The European Data Protection Board has adopted two opinions on the European Commission’s proposal to extend the validity of the UK’s data adequacy decisions under the GDPR and the Law Enforcement Directive until December 2031, allowing data flows between the EU and UK to continue without additional safeguards.
The Center for Democracy & Technology (CDT) has submitted detailed feedback on the U.S. National Institute of Standards and Technology’s (NIST) Proposed Zero Draft for a Standard on Documentation of AI Datasets and Models. While welcoming the effort to enhance transparency and accountability in AI, CDT urged NIST to include clearer guidance on system-level documentation, implementation practices, and data governance.
The EU’s Transparency and Targeting of Political Advertising (TTPA) regulation, which demands full disclosure of sponsors, ad spend and targeting, prompts Meta to halt political ad sales.
Over 40 civil society organisations have called on the European Commission to investigate whether Ireland’s privacy regulator, the Data Protection Commission (DPC), remains truly independent following the appointment of a former Meta lobbyist as one of its commissioners.
Member States and observers met on 15 October 2025 (10:00–13:00) in the ECOSOC Chamber, United Nations Headquarters, New York for the Second Preparatory Meeting of the WSIS+20 General Assembly overall review. Convened by the United Nations Department of Economic and Social Affairs (UN DESA) through its Division for Public Institutions and Digital Government (DPIDG), the [...]
MEPs from Renew Europe want the Commission to curb ‘addictive design’, mandate child-safe defaults and age verification mechanisms as evidence links heavy social media use to poor adolescent mental health.
Stakeholders are invited to review the proposed code points and degrees of similarity or suggest additions. Feedback is open until 4 December 2025, after which ICANN will finalize the data for use in the next gTLD evaluation process.
The International Organization for Standardization (ISO) has released a major update to its global privacy compliance standard, ISO 27701, for the first time since 2019. The revision makes the privacy framework a standalone certification system, providing organisations with clearer guidance on managing personal data, while expanding options for integration with other ISO standards.
In 2024, Microsoft found that in eight out of ten cybersecurity incidents it investigated, attackers attempted to access personal or sensitive data by using stolen login credentials. More than half of these breaches were motivated by profit rather than espionage, although state-sponsored groups continued to represent the most significant overall threat.
The guide is part of ORG’s Digital Rights Toolkit, designed to make data protection more accessible for communities often excluded from the digital system. It walks readers through the process of submitting Subject Access Requests (SARs) - formal inquiries that allow individuals to ask any organisation, including government bodies, what personal data it holds about them, how it is being used, and with whom it is shared.
Civil Society Alliances for Digital Empowerment (CADE) is a project co-funded by the European Union.
