YOUR
Search

    27.11.2025

    Privacy Ticker November 2025


    The November issue of our Privacy Ticker deals with the changes in legislation, the current case law, regulatory investigations and enforcement actions and opinions.

    Topics in this issue are:

    Changes in legislation

    • Omnibus package: EU plans to amend GDPR, Data Act, AI Act, etc.
    • German Parliament passes NIS 2 Implementation Act

    Case law

    • Federal Court of Justice: Permissible transfer of positive data to SCHUFA
    • Administrative Court of Berlin: Duty to provide information on data origin in lettershop proceedings

    Regulatory investigations and enforcement actions

    • Federal Data Protection Authority: Recognition of the first consent management service
    • Croatia: EUR 4.5 million fine for intra-group data transfer to third country
    • Finland: Fines imposed on banks for security deficiencies in online banking

    Opinions

    • Hessian Data Protection Authority: Microsoft 365 can be used in compliance with data protection law

    The Privacy Ticker is available under this link or in the download area below.