Evidence
Each record states what the source establishes—and what it does not. Only confirmed records contribute to counts and penalty totals.
16 records shown
No records match these filters.
The court upheld findings that Amazon’s advertising processing lacked a valid legitimate-interest basis and that its transparency was insufficient. It annulled the 2021 decision’s fine and compliance order on procedural grounds.
Read recordThe FTC’s case concerned design practices that enrolled customers in Prime without clear consent and made cancellation unnecessarily difficult.
Read recordReporting on a complaint involving a school account says the authority found that tracking cookies were placed without valid consent and that access rights were not handled correctly.
Read recordA Facebook design flaw allowed attackers to obtain access tokens affecting about 29 million accounts. The regulator found failures in breach notification, documentation and data protection by design.
Read recordThe regulator examined LinkedIn’s legal bases for processing members’ data for behavioural analysis and targeted advertising. It found failures involving lawfulness, fairness and transparency.
Read recordMeta notified the regulator that some social-media user passwords had been stored in plaintext on internal systems. The inquiry assessed notification, documentation and security obligations.
Read recordThe board reviewed the 2023 compromise of Microsoft Exchange Online and described operational and strategic security decisions that allowed the intrusion to succeed and remain undetected.
Read recordThe EDPB found an ongoing infringement involving processing for behavioural advertising on the basis of contract and legitimate interests across the European Economic Area.
Read recordThe government alleged that Amazon retained children’s voice recordings indefinitely, disregarded deletion requests and used retained data to improve Alexa’s algorithms.
Read recordThe FTC alleged that Ring gave employees and contractors broad access to customers’ videos and failed to implement basic security measures, enabling account takeovers and harassment.
Read recordThe Irish regulator found that Meta Ireland continued transferring Facebook users’ personal data to the United States without safeguards that addressed the risks identified by the Court of Justice of the EU.
Read recordThe inquiry examined Instagram settings and the public disclosure of email addresses and phone numbers belonging to child users, including users of business accounts.
Read recordConsumer Reports compared workplace communication policies and identified broad collection and use terms that employees may be unable to negotiate.
Read recordThe FTC alleged that Amazon reduced its own contribution to driver pay after promising drivers they would receive all customer tips, and failed to make the change clear.
Read recordThe FTC alleged that Facebook violated a 2012 privacy order by misleading users about control over their personal information and the handling of facial-recognition settings and phone numbers.
Read recordA government-commissioned data protection impact assessment documented risks in diagnostic data sent by enterprise versions of Office and proposed measures for public-sector use.
Read record