Privacy Ticker September 2025

The September issue of our Privacy Ticker deals with the changes in legislation, the current case law, regulatory investigations and enforcement actions and opinions.

Topics in this issue are:

Changes in Legislation

• Data Act Applicable Since 12 September

Case law

• EGC: EU-US Data Privacy Framework Remains Effective
• ECJ: Pseudonymous Data can Lack Personal Reference
• ECJ: Negative Feelings can Justify GDPR Compensation
• Berlin Regional Court: AI-Generated Voice Violates Personal Rights and Privacy
• Administrative Court of Bremen: Automated Fee Notice Violates Data Protection

Regulatory investigations and enforcement actions

• France: Fine of EUR 325 Million Against Google For Email Advertising
• France: Fine of EUR 150 Million Against Shein For Cookies

Opinions

• Federal Network Agency: No Telecommunications Secrecy With Permitted Private Use of Emails in the Employment Relationship
• EDPB Guidelines on the Interplay Between the DSA and the GDPR

The Privacy Ticker is available under this link.