<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>GDPR news from Infosec Standards</title>
    <link>https://infosecstandards.org/standards/gdpr</link>
    <description>News about GDPR, including major updates to our page on it.</description>
    <language>en-us</language>
    <atom:link href="https://infosecstandards.org/standards/gdpr/feed.xml" rel="self" type="application/rss+xml"/>
    <item>
      <title>Dutch DPA must publish GDPR sanctions from September 1, 2026</title>
      <link>https://infosecstandards.org/news/gdpr-dutch-uavg-amendments</link>
      <guid>https://infosecstandards.org/news/gdpr-dutch-uavg-amendments</guid>
      <pubDate>Wed, 09 Sep 2026 00:00:00 GMT</pubDate>
      <description>On August 27, 2026, the Dutch data protection authority said GDPR fines and related sanctions become legally required to publish from September 1 under UAVG amendments.</description>
    </item>
    <item>
      <title>EDPB finalizes GDPR guidelines for blockchain processing</title>
      <link>https://infosecstandards.org/news/gdpr-blockchain-guidelines</link>
      <guid>https://infosecstandards.org/news/gdpr-blockchain-guidelines</guid>
      <pubDate>Wed, 05 Aug 2026 00:00:00 GMT</pubDate>
      <description>On July 8, 2026, the European Data Protection Board adopted the final version of its guidelines on processing personal data through blockchain technologies after public consultation.</description>
    </item>
    <item>
      <title>EDPB asks Commission to review EU-US Data Privacy Framework</title>
      <link>https://infosecstandards.org/news/gdpr-dpf-review</link>
      <guid>https://infosecstandards.org/news/gdpr-dpf-review</guid>
      <pubDate>Tue, 04 Aug 2026 00:00:00 GMT</pubDate>
      <description>The European Data Protection Board asked the European Commission to assess whether Trump v. Slaughter undermines FTC independence assumptions in the EU-US Data Privacy Framework adequacy decision.</description>
    </item>
    <item>
      <title>GDPR Procedural Regulation published; new cross-border enforcement rules apply from April 2027</title>
      <link>https://infosecstandards.org/news/gdpr-procedural-regulation</link>
      <guid>https://infosecstandards.org/news/gdpr-procedural-regulation</guid>
      <pubDate>Fri, 12 Dec 2025 00:00:00 GMT</pubDate>
      <description>Regulation (EU) 2025/2518 was published in the Official Journal on December 12, 2025. It enters into force January 1, 2026 and, from April 2, 2027, harmonizes how supervisory authorities handle cross-border GDPR complaints and investigations, with deadlines and rights for the organizations under investigation.</description>
    </item>
  </channel>
</rss>
