28 stories tagged gdpr, newest first.
36 points by rdmuser | 21 comments
Courthouse News article on a Frankfurt court ruling that Google Earth and Maps aerial imagery of private property without consent violates German privacy law.
8 points by MatthiasNordwig | 7 comments
WordPress.org plugin page for Invisible Anti-Spam & CAPTCHA, a free GDPR-friendly plugin that blocks form spam using invisible client-side proof-of-work instead of CAPTCHAs.
![Screenshot of jorgegarciaherrero.com: A Privacy Analysis of Web and Mobile Conversational AI Agents [pdf]](https://hn.urlbox.com/shots/renders/2026/9/29/561ac83e-adf1-4d9e-8f37-d1f91b25f5a7.jpg)
409 points by damaru2 | 130 comments
Research paper analyzing third-party advertising and tracking services in web and mobile deployments of nine conversational AI services, including leakage of prompts and conversation data.
70 points by DeepLogin | 31 comments
Irish Data Protection Commission press release announcing a €403 million fine against Google following an inquiry into its processing of location data.
484 points by groomlake | 277 comments
Fastmail blog post by CEO Bron Gondwana announcing an EU data region option for storing customer email data in Europe.
398 points by speckx | 236 comments
Blog post by privacy advocate Alexander Hanff on Elkjop's €1.8 million fine for forced consent, which he says he flagged as unlawful five years earlier.
1603 points by john-doe | 1060 comments
Blog post by Alexander Hanff arguing Google Chrome silently downloads a 4 GB Gemini Nano AI model without consent, raising privacy, legal and climate concerns.
329 points by m_km | 88 comments
Blog post by Terence Eden describing how a unique email address he gave BrowserStack ended up with a third party via Apollo.io, implying a leak.
836 points by exitnode | 640 comments
A personal blog post describing the author's move of services and subscriptions from non-EU providers to European ones for political and data protection reasons.
546 points by miki123211 | 204 comments
A Tell HN post reporting that YC startup RunAnywhere and Voice.AI scraped GitHub commit data to send unsolicited marketing emails, raising GDPR concerns.
1354 points by ColinWright | 462 comments
Blog post examining what personal and biometric data is shared when verifying identity on LinkedIn with a passport and selfie, based on its privacy policy and terms.
831 points by toomuchtodo | 381 comments
Blog post by a diving instructor and platform engineer recounting how reporting a security vulnerability led to a legal response from the affected organization.
615 points by s_dev | 348 comments
European Alternatives is a directory site helping users find European alternatives to digital services and products such as cloud services and SaaS.
900 points by ksec | 1058 comments
The Verge news article reporting that the European Union is scaling back GDPR privacy rules and relaxing its AI Act under pressure from Big Tech.
543 points by SweetSoftPillow | 516 comments
An opinion article arguing that cookie consent laws should be implemented at the browser level rather than requiring every website to show consent banners.
330 points by donohoe | 167 comments
Substack post explaining Meta's "localhost tracking" technique that bypassed Android sandboxing to identify users' browsing, and the potential €32B regulatory fines.
442 points by MartijnHols | 245 comments
Blog post by Martijn Hols on why and how he is moving away from US cloud services, citing EU privacy law conflicts with US surveillance laws.
431 points by KingOfCoders | 415 comments
Blog post on Amazing CTO responding to Paul Graham, arguing that no law requires cookie banners and that they stem from sites' choice to track users.
363 points by dotcoma | 103 comments
noyb news post from January 2024 arguing that Meta violates GDPR by making withdrawal of consent harder than giving it under its pay-or-okay model.
643 points by pbrw | 631 comments
Dig.watch news update reporting that the EU data protection regulator banned Meta's personalised advertising on Facebook and Instagram, with possible fines up to 4% of turnover.
385 points by aleksanb | 197 comments
Norwegian Data Protection Authority news release saying the EDPB made Norway's ban on Meta's behavioral advertising on Facebook and Instagram permanent and extended it EU/EEA-wide.
1110 points by isodev | 513 comments
Press release from Germany's Federation of Consumer Organisations (vzbv) on a Berlin court ruling barring LinkedIn from ignoring Do-Not-Track signals and other privacy violations.
339 points by robin_reala | 274 comments
Guardian news article reporting that Ireland's data regulator fined TikTok €345m for breaching EU data law in its handling of 13- to 17-year-old users' accounts.
417 points by latexr | 269 comments
A noyb news article from September 2023 explaining how mobile apps illegally share users' personal data, part of its Forced Consent & Consent Bypass project.
575 points by pseudotrash | 400 comments
Swedish privacy authority IMY announces audit of four companies' use of Google Analytics, fining two and ordering them to stop using it.
455 points by kaimac | 254 comments
A kbin thread where a user reports Reddit restored their deleted and overwritten posts and comments, suggesting GDPR/CPRA data requests.
587 points by jaredwiener | 417 comments
Wall Street Journal article reporting that Meta was fined $1.3 billion by EU regulators over transferring European user data to the U.S.
463 points by sarusso | 271 comments
POLITICO Europe news article reporting that Italy's privacy regulator has banned ChatGPT amid calls to suspend new releases of the AI tool.