The DPA held that a landlord violated principles of integrity and confidentiality under Article 5(1)(f) GDPR by disclosing a tenant’s personal data and alleged debts to the tenant’s workplace.

Le contexte Au cours de l'été 2025, un attaquant est parvenu à se connecter au dossier patient informatisé (DPI) de l’HÔPITAL PRIVÉ DE LA LOIRE, qui centralise l’ensemble des données des personnes prises en charge.

The DPA fined a controller €6,500 for failing to deactivate data subjects company accounts following their termination and providing inadequate information about its processing operations.

The DPA found that a hospital, victim of a data breach, lacked sufficient measures to protect the patients data pre breach and that its reaction to the breach - assigning a shared password and failing to inform 202,246 affected third parties of the breach - was in violation of Articles 32 and 34 GDPR...

The DPA fined the Italian branch of the Bank of Bilbao Vizcaya Argentina S.A. €5,508,000 for persistently sending in-app communications after a data subject had deactivated the feature and objected to such processing. Technical error was not found a sufficient justification.

Desde 26 de agosto, estão em vigor as regras da Resolução CFM que regulamenta o uso da inteligência artificial (IA) na Medicina

Claims follow scrutiny over monitors installing adware without user consent

3ª turma acompanhou Nancy Andrighi e entendeu que remoção por violação aos termos de uso deve assegurar meios para o exercício do contraditório.

The DPA fined an Italian credit information agency €120,000 for providing inadequate responses to data subject requests and violating privacy by design and default which actively prevented data subjects from exercising their rights.

TJ-SC declarou ilícito o tratamento de dados pessoais de consumidores e determinou a exclusão das informações da base de uma empresa

Biz describes its act of automated irresponsibility as 'a warning shot'

Pena foi fixada em 3 anos, 10 meses e 15 dias de reclusão, em regime aberto.

L’accélération de la transformation numérique dans l’enseignement conduit à l’utilisation de plus en plus fréquente d’outils collaboratifs en ligne (il peut s’agir d’espaces numériques de travail (ENT) ou d’outils alternatifs aux ENT).

The DPA fined an employer €4,000 for continuously recording workplace audio through CCTV. The measure was disproportionate and violated the data minimisation principle under Article 5(1)(c) GDPR.

Sawtooth waves you can't hear still mess with your Bluetooth. Firefox and Brave say they've got you covered

Background informationDate of final decision: 13 January 2026National caseController: FREE MOBILE and FREELegal Reference: Article 32 (Security of processing), Article 34 (Communication of a personal data breach to the data subject), Article 5 (Principles relating to processing of personal data)Decision: Administrative fineKey words: Administrative fine, Data security, Data breachSummary of the Decis

UBER regroupe UBER B.V., société néerlandaise située à Amsterdam, et UBER TECHNOLOGIES INC., société étatsunienne, dont le siège social est à San Francisco. UBER édite notamment une plateforme mettant en relation des chauffeurs VTC avec des utilisateurs.

The DPA fined a controller €60,000 for failing to comply with a corrective order requiring it to formalise and report its relationship with a processor.

Colegiado aplicou multa de 2% e determinou a notificação de Cristiano Chaves, Nelson Rosenvald e Flávio Tartuce.

Colegiado entendeu que o envio de conteúdo sem consentimento é suficiente para caracterizar a infração, independentemente de contato físico.

'Computer History' records clicks and typing to build ChatGPT memories

Mensagens e boleto com CPF e endereço foram enviados a pessoa estranha à relação contratual.

The DPA fined a provider of a hospital €300,000 for inadequate security measures which enabled a ransomware attack affecting health data of 84,000 people, alongside violations of Articles 28, 30 and 34 GDPR.

The DPA fined a telecom provider €200,000 for violating Article 6(1) GDPR after issuing a duplicate SIM card to an unauthorised third party without adequately verifying their identity.

Marketing AI agents as digital employees may make human workers worse at spotting errors and more likely to offload accountability.

The DPA held that an employee who shared a customer’s phone number with a third person for a personal favour, overstepping company rules, acted as separate controller. Further, the DPA fined the controller € 1,000 for the unlawful data transmission.

AI tools used to generate, edit or contextualise social media posts can introduce hidden biases that spread through online networks and shape public opinion, according to new research from the OII and the Hasso Plattner Institute.

Zoom Annotation Flaws Could Let a Meeting Participant Hijack Another Attendee's Client | Read more hacking news on The Hacker News cybersecurity news website and learn how to protect against cyberattacks and software vulnerabilities.

Os meios para cancelar a HBO Max dependem do tipo de contratação, como o site oficial, Play Store, App Store, Mercado Livre, Canais do Prime e outras plataformas

Foram identificadas falhas na implementação de medidas estruturais e procedimentos para prevenir e combater violações graves contra crianças e adolescentes

Para colegiado, permanência de conteúdo gerado por inteligência artificial em peça revela falha de revisão, mas não comprova dolo processual.

Sem autorização da escola ou pais, Instagram realizou ação voltada a estudantes para promover contas para adolescentes: 'foi muito ruim', diz direção.

The incident is being seen as the latest example of the AI tools going to any lengths to complete their tasks.

OpenAI launches GPT-5.6-Cyber, a reduced-safeguard model that completes 95% of advanced cyber requests and finds zero-day flaws.

Automação ajuda a organizar tribunais superiores, mas não elimina pensamento estratégico e julgamento crítico como diferenciais do advogado

Lei de combate à violência sexual contra crianças e adolescentes amplia poder de apuração, mas acende alerta para risco de nulidade de prova

One big caveat, though: You need your contact's phone number