03/statement-regarding-fairfield-medical-centers-sale-to-adena-health/): On Sept. 1, 2026, Adena Health announced its acquisition of Fairfield Medical Center (FMC), a hospital system in southeastern Ohio. The announcement follows a Federal Trade Commission investigation of an earlier attempt by a different acquirer—OhioHealth—to buy FMC. View Press Release - [FTC, States Sue Amazon Over Secret Ad Surcharge Scheme](https://compliance-by-design.net/2026/09/01/ftc-states-sue-amazon-over-secret-ad-surcharge-scheme/): FTC and 22 state attorneys general allege Amazon concealed unfair charges in its digital advertising auction pricing Today, 22 states joined the Federal Trade Commission in filing suit against Amazon, alleging that the company engaged in deceptive and unfair practices that secretly inflated prices in its online search advertising auctions.View Press Release - [FTC Finalizes Orders with Cox Media Group, Two Other Firms Settling Charges They Deceived Customers About “Active Listening” AI-Powered Marketing Service](https://compliance-by-design.net/2026/08/28/ftc-finalizes-orders-with-cox-media-group-two-other-firms-settling-charges-they-deceived-customers-about-active-listening-ai-powered-marketing-service/): The Federal Trade Commission finalized orders requiring Cox Media Group (CMG) and two other firms to pay a total of $930,000 to settle allegations they deceived customers by falsely claiming to offer an AI-powered service that could target localized ads based on conversations captured from consumers’ smart devices and that consumers had opted into such ... Read more - [Back to the Future: Why Agentic AI Needs a Strong Identity Foundation](https://compliance-by-design.net/2026/08/27/back-to-the-future-why-agentic-ai-needs-a-strong-identity-foundation/): As AI matures, enterprises and customers are rapidly deploying agents seeking to unlock the next level of automation and productivity. Agentic AI shows potential to handle a multitude of use cases, from buying personal items on Amazon to customer service applications to enterprise security and software development. However, early agentic deployments are repeating a familiar ... Read more - [FTC Announces 2027 Telemarketer Fees to Access the National Do Not Call Registry](https://compliance-by-design.net/2026/08/27/ftc-announces-2027-telemarketer-fees-to-access-the-national-do-not-call-registry/): The Federal Trade Commission today announced new fees for telemarketers to access phone numbers on the National Do Not Call (DNC) Registry for Fiscal Year 2027 which begins on October 1, 2026. View Press Release - [FTC Approves Final Consent Order in Ascension Health-AmSurg Deal](https://compliance-by-design.net/2026/08/26/ftc-approves-final-consent-order-in-ascension-health-amsurg-deal/): The Federal Trade Commission finalized a consent order involving Ascension Health Alliance’s (Ascension) proposed $3.9 billion acquisition of AmSurg LLC. View Press Release - [FTC Secures Order Resolving Antitrust Concerns with Zillow-Redfin Agreement](https://compliance-by-design.net/2026/08/25/ftc-secures-order-resolving-antitrust-concerns-with-zillow-redfin-agreement/): Proposed order ends allegedly unlawful agreement, requires Redfin to reenter market for internet listing services and positions company as a stronger competitor The Federal Trade Commission, joined by five states, today notified the court that it will file a stipulated order that resolves its litigation against Zillow and Redfin and restores competition in the online ... Read more - [FTC Files Amicus Brief to Protect Competition in Biologic Drug Markets](https://compliance-by-design.net/2026/08/22/ftc-files-amicus-brief-to-protect-competition-in-biologic-drug-markets/): The Federal Trade Commission filed an amicus brief in an antitrust case alleging that drug manufacturer Amgen illegally acquired exclusive rights to patent applications that it shaped to cover Enbrel—a drug used to treat rheumatoid arthritis and other inflammatory conditions—allowing Amgen to extend its monopoly over the biologic drug.View Press Release - [FTC Seeks Comment on Enforcement Policy Statement Regarding Personalized Pricing](https://compliance-by-design.net/2026/08/20/ftc-seeks-comment-on-enforcement-policy-statement-regarding-personalized-pricing/): Input sought on a proposed policy statement outlining legal concerns with the use of personal data to set prices The Federal Trade Commission today announced it is seeking public comment on an enforcement policy statement regarding personalized pricing, which is the use of personal data to set prices according to the amount that a company ... Read more - [FTC, Connecticut Secure $4 Million Settlement with Manchester City Nissan Over Deceptive Fees Allegations](https://compliance-by-design.net/2026/08/20/ftc-connecticut-secure-4-million-settlement-with-manchester-city-nissan-over-deceptive-fees-allegations/): The Federal Trade Commission and state of Connecticut today secured a $4 million settlement with a Manchester, Conn., auto dealer and its owners and managers resolving allegations the business was, among other things, double-charging for “certified pre-owned” vehicles and collecting other fees without consumer authorization.  View Press Release - [NIST Releases Tips & Tactics for Building Automation & Control System Cybersecurity](https://compliance-by-design.net/2026/08/19/nist-releases-tips-tactics-for-building-automation-control-system-cybersecurity/): Recent cyberattacks highlight the growing threat to operational technology (OT) used in critical infrastructure. Whether you work for an infrastructure owner/operator or are a consumer of an infrastructure service, the events of the past few weeks have made it clear that cybersecurity is an important factor in ensuring the safe and reliable delivery of critical ... Read more - [Statement on FTC Win Blocking Loctite, Liquid Nails Construction Adhesive Merger](https://compliance-by-design.net/2026/08/18/statement-on-ftc-win-blocking-loctite-liquid-nails-construction-adhesive-merger/): The Federal Trade Commission secured an important victory in the fight to lower the cost of housing construction materials for Americans by preventing German multinational Henkel AG & Co. KGaA (Henkel), the manufacturer of the industry-leading Loctite brand construction adhesives, from acquiring Loctite’s main competitor, Liquid Nails.  