Key developments and materials

NGO NOYB is qualified to bring redress actions in EU courts

MLex: The digital rights NGO NOYB has now been granted the approval to bring redress actions across the EU. This means that many users can be represented by NOYB on a non-profit basis, allowing them to seek redress, such as non-material damages, when their personal data is unlawfully processed.

Meta challenges Irish EU GDPR fine for ‘plaintext’ passwords data breach

MLex: Social media giant Meta Platforms has challenged the Irish Data Protection Commission’s (DPC) decision to fine it for inadvertently storing some passwords in plaintext on its internal systems without cryptographic protection or encryption, MLex has learned.

Guidance for consultation on data sharing with third-country authorities

The European Data Protection Board (EDPB) has provided updated guidance clarifying the rules for data transfers to authorities in third countries. This includes scenarios where such transfers are governed by appropriate safeguards under EU General Data Protection Regulation, Regulation (EU) 2016/679 (EU GDPR), such as standard contractual clauses or binding corporate rules. The guidance aims to ensure compliance with GDPR requirements and the Court of Justice of the European Union’s Schrems II judgment, which highlighted the need for robust protections against indiscriminate access to personal data in third countries. The guidelines are subject to public consultation until 27 January 2025.

Council adopts new laws to bolster EU cybersecurity capabilities

The Council of the EU has adopted two new laws to enhance the EU's cybersecurity capabilities. The EU Cyber Solidarity Act establishes an EU-wide cyber security alert system and creates a cybersecurity emergency mechanism, including an EU cybersecurity reserve. A targeted amendment to the Regulation (EU) 2019/881 (EU Cybersecurity Act) enables the future adoption of European certification schemes for managed security services. These measures aim to strengthen the EU's ability to detect, prepare for, and respond to cybersecurity threats and incidents, whilst fostering co-operation and resilience across Member States.