Global regulatory actions targeting platform data and privacy (GDPR through 2021)

1. EU adopts the ePrivacy Directive

   Jul 12, 2002Labels: ePrivacy Directive, European Union

   • Wikipedia

2. CJEU invalidates EU Data Retention Directive

   Apr 8, 2014Labels: Digital Rights, CJEU

   • EDPS

3. CJEU recognizes “right to be forgotten”

   May 13, 2014Labels: Google Spain, CJEU

   • EUR Lex

4. CJEU invalidates EU–US Safe Harbor framework

   Oct 6, 2015Labels: Schrems I, CJEU

   • EU Parliament

5. EU adopts the General Data Protection Regulation

   Apr 14, 2016Labels: GDPR, European Union

   • Wikipedia
   • EUR Lex

6. GDPR enters into force

   May 24, 2016Labels: GDPR, European Union

   • EDPB
   • EU Commission

7. UK enacts Data Protection Act 2018

   May 23, 2018Labels: Data Protection, United Kingdom

   • Wikipedia

8. GDPR becomes applicable across the EU

   May 25, 2018Labels: GDPR, European Union

   • EU Parliament
   • EUR Lex

9. European Data Protection Board begins work

   May 25, 2018Labels: EDPB, European Union

   • CNIL
   • Wikipedia

10. France’s CNIL fines Google €50 million

    Jan 21, 2019Labels: CNIL, Google

    • InfoLawGroup

11. UK ICO signals major GDPR fine for British Airways

    Jul 8, 2019Labels: ICO, British Airways

    • EDPB

12. CJEU’s Schrems II invalidates EU–US Privacy Shield

    Jul 16, 2020Labels: Schrems II, CJEU

    • EU Parliament

13. Hamburg DPA fines H&M €35.3 million

    Oct 1, 2020Labels: Hamburg DPA, H&M

    • InsidePrivacy

14. UK ICO issues final £20 million British Airways penalty

    Oct 16, 2020Labels: ICO, British Airways

    • HSF Kramer

15. Norway signals intent to fine Grindr for adtech sharing

    Jan 26, 2021Labels: Norwegian DPA, Grindr

    • EDPB

16. EDPB issues binding decision in WhatsApp dispute

    Jul 28, 2021Labels: EDPB, WhatsApp Ireland

    • EDPB

17. Ireland’s DPC fines WhatsApp €225 million

    Sep 2, 2021Labels: DPC Ireland, WhatsApp Ireland

    • DLA Piper