European Union: Data Protection

När arbetsgivare genomför bakgrundskontroller av arbetssökande måste de navigera komplexa dataskyddsregler. Ett nytt EU-domstolsavgörande från 2026 klargör att tillgång till offentlig information inte automatiskt ger rätt att använda den i rekryteringsprocesser, särskilt när det gäller brottmålsdomar och känsliga personuppgifter.

New EU e-Evidence rules take effect in Sweden from August 2026, requiring digital service providers to respond to cross-border law enforcement data requests within strict deadlines. Non-compliance carries administrative fees of up to 2% of global turnover, with liability based on strict liability principles. Service providers operating social networks, marketplaces, cloud services, and communications platforms serving Swedish users must establish designated points of contact and connect to EU-wide systems i

The European Court of Justice's Advocate General has delivered an opinion suggesting that the proportionality of data retention regimes should be assessed not only by the categories of data retained, but also by the technical arrangements surrounding that retention. This opinion raises questions about whether Ireland's 2022 Communications (Retention of Data) (Amendment) Act provides sufficiently...

The Central Bank of Ireland’s (CBI) consultation on its Regulatory Impact Assessments and Approach to Consultation closes for feedback on 30 September 2026.

Il Garante per la protezione dei dati personali ha sanzionato una società con €460.000 per aver violato la normativa sulla privacy nella gestione delle caselle di posta elettronica aziendale dei dipendenti. La decisione stabilisce che gli indirizzi email aziendali individualizzati e il loro contenuto costituiscono dati personali soggetti a garanzia di riservatezza, e che la conservazione sistematica dei messaggi richiede autorizzazione preventiva secondo lo Statuto dei lavoratori.

The Italian Data Protection Authority has ruled that an employer's systematic monitoring and retention of employee work email accounts constitutes unlawful data processing, imposing a substantial €460,000 fine. The case examines the boundaries between legitimate business interests and employee privacy rights, particularly regarding the confidentiality of work correspondence and the procedural requirements for workplace monitoring under Italian law.

France has definitively adopted Bill No. 339, establishing a general prohibition on access to online social networking services for children under fifteen years of age. The legislation, part of a broader international movement to regulate minors' access to social networks, creates significant compliance challenges for online platforms that must now determine whether their services fall within the law's scope and implement age-verification mechanisms that integrate safety by design.

The Court of Justice of the European Union has ruled on the extent of competition authorities' powers to seize business emails during antitrust investigations without prior judicial authorization. This landmark decision addresses fundamental questions about the balance between effective competition law enforcement and the protection of corporate communications under EU fundamental rights law.

This privacy statement outlines how cookies are used on this website and provides users with options to manage their cookie preferences. By accepting all cookies, users consent to analytics and targeting cookies being deployed on their device.