explore | Grilled Cheese

@joho68.bsky.social Oct 15, 2026, 10:17 AM

The best day to start was yesterday, the second best day is right now. Move! 🇪🇺

www.theregister.com/paas-and-iaa...

#uscloud #eucloud #europe #gdpr #privacy #dataskydd #dataprotection #molnet #usa #eu #foss #oss #opensource

@ipgeolocation.bsky.social Oct 15, 2026, 10:03 AM

The EU's new cloud sovereignty plan has 4 levels. Storing data in the EU only gets you level 1. Every outside service that sees your visitors' IPs is now part of the question. Run lookups on your own servers.

ipgeolocation.io/doc...
#DataSovereignty #GDPR

@noyb.eu Oct 15, 2026, 9:28 AM

🇳🇴 The Norwegian Data Protection Authority just fined the online advertising company #Xandr € 8.5 million (NOK 92 000 000) for its #GDPR violations. 💸 This is a major blow to the online adtech industry!

For more information, visit: noyb.eu/en/privacy-w...

Privacy win: Norwegian Authority fines Microsoft’s Xandr € 8.5 Million.

In 2020, the NCC and noyb filed three GDPR complaints against the dating app Grindr and several adtech companies that received personal data through the app. One of these complaints concerned Xandr, an online advertising company that now belongs to Microsoft.

Now, the Norwegian Data Protection Authority has decided that Microsoft’s Xandr violated the GDPR. It processed personal data, including sensitive information on sexual orientation, without a valid legal basis. Xandr was ordered to pay a fine of roughly € 8.5 million Euros.

The decision is a major blow for the online advertising and commercial surveillance industry.

The current fine shows that companies such as Xandr are eventually held accountable for their shady practices. Profiling people’s interests, habits, location and behavior requires valid consent – which adtech companies hardly ever obtain.

@nicfab.eu Oct 15, 2026, 9:03 AM

Daily Digest | 15 October 2026 Your daily dose of Privacy, Data Protection, AI & Cybersecurity news. 5 stories you should not miss. Read more: https://www.nicfab.eu/daily-digest/ #Privacy #AI #GDPR #Cybersecurity #TechLaw

@atmywitsend.wsocial.eu Oct 15, 2026, 8:06 AM

Let's be clear what's at stake: a 🇺🇸 tech firm now holds influence over one of Europe's largest health databases. 🇺🇸 law (FISA, Cloud Act) can compel 🇺🇸 companies to hand over data to 🇺🇸 authorities—precisely the risk the GDPR & Schrems II ruling were designed to prevent. 🧵3/4

#GDPR #SchremsII

@atmywitsend.wsocial.eu Oct 15, 2026, 8:06 AM

Health data is the most sensitive personal data there is: medical histories, prescriptions, appointment records, conditions you'd never want made public. 🧵2/4

#Nvidia #Doctolib #HealthData #GDPR #DataProtection

@atmywitsend.wsocial.eu Oct 15, 2026, 8:06 AM

Nvidia has bought a stake in Doctolib, France's leading health platform—used by tens of millions of patients across 🇫🇷, 🇩🇪, & 🇮🇹. 🧵1/4

#Nvidia #Doctolib #HealthData #GDPR #DataProtection

@redwood24.bsky.social Oct 15, 2026, 6:52 AM

HCL signed a deal yesterday to be the #DPO for another company processing #Medical #Data. Acting as external DPO for the hours they need a month. 👏 hunningsconsultancy.co.uk/dpo-service-... link to the service. Helping with their #compliance.

#dataprotection #MedicalBilling #business #GDPR #law

@etschneider.bsky.social Oct 14, 2026, 8:46 PM

People (i.e. European deputies who are fighting *AGAINST* our privacy rights (and maybe to "help" big tech) :
gdpr-omnibus.eu

#RGPD #GDPR #RightsProtection

@marketingnews.bsky.social Oct 14, 2026, 7:21 PM

ICYMI: EDPB says smart glasses makers can't rely on wearers to meet GDPR duties #GDPR #SmartGlasses #Privacy #DataProtection #AI

@ppc.land Oct 14, 2026, 7:20 PM

ICYMI: EDPB says smart glasses makers can't rely on wearers to meet GDPR duties #GDPR #SmartGlasses #Privacy #DataProtection #AI

@databreachesdigest.bsky.social Oct 14, 2026, 6:59 PM

Ransomware Operator Claims - Week 41 2026
237 Ransomware Victims tracked
www.dbdigest.com/2026/10/rans...
#databreach #databreaches #databreachesdigest #dataprivacy #GDPR #cybersec #cybersecurity #infosec #informationsecurity #cyberattack #hacked #malware #phishing #ransomware #ROCreport

@privacytrack.org Oct 14, 2026, 3:05 PM

Term of the day: Third Country

In data protection terms, a 'third country' generally refers to any country or territory outside the European Economic Area (EEA). When personal data is sent to such a country, additional...

Full definition: privacytrack.org/glossary/third-country

#privacy #GDPR

Third Country. In data protection terms, a 'third country' generally refers to any country or territory outside the European Economic Area (EEA). When personal data is sent to such a country, additional safeguards typically apply because it sits beyond the EU's core legal framework. The exact meaning can differ depending on whether you are looking at the EU GDPR or the UK GDPR.

@cookiegate.org Oct 14, 2026, 3:01 PM

Term of the day: A/B Testing of Banners

A/B testing of banners is a method of comparing two or more versions of a consent banner or ad banner to see which performs better against a chosen goal. Users are split into...

Full definition: cookiegate.org/glossary/ab-testing-of-banners

#privacy #GDPR

A/B Testing of Banners. A/B testing of banners is a method of comparing two or more versions of a consent banner or ad banner to see which performs better against a chosen goal. Users are split into groups, each shown a different version, and the results are measured to identify the more effective design. In a cookie consent context, this typically involves testing variations of a consent notice's layout, wording, or buttons.