Europe’s data protection supervisors have warned that proposals by the European Commission to reform privacy law by narrowing the definition of personal data could erode privacy rights for European ...
On 4 September 2025, the Court of Justice of the European Union (CJEU) delivered a ruling in EDPS v. SRB (Case C-413/23 P) that clarified how the EU General Data Protection Regulation (GDPR) applies ...
The GDPR expands the definition of personal data well beyond what people in the USA typically think of as Personally Identifiable Information (PII). For example, in the USA, PII is usually thought of ...