🇪🇺 European Union

Data-protection & privacy developments in European Union (Europe (supranational)). Auto-maintained from the daily feeds; add curated notes freely.

📚 Full EU/GDPR reference: GDPR & EU Data Protection (core).

Tracker

• European Health Data Space Regulation (In effect)
  • The European Health Data Space (EHDS) Regulation came into force in March 2025, initiating a transition period. It seeks to create a unified framework for the use and exchange of electronic health data throughout the EU. The EHDS mandates that holders of electronic health data make their data accessible to health data access bodies (HDABs). These bodies will then make the data available on a secure platform to data users who have obtained an access permit. While users will generally only have access to anonymized data, they may, in exceptional circumstances, be granted access to pseudonymized data. Key components of the EHDS Regulation are scheduled for application in March 2029, with further provisions taking effect in March 2031.
  • European Health Data Space Regulation In effect The European Health Data Space (EHDS) Regulation cam — European Health Data Space Regulation In effect The European Health Data Space (EHDS) Regulation came into force in March 2025, initiating a transition period. It seeks to create a unified framework for the use and exchange of electronic health data throughout the EU. The EHDS mandates that holders of electronic health data make their data accessible to health data access bodies (HDABs). These bodies will then make the data available on a secure platform to data users who have obtained an access permit. While users will generally only have access to anonymized data, they may, in exceptional circumstances, be granted access to pseudonymized data. Key components of the EHDS Regulation are scheduled for application in March 2029, with further provisions taking effect in March 2031.

🆕 Recent additions (auto)

• 2026-09-07 Why the EU age-verification tool does not solve privacy concerns — An EU legislative proposal for a social media ban will be presented at the State of the European Union (SOTEU) annual address, but the tools which are pitched as “ready” and “privacy-preserving” fail on both counts. Here is a technical account of the shortcomings. The post Why the EU age-verification tool does not solve privacy concerns appeared first on European Digital Rights (EDRi) (European Digital Rights (EDRi))
• 2026-09-03 Data Protection Commission announces Final Decision following Inquiry into the Health Service Executive (HSE) — Background informationDate of final decision: 28 August 2026National caseLegal Reference(s): Article 5 (Principles relating to processing of personal data), Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject)Decision: Administrative fine, Compliance order, Communication order personal data breachKey words: GDPR enforcement, Data subjects rights, Fines,… (EDPB News)
• 2026-08-21 Data breach: the CNIL fined MOBIUS SOLUTIONS LTD €1 million (European Data Protection Board)
• 2026-08-21 Data breach: FREE MOBILE and FREE fined €42 million (European Data Protection Board)

Per-country folder. Curated + auto-enriched.