General Data Protection Regulation
Coverage of General Data Protection Regulation in the Nexus archive.
- EU court draws line between journalism and paid criminal record databases
The EU's highest court ruled that selling access to criminal records does not qualify as journalism, rejecting a claim by Legal Newsdesk Sweden that its Lexbase database is protected by free-expression exemptions. The court emphasized that GDPR privacy protections cannot be overridden by constitutional free-speech claims, even for entities with publication certificates.
- Zuck defends monitoring employees to win AI race in purported leaked audio
Meta CEO Mark Zuckerberg reportedly defended monitoring employees' computer activity to train AI, citing the need to win the AI race. The leaked audio, shared by worker advocacy group More Perfect Union, claims he emphasized collecting keystrokes and screenshots to improve AI capabilities. Meta confirmed AI-focused monitoring via its Model Capability Initiative but denied using data for surveillance or performance tracking.
- U.S. companies hit with record fines for privacy in 2025
U.S. states issued $3.45 billion in privacy-related fines to companies in 2025, driven by stronger state laws, interstate enforcement partnerships, and focus on AI's privacy impacts. California's Privacy Protection Agency enforced the California Consumer Privacy Act (CCPA) across diverse industries, signaling a shift from dormant enforcement to aggressive penalties.