View Press Release - [Bill Payment Firm Doxo to Pay $2.1 Million to Settle FTC Allegations It Deceived Consumers and Charged Them Add-On Fees](https://compliance-by-design.net/2026/08/18/bill-payment-firm-doxo-to-pay-2-1-million-to-settle-ftc-allegations-it-deceived-consumers-and-charged-them-add-on-fees/): Online bill payment firm Doxo will pay $2.1 million to settle Federal Trade Commission allegations that the company and two of its co-founders used misleading search ads to impersonate consumers’ billers and misled consumers about millions of dollars in fees they tacked on to consumers’ bills. View Press Release - [Stronger Cybersecurity Programs Start with People: NIST Wants Your Input on the Path Forward for Human-Centered Cybersecurity](https://compliance-by-design.net/2026/08/17/stronger-cybersecurity-programs-start-with-people-nist-wants-your-input-on-the-path-forward-for-human-centered-cybersecurity/): When was the last time a cybersecurity process at work made you want to scream? Maybe it was a password requirement so complicated you had to write it down (defeating the purpose), a phishing simulation test that felt more like a trap than a lesson, or a confusing security warning pop-up that interrupted your work. ... Read more - [FTC Sends More than $23.8 Million to Drivers and Diners Harmed by Grubhub’s Deceptive Advertising Claims and Other Unlawful Conduct](https://compliance-by-design.net/2026/08/13/ftc-sends-more-than-23-8-million-to-drivers-and-diners-harmed-by-grubhubs-deceptive-advertising-claims-and-other-unlawful-conduct/): The Federal Trade Commission is sending payments totaling more than $23.8 million to drivers harmed by Grubhub’s deceptive earnings claims and diners harmed by the company’s misleading and unlawful conduct. View Press Release - [Shaping the NVD for the Future: We Need Your Feedback on AI-Enabled Vulnerability Management](https://compliance-by-design.net/2026/08/12/shaping-the-nvd-for-the-future-we-need-your-feedback-on-ai-enabled-vulnerability-management/): For over two decades, the NIST National Vulnerability Database (NVD) has served as the U.S. government repository for standards-based vulnerability management data and as a foundational resource for cybersecurity risk analysis, vulnerability management, compliance automation, and software security. New Opportunities for the NVD via Automation Our cybersecurity landscape is changing dramatically and is being reconfigured ... Read more - [FTC Stops Sprawling Credit Repair Scheme that Scammed Consumers Out of Nearly $200 Million](https://compliance-by-design.net/2026/08/11/ftc-stops-sprawling-credit-repair-scheme-that-scammed-consumers-out-of-nearly-200-million/): Scheme allegedly deceptively posed as debt collectors and creditors, used false and misleading promises to collect illegal upfront fees and recurring charges At the request of the Federal Trade Commission, a federal court has temporarily halted a bogus credit repair scheme run by a sprawling network of 17 related companies and their principals. View Press ... Read more - [FTC Ditches ‘Disparate Impact’](https://compliance-by-design.net/2026/08/08/ftc-ditches-disparate-impact/): Commission will no longer bring claims under this pernicious legal theory The Federal Trade Commission today announced a policy statement clarifying that the Commission will not pursue claims based on disparate-impact or “unfair discrimination” theories. View Press Release - [Stakeholder event on guidelines on the interplay between data protection and competition law: express your interest](https://compliance-by-design.net/2026/08/01/stakeholder-event-on-guidelines-on-the-interplay-between-data-protection-and-competition-law-express-your-interest/): Brussels, 30 July – The EDPB and the European Commission organise a remote stakeholder event in the context of their joint work on upcoming guidelines on the interplay between competition and data protection. The event will take place on 15 October 2026 and is an opportunity for stakeholders to inform and support the ongoing work ... Read more - [Statements on the Grant of Early Termination of the FTC’s Investigation of IonQ’s Proposed Acquisition of SkyWater](https://compliance-by-design.net/2026/08/01/statements-on-the-grant-of-early-termination-of-the-ftcs-investigation-of-ionqs-proposed-acquisition-of-skywater/): The Federal Trade Commission granted early termination of its review of quantum computing developer IonQ Inc.’s proposed acquisition of SkyWater Technologies Inc., a quantum chip fabrication company. View Press Release - [FTC and States Act Against Hims & Hers for Deceptive and Unlawful Privacy Practices](https://compliance-by-design.net/2026/07/30/ftc-and-states-act-against-hims-hers-for-deceptive-and-unlawful-privacy-practices/): Complaint alleges telehealth provider shared consumers’ sensitive health information with third-party advertising platforms despite promising patient privacy The Federal Trade Commission, joined by Utah and California, by and through Los Angeles County Counsel, today sued Hims & Hers alleging that the telehealth provider shared consumers’ sensitive health information about medical conditions with third-party advertising platforms ... Read more - [FTC Takes Action Against Elite Events for Bypassing Ticket Purchase Limits in Violation of Better Online Ticket Sales Act](https://compliance-by-design.net/2026/07/28/ftc-takes-action-against-elite-events-for-bypassing-ticket-purchase-limits-in-violation-of-better-online-ticket-sales-act/): Proposed order settling FTC allegations will require company and its executives to pay $300,000 and ban them from using unlawful tactics to bypass ticket purchase limits Ticket broker Elite Events and its operators will pay $300,000 in civil penalties to resolve Federal Trade Commission allegations that the firm purchased millions of dollars’ worth of tickets ... Read more - [Stakeholder event on guidelines on the interplay between data protection and competition law: save the date](https://compliance-by-design.net/2026/07/24/stakeholder-event-on-guidelines-on-the-interplay-between-data-protection-and-competition-law-save-the-date/): Brussels, 23 July – The EDPB and the European Commission organise