Abogado de Ciberseguridad y Privacidad: 2026-09-22
7 minutos en total. Esta edición está en inglés.
Data Protection Commission (Ireland), 2026-09-21. Leer, 4 min.
Ireland’s Data Protection Commission announced its final decision in an own-volition inquiry, opened in February 2020, into Google Ireland’s processing of location data in Web & App Activity, Location History, and Location Accuracy between 25 May 2018 and 4 February 2020, finding GDPR infringements on lawfulness and fairness, accountability, transparency, and retention. It imposed administrative fines totaling €403 million and ordered Google to bring its processing into compliance within six months, with the full decision to follow.
Por qué importa para este rol: You advise on breach and enforcement exposure, and a €403 million location-data decision with a six-month compliance order is a fresh, citable data point on how the DPC weighs lawfulness, transparency, and retention.
EDPB adopts guidelines on when to impose a GDPR fine and finalizes its DSA-GDPR interplay guidelines
European Data Protection Board, 2026-09-21. Leer, 3 min.
At its 21 September plenary the EDPB adopted guidelines on applying the power to impose administrative fines alongside other corrective powers under the GDPR, setting out a five-step methodology that data protection authorities should follow when deciding whether to fine, with 14 practical examples, and opened them to public consultation until 13 November 2026. It also adopted the final version of its guidelines on the interplay between the Digital Services Act and the GDPR, which will be published after linguistic checks.
Por qué importa para este rol: When you counsel clients on fine risk, the EDPB’s five-step methodology and its strong presumption of a fine for non-minor infringements is the framework regulators will now reason from, open for comment until 13 November 2026.
El cuestionario de esta edición ya cerró.