Netherlands Data Protection Authority Fines Uber For GDPR Violations

The Dutch Data Protection Authority has imposed a record-breaking €824.99 million fine on Uber for violating GDPR Article 22 through automated decision-making systems that deactivate driver accounts without meaningful human intervention. This landmark enforcement action, stemming from a 2020 class-action complaint filed on behalf of 170 Uber drivers, marks the third and most severe penalty against the ride-sharing giant for data protection violations.

Yahoo suffered three significant data breaches affecting more than 1.7 billion users between 2012 and 2014.

On April 28, 2025, the Court of Justice of the European Union (CJEU) published an updated version of the fact sheet (the Fact Sheet)...

On February 27 2025, the Court of Justice of the European Union (CJEU) delivered a judgment in CK v Dun & Bradstreet (Case C-203/22).

Dutch telecom and internet providers are no longer required to retain the telephone and internet traffic data of their customers.

On January 29, 2019, the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, the "Dutch DPA") published a report (in Dutch) on the personal data breach notifications received in 2018

The European Commission has proposed the EU KIDS Act, introducing an EU-wide framework for minors' access to digital services through age-based restrictions and safety-by-design requirements. The proposal establishes tiered access rules for social media and video-sharing platforms, with independent accounts prohibited under age 13, guardian supervision required for ages 13-15, and autonomous access permitted from age 15. Digital service providers will need to navigate complex age assurance requirements whil

The Data Protection Authority in the Netherlands recently imposed a €290 million fine on Uber for breaching the EU GDPR requirement to have adequate transfer mechanisms in place...

The European Union (EU) has introduced a landmark regulation known as the Digital Services Act (DSA).

Overseen by the Internet Corporation for Assigned Names and Numbers (ICANN), the WHOIS protocol has been used since the early days of the internet to retrieve relevant information...

Over the years, the pensionable salary was altered vide various amendments to the EPS.

A borrower is considered a wilful defaulter if they fail to meet payment obligations despite having the means to do so, divert or siphon off funds, or dispose of secured assets without lender approval...

On 6 October 2023, the Employees' Provident Fund Organization ("EPFO") released a Standard Operating Procedure ("SOP") for management and regulation of establishments that are permitted to operate...

RBI's February 13, 2026, amendments to capital market exposure framework, effective from April 1, 2026 (or earlier if adopted by banks), enable Indian banks, for the first time, to finance LBOs/acquisitions up to 75% of deal value, subject to specified conditions.

Mergers and acquisitions transactions often trigger operational changes related to workforce management

On March 04, 2024, a seven-judge bench of the Supreme Court held, in Sita Soren vs. Union of India.

The RBI has issued a master circular consolidating guidelines for banks regarding the conduct of guarantee business.

The extant foreign direct investment ("FDI") regulatory framework ("FDI Policy") in India has been systematically updated over the years, to attract and promote FDI...

The Ministry of Information & Broadcasting ("MIB") issued an advisory datedFebruary 19, 2025, to address growing concerns over content regulation onOver-The-Top ("OTT") platforms.

The Pension Fund Regulatory and Development Authority ("PFRDA"), issued a notification dated December 19, 2023, whereby it notified the PFRDA (Framework for Prevention and Reporting of Fraud under NPS Architecture).