a remote stakeholder event in the context of their joint work on upcoming guidelines on the interplay between competition and data protection. The event will take place on 15 October 2026 and is an opportunity for stakeholders to inform and support the ongoing work ... Read more - [FTC Returns Money to Consumers Harmed by Trend Deploy’s Deceptive Marketing](https://compliance-by-design.net/2026/07/23/ftc-returns-money-to-consumers-harmed-by-trend-deploys-deceptive-marketing/): The Federal Trade Commission is sending more than $672,000 to consumers deceived by the operator of Trend Deploy, Frank Romero. The FTC is mailing 9,419 checks to affected consumers, who should cash their checks within 90 days, as indicated on the check. View Press Release - [Student Loan Forgiveness Scammer Permanently Banned from Debt Relief Industry and Telemarketing](https://compliance-by-design.net/2026/07/22/student-loan-forgiveness-scammer-permanently-banned-from-debt-relief-industry-and-telemarketing/): Dennise Merdjanian, an operator of a student loan debt forgiveness scheme, will be permanently banned from the debt relief industry and telemarketing under a proposed order resolving the Federal Trade Commission’s charges that she and other operators took more than $45.9 million from consumers as part of their illegal student loan debt relief operatioView Press Release - [Founders of Celsius Network Ordered to Pay $16.5 Million to Resolve FTC Charges](https://compliance-by-design.net/2026/07/21/founders-of-celsius-network-ordered-to-pay-16-5-million-to-resolve-ftc-charges/): Proposed orders also ban defendants from marketing or selling products or services that can be used to deposit or withdraw assets Alexander Mashinsky, the former CEO of cryptocurrency platform Celsius Network Inc. (Celsius), and his business partners, Shlomi Daniel Leon and Hanoch “Nuke” Goldstein, will pay a total of $16.5 million to resolve the Federal ... Read more - [EDPB calls for legal basis for cross-regulatory information sharing](https://compliance-by-design.net/2026/07/18/edpb-calls-for-legal-basis-for-cross-regulatory-information-sharing/): Dublin, 17 July– At a high-level meeting in Dublin on 16 and 17 July 2026, the European Data Protection Board (EDPB) called for a clear legal basis for the sharing of information among regulators with different competences. The Board also discussed how to further expand efforts to support a consistent application of the General Data ... Read more - [FTC Approves Final Order Against TruHeight for Deceptive and Unsubstantiated Advertising of Supplements for Kids and Teens](https://compliance-by-design.net/2026/07/16/ftc-approves-final-order-against-truheight-for-deceptive-and-unsubstantiated-advertising-of-supplements-for-kids-and-teens/): The Federal Trade Commission finalized an order with Vanilla Chip LLC—which does business as TruHeight—and its two principals requiring them to pay $750,000, while barring them from making false or unsupported health claims and using fake or incentivized consumer reviews. View Press Release - [EDPB requires Belgian DPA to handle the merits of NOYB cookie banner complaint](https://compliance-by-design.net/2026/07/15/edpb-requires-belgian-dpa-to-handle-the-merits-of-noyb-cookie-banner-complaint/): Brussels, 14 July–The EDPB has published its binding decision of 28 May 2026 under Art.65(1)(a) GDPR*. The decision concerns a dispute submitted by the Belgian Data Protection Authority (DPA) about a complaint against Vlaamse Radio-en Televisieomroeporganisatie (VRT) – a public broadcasting company based in Belgium. The complaint was lodged with the Austrian DPA by the Austrian-based NGO Noyb on ... Read more - [FTC Secures Major Settlement with Caremark, Resolving Antitrust Case Against Second Drug Middleman](https://compliance-by-design.net/2026/07/15/ftc-secures-major-settlement-with-caremark-resolving-antitrust-case-against-second-drug-middleman/): Settlement will drive down patients’ out-of-pocket costs, increase transparency and ensure community pharmacies are treated fairly The Federal Trade Commission secured a settlement agreement with one of the nation’s largest pharmacy benefit managers (PBMs) and its affiliated entities, marking yet another important victory in the Commission’s fight to lower healthcare costs for Americans. View Press ... Read more - [FTC Endorses Ohio Supreme Court Proposal to Weaken ABA’s Law School Accreditation Monopoly](https://compliance-by-design.net/2026/07/15/ftc-endorses-ohio-supreme-court-proposal-to-weaken-abas-law-school-accreditation-monopoly/): The Federal Trade Commission lauded an Ohio Supreme Court proposal to lower the cost of legal representation by ending the American Bar Association’s explicit control over whether an Ohio bar applicant’s legal education is sufficient for practicing law in the state, undermining its monopoly. View Press Release - [FTC Secures $12 Million in Penalties for Pre-Merger Reporting Act Violations](https://compliance-by-design.net/2026/07/14/ftc-secures-12-million-in-penalties-for-pre-merger-reporting-act-violations/): FTC alleges Edwards Lifesciences and Genesis structured JC Medical deal to avoid federal antitrust review The Federal Trade Commission secured $12 million in penalties to settle charges alleging that Edwards Lifesciences Corp. acquired medical device maker JC Medical from Genesis MedTech Group Limited without complying with the notification and waiting period requirements of the Hart-Scott-Rodino ... Read more - [RentGrow to Pay $2.25 Million to Settle FTC Allegations the Company Violated the Fair Credit Reporting Act and FTC Act](https://compliance-by-design.net/2026/07/10/rentgrow-to-pay-2-25-million-to-settle-ftc-allegations-the-company-violated-the-fair-credit-reporting-act-and-ftc-act/): FTC alleges tenant screening company violated the FCRA’s requirements, including by reporting duplicate records and by failing to disclose sources of data RentGrow, a provider of consumer reports for tenant screening, will be required to pay $2.25 million to settle Federal Trade Commission allegations that the company violated the Fair Credit Reporting Act (FCRA), including ... Read more - [EDPB sheds light on anonymisation and web scraping for generative AI and adopts final version of guidelines on