DECEMBER 2025 ISSUE NO. 290

https://campaign-image.com/zohocampaigns/133052000002457092_zc_v53_artboard_1.png
   

EMEA

  • European Commission introduced whistleblower tool for Artificial Intelligence Act.
  • France’s CNIL imposed EUR 750,000 fine on online magazine publisher for cookie consent violations.
  • Spanish Commercial Court ordered Meta to pay EUR 479 million to digital press publishers for GDPR related violations.
  • EU Commission launched investigations into cloud computing services under the Digital Markets Act.
  • European Supervisory Authorities released list of critical ICT third-party providers under Digital Operational Resilience Act.
  • German Data Protection Conference proposed GDPR amendments to reinforce data protections for children.
  • German Parliament approved legislation to implement the NIS2 Directive.
  • Turkish Data Protection Authority released a guide on generative AI and personal data protection.
  • CJEU dismissed Amazon’s challenge to its designation as a Very Large Online Platform under the Digital Services Act.

   

Americas

  • US national security agencies released a guide on mitigating risks from bulletproof hosting providers.
  • California Privacy Protection Agency (CPPA) released a public infographic highlighting key considerations ahead of the January 2026 CCPA updates.
  • Canadian privacy regulators jointly called for enhanced protection of children’s privacy in the EdTech ecosystem.
  • Massachusetts’ Consumer Data Privacy Bill referred to legislative committee for further review.
  • California AG reached USD 1.4 million settlement with a mobile gaming company for breach of CCPA.
  • Algorithm Accountability Bill introduced in the US Senate.
  • CPPA established Data Broker Enforcement Strike Force to investigate privacy violations and opposed federal efforts to block state protections for advanced technologies.

   

APAC

  • Taiwan’s Legislative Yuan published a comparative table outlining proposed amendments to the Personal Data Protection Act.
  • China’s CAC opened consultation on draft Regulations on the Protection of Personal Information on Large-Scale Online Platforms.

   

Click here to read the complete newsletter with official links

   

Gurugram office: 1st Floor, AIHP Palms, 242 & 243, Udyog Vihar Phase-IV, Gurugram - 122015

Dubai office: Unit: 9, 9th Floor, Arabian Sky Business Centre, CitiBank Building, Sheikh Rashid Road, Dubai, UAE

Phone: +91-124-4309062 | Email: newsletter@Privacydesk.in 

Delhi (NCR) | Dubai 

   

Disclaimer: This update is the copyright of Reina Legal. The update is not intended to be a form of solicitation or advertising. The information contained herein is of a general nature and is not intended to address the circumstances of any particular individual or entity. Although we endeavor to provide accurate and timely information, there can be no guarantee that such information is accurate as of the date it is received or that it will continue to be accurate thereafter. No person should act on such information without appropriate professional advice based on the circumstances of a particular situation. Unsubscribe