blockchain](https://compliance-by-design.net/2026/07/09/edpb-sheds-light-on-anonymisation-and-web-scraping-for-generative-ai-and-adopts-final-version-of-guidelines-on-blockchain/): Brussels, 8 July– During its latest plenary, the EDPB has adopted guidelines on anonymisation and guidelines on web scraping in the context of generative AI. In addition, the Board has adopted the final version of its guidelines on the processing of personal data through blockchain technologies. Understanding anonymous data The new EDPB guidelines bring clarity ... Read more - [FTC, States Secure Settlement with Deere & Company, Advancing Farmers’ Right to Repair](https://compliance-by-design.net/2026/07/09/ftc-states-secure-settlement-with-deere-company-advancing-farmers-right-to-repair/): Settlement resolves FTC and states’ lawsuit alleging Deere unfairly restricted the ability of farmers and independent technicians to repair John Deere farm equipment The Federal Trade Commission, along with five states, secured an important settlement in an antitrust lawsuit against farm equipment manufacturer Deere & Company that will ensure farmers can enjoy the right to ... Read more - [FTC Sends More Than $2.7 Million to Consumers Harmed by Handy Technologies](https://compliance-by-design.net/2026/07/08/ftc-sends-more-than-2-7-million-to-consumers-harmed-by-handy-technologies/): View Press Release - [FTC Warns Companies Making Questionable ‘Made in the USA’ Claims](https://compliance-by-design.net/2026/07/07/ftc-warns-companies-making-questionable-made-in-the-usa-claims/): Warning letters sent to seven companies urge compliance with FTC’s Made in the USA Standard The Federal Trade Commission today issued warning letters to seven companies that appear to have misrepresented certain products as “Made in the USA,” and one company that appears to have misrepresented certain products as “Made in Texas,” despite indications that ... Read more - [FTC Approves Final Order Against Publishing.com, Settling Allegations It Misled Consumers](https://compliance-by-design.net/2026/07/02/ftc-approves-final-order-against-publishing-com-settling-allegations-it-misled-consumers/): The Federal Trade Commission finalized an order with Publishing.com LLC and its two principals, settling allegations that they misled consumers about how much money consumers were likely to earn using their self-publishing products. View Press Release - [FTC and DOJ Issue Fiscal Year 2025 Hart-Scott-Rodino Annual Report](https://compliance-by-design.net/2026/07/02/ftc-and-doj-issue-fiscal-year-2025-hart-scott-rodino-annual-report/): The Federal Trade Commission and the Department of Justice’s (DOJ) Antitrust Division released their 48th Annual Hart-Scott-Rodino (View Press Release - [Travel App Hopper to Pay $35 Million to Settle FTC Allegations It Charged Fees Without Consent and Deceived Users About Fees and Benefits of Some Products](https://compliance-by-design.net/2026/07/02/travel-app-hopper-to-pay-35-million-to-settle-ftc-allegations-it-charged-fees-without-consent-and-deceived-users-about-fees-and-benefits-of-some-products/): Complaint alleges that Hopper made millions of dollars flouting its ‘no hidden fees’ promises The companies that operate the Hopper travel apps have agreed to pay $35 million and will be prohibited from deceiving consumers about fees to settle the Federal Trade Commission’s allegations that they unfairly charged consumers hidden fees and misrepresented the total ... Read more - [EDPB and AMLA to develop Joint Guidelines on partnerships for information sharing](https://compliance-by-design.net/2026/07/01/edpb-and-amla-to-develop-joint-guidelines-on-partnerships-for-information-sharing/): Brussels/Frankfurt, 1 July – The EDPB and the Anti-Money Laundering Authority (AMLA) are working together to bring greater clarity to a question of growing importance for industry and authorities alike: how to share information to fight financial crime while protecting personal data. Why information sharing matters The fight against financial crime depends on cooperation, and ... Read more - [FTC Seeks Public Comment on Policy Statement Addressing AI Accuracy](https://compliance-by-design.net/2026/07/01/ftc-seeks-public-comment-on-policy-statement-addressing-ai-accuracy/): The Federal Trade Commission is seeking public comment on a proposed policy statement addressing concerns that AI companies may be manipulating the bView Press Release - [FTC Requires Amazon to Pay $2.25 Million to Resolve Charges It Knowingly Violated the Fair Credit Reporting Act](https://compliance-by-design.net/2026/06/30/ftc-requires-amazon-to-pay-2-25-million-to-resolve-charges-it-knowingly-violated-the-fair-credit-reporting-act/): FTC alleged that Amazon routinely denied requests from identity theft victims seeking records of fraudulent transactions made with their personal data Amazon will pay $2.25 million in civil penalties to settle Federal Trade Commission allegations that the online retail giant knowingly violated the Fair Credit Reporting Act (FCRA) by refusing to provide transaction records to ... Read more - [FTC Secures Agreement with Havas to Restore Competition in the Digital Advertising Ecosystem](https://compliance-by-design.net/2026/06/30/ftc-secures-agreement-with-havas-to-restore-competition-in-the-digital-advertising-ecosystem/): Today, the Federal Trade Commission, along with a coalition of states, scored another major victory in the fight against collusive conduct in the advertising industry. Advertising agency Havas Media Group USA LLC (Havas) has agreed to a proposed FTC order to resolve allegations that it engaged in unlawful collusion that led to the demonetization of ... Read more - [Verifiable Digital Credential Presentment](https://compliance-by-design.net/2026/06/30/verifiable-digital-credential-presentment/): This blog post is #4 in our series on Verifiable Digital Credentials (VDCs). Our other posts can be found via Post #1, Post #2, and Post #3. In earlier posts, we discussed how verifiable digital credentials (VDCs) are issued and compared the underlying credential formats (ISO/IEC “mdoc” vs. W3C Verifiable Credentials). In this post, we ... Read more - [One-Stop-Shop case digest on right to object and right to erasure updated](https://compliance-by-design.net/2026/06/25/one-stop-shop-case-digest-on-right-to-object-and-right-to-erasure-updated/): Brussels, 25 June – The EDPB has published an update of the One-Stop-Shop (OSS) case digest on right to object and right to erasure. This project has been developed in the framework of the of the Support Pool of Experts programme, which aims to support cooperation among Data Protection Authorities (DPAs). Thematic one-stop-shop case digests ... Read more - [Supporting GDPR consistency: EDPB launches dedicated form](https://compliance-by-design.net/2026/06/24/supporting-gdpr-consistency-edpb-launches-dedicated-form/): Brussels, 24 June – The EDPB has launched a dedicated contact form for stakeholders to report possible inconsistencies in how the GDPR is interpreted across Europe. This initiative reflects the commitments set out in the EDPB Helsinki Statement on enhanced clarity, support and engagement, aimed at strengthening the dialogue with stakeholders and ensuring consistent GDPR ... Read more - [Advancing Product Security: New IoT Guidance and New Engagement](https://compliance-by-design.net/2026/06/24/advancing-product-security-new-iot-guidance-and-new-engagement/): It may be summertime, but the NIST Cybersecurity for the Internet of Things (IoT) Program isn’t hitting the hammock! Organizations are managing growing device complexity, evolving threats, and pressure to turn guidance into operational decisions…so we remain focused on helping stakeholders apply security guidance in ways that are practical and actionable. What’s Been Happening Lately? ... Read more - [FTC Approves Final Consent Order in Pest-Control Noncompete Matter](https://compliance-by-design.net/2026/06/23/ftc-approves-final-consent-order-in-pest-control-noncompete-matter/): The Federal Trade Commission finalized a consent order that requires Rollins Inc.—one of the largest pest-control companies in the United States—to stop enforcing noncompete agreements against more than 18,000 employees nationwide. View Press Release - [FTC Files Amicus Brief to Protect Consumers from Pharmaceutical Monopolies](https://compliance-by-design.net/2026/06/23/ftc-files-amicus-brief-to-protect-consumers-from-pharmaceutical-monopolies/): The Federal Trade Commission filed an amicus brief in an antitrust case alleging that drug manufacturer Johnson & Johnson illegally maintained a monopoly through anticompetitive conduct.View Press Release - [EDPB gets a new look: discover the new website and brand identity](https://compliance-by-design.net/2026/06/22/edpb-gets-a-new-look-discover-the-new-website-and-brand-identity/): Brussels, 22 June – Since its establishment in 2018, the core mission of the EDPB has been to uphold and safeguard the right to data protection. Over the years, the EDPB has played a key role in ensuring the consistent application of the GDPR across Europe, by providing guidance on key GDPR concepts and the ... Read more - [ENISA's NIS360 2026: NIS2 sector maturity, and where supervisors will likely look next](https://compliance-by-design.net/2026/06/22/enisas-nis360-2026-nis2-sector-maturity-and-where-supervisors-will-likely-look-next/): Summary The ENISA NIS360 is the EU cybersecurity agency’s annual assessment of how mature and how critical each high-criticality sector under the NIS2 Directive is. The 2026 edition, published on 28 May 2026, reports that sector maturity is steadily rising while criticality stays stable. The report places ICT service management, space, and several infrastructure sectors ... Read more - [FTC Sues to Stop Sprawling Enterprise Operating Unlawful Subscription Schemes](https://compliance-by-design.net/2026/06/17/ftc-sues-to-stop-sprawling-enterprise-operating-unlawful-subscription-schemes/): Agency alleges Genesis Tech enterprise and its owners operated misleading internet-based subscription schemes, billed consumers without authorization and made cancellation difficult At the Federal Trade Commission’s request, a federal court has temporarily halted a sprawling enterprise of deceptive subscription schemes—comprised of 15 corporations and eight individuals—from continuing to deceive consumers with hidden costs and recurring ... Read more - [FTC Data Show People Reported Losing $3.5 Billion to Imposter Scams in 2025](https://compliance-by-design.net/2026/06/15/ftc-data-show-people-reported-losing-3-5-billion-to-imposter-scams-in-2025/): Imposter scams were the most reported fraud last year, with reported losses increasing nearly three times since 2020 New data from the Federal Trade Commission reveal that people reported losing a staggering $3.5 billion to imposter scams in 2025, with reported losses increasing nearly three times since 2020. View Press Release - [Coordinated Supervision Committee extends scope to include Eurodac](https://compliance-by-design.net/2026/06/12/coordinated-supervision-committee-extends-scope-to-include-eurodac/): Brussels, 12 June – As of today, coordinated supervision of the European Union’s asylum and migration database (Eurodac) will be carried out by the Coordinated Supervision Committee (CSC). Eurodac is an information system initially designed to compare the fingerprints of asylum applicants and irregular migrants, which has evolved into a full asylum and migration management ... Read more - [EDPB meets with EU Commissioner McGrath and adopts common data breach notification template](https://compliance-by-design.net/2026/06/10/edpb-meets-with-eu-commissioner-mcgrath-and-adopts-common-data-breach-notification-template/): Brussels, 10 June – During its latest plenary, the EDPB met with Michael McGrath, Commissioner for Democracy, Justice, the Rule of Law and Consumer Protection. In addition, the Board has adopted a common data breach notification template. The Board held a meeting with Commissioner McGrath, engaging in a fruitful discussion about common priorities and ongoing ... Read more - [FTC Finalizes Consent Order in Sevita, BrightSpring Acquisition](https://compliance-by-design.net/2026/06/10/ftc-finalizes-consent-order-in-sevita-brightspring-acquisition/): The Federal Trade Commission finalized a consent order involving Sevita Health’s acquisition of BrightSpring Health Services Inc.’s community living business. View Press Release - [FTC Returns Nearly $3 Million to Consumers Deceived by Mortgage Relief Scheme](https://compliance-by-design.net/2026/06/09/ftc-returns-nearly-3-million-to-consumers-deceived-by-mortgage-relief-scheme/): The Federal Trade Commission is returning nearly $3 million to consumers deceived by the Golden Home Services, also known as Home Matters USA, mortgage relief scheme, which falsely promised to reduce homeowners’ mortgage payments and prevent foreclosures. View Press Release - [‘Architect’ of Law Firm DEI Programs Dissolves](https://compliance-by-design.net/2026/06/06/architect-of-law-firm-dei-programs-dissolves/): Diversity Lab LLC, a for-profit diversity, equity and inclusion (DEI) consultancy, has permanently ceased operations following a Federal Trade Commission investigation. The company informed the FTC that it filed paperwork to dissolve itself as a business entity with the California Secretary of State on Friday. View Press Release - [FTC Gives Final Approval to Order Against Illuminate Settling Allegations It Failed to Secure Students’ Personal Data](https://compliance-by-design.net/2026/06/06/ftc-gives-final-approval-to-order-against-illuminate-settling-allegations-it-failed-to-secure-students-personal-data/): Following a public comment period, the Federal Trade Commission finalized a modified order requiring Illuminate Education Inc. to implement a data security program, limit collection and retention of consumer data, and delete unnecessary data to settle charges that the company’s data security failures led to a major data breach involving the personal data of millions ... Read more - [FTC Issues Report to Congress on Adoption Practices](https://compliance-by-design.net/2026/06/04/ftc-issues-report-to-congress-on-adoption-practices/): Report details Commission efforts to ensure honest advertising among adoption intermediaries The Federal Trade Commission issued a report to Congress detailing the agency’s efforts to protect consumers interested in private adoption.View Press Release - [FTC Seeks Comment on X Corp. Petition to Set Aside or Modify FTC Order Concerning Twitter](https://compliance-by-design.net/2026/06/03/ftc-seeks-comment-on-x-corp-petition-to-set-aside-or-modify-ftc-order-concerning-twitter/): The Federal Trade Commission is seeking public comment on a petition from X Corp., formerly known as Twitter, to set aside or modify its 2022 settlemenView Press Release - [FTC Sues to Stop Deceptive Mortgage Assistance Relief Operation that Targets Homeowners](https://compliance-by-design.net/2026/06/03/ftc-sues-to-stop-deceptive-mortgage-assistance-relief-operation-that-targets-homeowners/): Defendants allegedly misled consumers into paying unlawful upfront fees by claiming their mortgage relief program was associated with the federal CARES Act At the Federal Trade Commission’s request, a U.S. district court in California has temporarily halted an allegedly deceptive mortgage assistance relief operation that claims it can provide mortgage relief assistance under the Coronavirus Aid, Relief ... Read more - [FTC Sues to Stop Amare Global Holdings from Misrepresenting the Health Benefits of Its Dietary Supplements for Children and Adults](https://compliance-by-design.net/2026/06/02/ftc-sues-to-stop-amare-global-holdings-from-misrepresenting-the-health-benefits-of-its-dietary-supplements-for-children-and-adults/): Commission also alleges Amare deceived consumers about how much income they could generate selling Amare’s products The Federal Trade Commission today sued multilevel marketer (MLM) Amare Global Holdings Inc.View Press Release - [FTC Requires Divestiture of Ambulatory Surgery Centers to Protect Patients from Anticompetitive Effects of Ascension Health-AmSurg Deal](https://compliance-by-design.net/2026/06/02/ftc-requires-divestiture-of-ambulatory-surgery-centers-to-protect-patients-from-anticompetitive-effects-of-ascension-health-amsurg-deal/): Proposed FTC order seeks to protect Americans from higher surgery costs, lower quality care The Federal Trade Commission took action to protect American patients from higher outpatient surgery costs by requiring national nonprofit health system Ascension Health Alliance (Ascension) to divest several surgery center facilities to complete its proposed $3.9 billion acquisition of AmSurg LLC. ... Read more - [FTC, Nevada Will Require Tax-Relief Scammers to Pay Cash and Turn Over Assets Worth Nearly $10 Million to Settle Charges They Misled Consumers about Tax-Relief Services](https://compliance-by-design.net/2026/06/02/ftc-nevada-will-require-tax-relief-scammers-to-pay-cash-and-turn-over-assets-worth-nearly-10-million-to-settle-charges-they-misled-consumers-about-tax-relief-services/): Settlement bans individual defendants from debt relief services, tax preparation services, telemarketing and impersonation The operators of a tax debt relief scheme will surrender over $8 million in cash and turn over additional assets to settle the Federal Trade Commission and State of Nevada’s charges that the defendants pocketed millions from consumers by impersonating federal ... Read more - [FTC to Require Cox Media Group, Two Other Firms to Pay Nearly $1 Million to Settle Charges They Deceived Customers About “Active Listening” AI-Powered Marketing Service](https://compliance-by-design.net/2026/05/22/ftc-to-require-cox-media-group-two-other-firms-to-pay-nearly-1-million-to-settle-charges-they-deceived-customers-about-active-listening-ai-powered-marketing-service/): FTC alleged the companies falsely claimed service could target ads using conversations from consumers’ smart devices and that consumers had opted in The Federal Trade Commission will require Cox Media Group (CMG) and two smaller marketing firms to pay a total of $930,000 to settle allegations they deceived customers by falsely claiming to offer an ... Read more - [Federal Court Holds Payment Processor Cliq in Contempt for Violating FTC Order](https://compliance-by-design.net/2026/05/20/federal-court-holds-payment-processor-cliq-in-contempt-for-violating-ftc-order/): Court issues order finding Cliq, formerly known as Cardflex, and its operators Andrew Phillips and John Blaugrund in contempt and imposing $6.5 million sanction At the request of the Federal Trade Commission, a federal judge ordered Cliq Inc., a payment processing company, and its operators to pay $6.5 million in sanctions for violating a 2015 federal ... Read more - [FTC Sends Warning Letters to Companies About Compliance with the TAKE IT DOWN Act](https://compliance-by-design.net/2026/05/20/ftc-sends-warning-letters-to-companies-about-compliance-with-the-take-it-down-act/): The law requires platforms to provide a mechanism to request the removal of nonconsensual intimate images The Federal Trade Commission sent warning letters today to a dozen websites advising them of their obligation to comply with the TAKE IT DOWN Act (TIDA), which requires platforms to give people a way to request the removal of ... Read more - [FTC Begins Enforcing the TAKE IT DOWN Act](https://compliance-by-design.net/2026/05/19/ftc-begins-enforcing-the-take-it-down-act/): New FTC website allows people to submit complaints about companies’ failure to comply with law requiring platforms to remove nonconsensual intimate images at request of victims The Federal Trade Commission today began enforcing the TAKE IT DOWN Act (TIDA), a law requiring platforms, at the request of victims, to remove intimate photos or videos shared ... Read more - [Lead Defendants in the IM Mastery Academy MLM Scheme to Turn Over Tens of Millions of Dollars in Assets to Settle FTC Charges](https://compliance-by-design.net/2026/05/14/lead-defendants-in-the-im-mastery-academy-mlm-scheme-to-turn-over-tens-of-millions-of-dollars-in-assets-to-settle-ftc-charges/): FTC alleged Chris and Isis Terry and their companies used false or baseless earnings claims to promote their training services and MLM venture The Federal Trade Commission and State of Nevada will require five individual and corporate IM Mastery Academy defendants, including ringleaders Chris and Isis Terry, to surrender assets valued at nearly $90 million to ... Read more - [Shutterstock to Pay $35 Million to Settle FTC Allegations Over Illegal Subscription and Cancellation Practices](https://compliance-by-design.net/2026/05/14/shutterstock-to-pay-35-million-to-settle-ftc-allegations-over-illegal-subscription-and-cancellation-practices/): Online licensing platform allegedly charged consumers without their consent, failed to disclose auto-renewals and cancellation charges, and made cancelling difficult Shutterstock Inc. will pay $35 million to settle Federal Trade Commission allegations that the online digital photo and video platform illegally made tens of millions of dollars from a range of unfair and deceptive practices, ... Read more - [FTC and Illinois Take Action to Stop Deceptive Conduct by Company that Created Thousands of Business Listings of Fake Local Home Repair Businesses](https://compliance-by-design.net/2026/05/12/ftc-and-illinois-take-action-to-stop-deceptive-conduct-by-company-that-created-thousands-of-business-listings-of-fake-local-home-repair-businesses/): Premium Home Service also used fake online reviews to boost ratings and siphon customers from true local businesses The U.S. Department of Justice, on behalf of the Federal Trade Commission, and the state of Illinois sued Chicago-based company Premium Home Service (PHS) and its owner for fraudulently creating thousands of fake online business listings for ... Read more - [FTC Chairman Ferguson Advises Companies to Comply with the Take It Down Act](https://compliance-by-design.net/2026/05/12/ftc-chairman-ferguson-advises-companies-to-comply-with-the-take-it-down-act/): Federal Trade Commission Chairman Andrew N. Ferguson sent letters today to more than a dozen prominent technology companies reminding businesses of their obligation to comply fully with the Take It Down Act (TIDA) no later than May 19. Signed into law last year by President Donald J.View Press Release - [FRA contributes to discussions at EU Migration and Asylum Pact contact committees’ meetings](https://compliance-by-design.net/2026/05/09/fra-contributes-to-discussions-at-eu-migration-and-asylum-pact-contact-committees-meetings/): Language English Press release 0 Primary theme Asylum Asylum, migration and borders The increase in migration has presented opportunities and challenges across Europe. FRA encourages rights-compliant responses. We provide practical expertise on this complex issue. This includes regular updates, focus papers and toolkits. We also outline policy alternatives and best practices. Access to asylum Borders ... Read more - [Cypriot seminar on fundamental rights in return operations](https://compliance-by-design.net/2026/05/09/cypriot-seminar-on-fundamental-rights-in-return-operations/): Language English Press release 0 Secondary theme Asylum Irregular migration, return and immigration detention EU Charter of Fundamental Rights EU Charter of Fundamental Rights Title I: Dignity Article 4 – Prohibition of torture and inhuman or degrading treatment or punishment EU Charter of Fundamental Rights Title II: Freedoms Article 19 – Protection in the event ... Read more - [FTC Chairman Ferguson Issues Noncompete Warning Letter to Mortgage Connect](https://compliance-by-design.net/2026/05/09/ftc-chairman-ferguson-issues-noncompete-warning-letter-to-mortgage-connect/): Federal Trade Commission Chairman Andrew N.View Press Release - [FRA contributes to the development of Latvia’s civil society strategy](https://compliance-by-design.net/2026/05/08/fra-contributes-to-the-development-of-latvias-civil-society-strategy/): Language English Press release 0 Secondary theme Systems National human rights systems and bodies EU Charter of Fundamental Rights EU Charter of Fundamental Rights Title VI: Justice Article 47 – Right to an effective remedy and to a fair trial Highlights Report / Paper / Summary 18 November 2021 Directive (EU) 2017/541 on combating terrorism ... Read more - [European Parliament Committee hearing on AI and gender-based violence](https://compliance-by-design.net/2026/05/08/european-parliament-committee-hearing-on-ai-and-gender-based-violence/): Language English Press release 0 Secondary theme Data Artificial intelligence and big data EU Charter of Fundamental Rights EU Charter of Fundamental Rights Title III: Equality Article 21 – Non-discrimination Highlights Report / Paper / Summary 18 November 2021 Directive (EU) 2017/541 on combating terrorism ― Impact on fundamental rights and freedoms This report examines ... Read more - [Charter handbook now also available in Ukrainian](https://compliance-by-design.net/2026/05/08/charter-handbook-now-also-available-in-ukrainian/): Language English Press release 0 Secondary theme Systems EU Charter of Fundamental Rights EU Charter of Fundamental Rights EU Charter of Fundamental Rights Title VII: General provisions Article 51 – Field of application EU Charter of Fundamental Rights Title VII: General provisions Article 52 – Scope and interpretation Highlights Report / Paper / Summary 18 ... Read more - [FTC Finalizes Consent Order in Valvoline-Greenbriar Deal](https://compliance-by-design.net/2026/05/08/ftc-finalizes-consent-order-in-valvoline-greenbriar-deal/): The Federal Trade Commission finalized a consent order resolving antitrust concerns related to a deal between Valvoline Inc. and private equity firm Greenbriar Equity Fund V., L.P. (Greenbriar). View Press Release - [FTC to Co-Host Workshop on Financial Services with Institute for Consumer Financial Choice on May 14-15](https://compliance-by-design.net/2026/05/08/ftc-to-co-host-workshop-on-financial-services-with-institute-for-consumer-financial-choice-on-may-14-15/): Workshop will focus on marketplace developments in five years since the creation of Taskforce on Federal Consumer Financial Law The Federal Trade Commission will co-host a workshop on May 14-15, 2026, with George Mason University Law School’s Institute for Consumer Financial Choice (ICFC) focusing on developments in the financial services marketplace in the five years ... Read more - [Europe Day 2026: let’s celebrate together](https://compliance-by-design.net/2026/05/06/europe-day-2026-lets-celebrate-together/): Brussels, 5 May – On 9 May each year, Europeans celebrate the anniversary of the Schuman Declaration, the key moment which led to the creation of the EU as we know it today. To mark this special occasion, the European institutions will open their doors to the public on 9 May 2026, and we would ... Read more ## Pages - [Accessibility](https://compliance-by-design.net/accessibility/): Last updated: 6 February 2026 At Reson8 we strongly believe in the strength of diversity. So we strive to make www.compliance.by-design.net accessible to all users. If you experience any difficulty accessing our website or its content, please contact us at info [at] reson8.eu and we will do our best to address your concerns. Current Accessibility ... Read more - [Developments](https://compliance-by-design.net/developments/) - [Our mission](https://compliance-by-design.net/our-mission/): Making Compliance Simple, Affordable, and Faster Compliance shouldn’t be a roadblock to innovation. Meeting security, privacy, and regulatory standards is essential, but it doesn’t have to be complex or expensive. We’re on a mission to drive down the cost of compliance for software by helping businesses navigate requirements efficiently—without reinventing the wheel. Smarter Compliance, Faster Time to ... Read more - [General Terms of Service](https://compliance-by-design.net/terms/): Version: 6 February 2026 Our mission is to lower the cost and overhead associated with legal compliance for organizations and their digital product teams. We aim to help them identify and meet their legal and compliance related obligations by surfacing potentially applicable requirements and possible solutions to help meet these in the most efficient manner. ... Read more - [Resources](https://compliance-by-design.net/resources/) - [Laws](https://compliance-by-design.net/sources-of-law/): This section serves as a reference library for laws and other authoritative sources of legal obligations that can only be fully complied with by embedding them directly into the software stack. This section breaks down laws and relevant court cases on: These are not just checkboxes to tick. These obligations underpin comprehensive requirements specifications that ... Read more - [Case studies](https://compliance-by-design.net/case-studies/): Welcome to our Case Studies section, where we delve into real-world examples of companies that have successfully integrated compliance by design into their software development processes. Explore Success Stories Our collection of case studies offers valuable insights into the strategies and practices that have led to successful compliance outcomes. Each story highlights the unique challenges ... Read more - [Developments](https://compliance-by-design.net/feedzy-demo-page/) - [About](https://compliance-by-design.net/about/): Welcome to “Compliance by Design,” your go-to resource for integrating regulatory compliance into software product development. In an era where data privacy, security, and ethical standards are more critical than ever, our blog aims to bridge the gap between complex regulatory requirements and practical implementation strategies. Our Mission At “Compliance by Design,” we believe that ... Read more - [Contact](https://compliance-by-design.net/contact/): We are on a mission to make software compliance easier. Software compliance doesn’t have to be hard. With the right information and guidance it can be a smooth process that secures frictionless market access for your product. If you are interested in helping us make it easy, please get in touch. We’d love to discuss. - [Main Archive](https://compliance-by-design.net/blog/) - [Styles](https://compliance-by-design.net/styles/): Headings – Sora This text is here as a visual reference to display the default H1 heading font. This text is here as a visual reference to display the default H2 heading font. This text is here as a visual reference to display the default H3 heading font. This text is here as a visual ... Read more - [Home](https://compliance-by-design.net/): Trending Solutions Latest Developments Making compliance easier, together. We are on a mission to make compliance easier. Have feedback or ideas, we’d love to hear from you. Contact Us - [Privacy Policy](https://compliance-by-design.net/privacy-policy/): Who we are Suggested text: Our website address is: http://compliance-by-design.net. Comments Suggested text: When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection. An anonymised string created from your email address (also called a ... Read more ## Optional - [Agent (MCP protocol)](websites-agents.hostinger.com/compliance-by-design.net/mcp) [comment]: # (Generated by Hostinger Tools Plugin)