Buyer’s guide ranks 11 GDPR compliance software options for 2026
The editorial ranking splits consent platforms, program suites, and data-discovery engines, and says it used no paid placements.
1
Stories per day · 30 days
7 RSS
Relatedprivacy7data-breach6university5denmark4consent2grindr2hidden-instructions2meta2norway2personal-data2pin-codes2whatsapp2xandr2adtech1afd1ai-training1bearer-cli1biometrics1
40 stories, newest first · one card per story
Stories tagged #gdpr
noyb sues Scale AI over Outlier worker tracking and biometrics
Complaints in four EU countries allege keystroke logging and mandatory face video; Scale calls the claims inaccurate.
AfD breach exposes 345,000 email addresses and messages
Have I Been Pwned added the September leak on October 27 as a sensitive breach, so only verified owners can search it.
1
Meta business terms cover linked content; UK and EU users can object
After backlash, Meta moved the effective date from October 30 to November 20 and narrowed the listed uses.
Interviews find uneven PIA and DPIA practice after the GDPR
Twenty-six privacy professionals in 17 countries describe low DPIA-method adherence, neglected data-subject interests, and assessment fatigue.
University of Copenhagen breach exposed data of 525,000 people
Attackers entered a test environment; about 20,000 ID-card PIN codes were reset, and Monday's outage was the same incident.
1
Copenhagen University breach exposes data on about 525,000 people
National identity numbers and physical-access PIN codes were taken from a test environment detected on October 20.
1
University of Copenhagen breach exposes data on about 525,000 people
A test-environment intrusion exposed national ID numbers, phones and emails, plus ID-card PINs for about 20,000 people.
1
University of Copenhagen confirms breach affecting about 525,000 people
A test database held national identity numbers and contacts, and ID-card PINs for about 20,000 people were later found exposed.
1
University of Copenhagen breach exposes data of 525,000 people
Hackers reached a test environment holding names, CPR numbers, phones and emails, plus PIN codes for 20,000 more people.
2
WhatsApp help pages hid chatbot orders not to name regulators
Redact counted 102 hidden blocks on 80 pages; Meta called it a bug and removed them by October 18.
WhatsApp help pages hid chatbot orders not to cite regulators
Hidden notes told WhatsApp’s support bot not to name data-protection authorities or GDPR after a lawyer was mentioned.
Bearer CLI scans source code and ranks flaws by sensitive data
The free Elastic License 2.0 SAST tool covers seven languages and can emit a privacy report for GDPR records.
2
Study of 10,000+ mHealth apps finds consent and permission failures
About 93% lacked a consent form, and 69.15% requested at least one permission unrelated to the stated purpose.
Xandr Fined a Record €8.6 Million for Relaying Grindr Data Revealing Sexual Orientation
Norway fines Microsoft's Xandr €8.6 million for relaying Grindr users' sexual-orientation data.
Grindr users’ sensitive data shared through ad auctions without valid consent
Norway fined Xandr about $9.6 million for sharing Grindr users' sensitive data without valid consent.
Norway fines Microsoft ad firm $9.6 million over Grindr data sharing
Norway fines Microsoft-owned Xandr $9.6 million for unlawfully sharing sensitive Grindr user data with advertisers.
Denmark's ID register spills more people's details than the country has residents
Abuse of a Danish firm's CPR access exposed personal data on about 8.8 million people.
CYBERFORT: A Compliance-Chain Platform Operationalising the Cyber Resilience Act for SMEs
CYBERFORT, an open-source platform, helps SMEs trace product risks to EU Cyber Resilience Act obligations and evidence.
ASOS Customers Receive Bizarre “Hacked” Message Amid Suspected Snowflake Compromise
ASOS customers received alerts claiming hackers compromised Snowflake and will leak data.
3
IQVIA fined $7.8 million for failing to properly anonymize health data
Italy fined IQVIA $7.8 million for weakly anonymizing health data on about one million patients.
Italy’s Data Protection Authority fines IQVIA €7 million over data protection breach
Italy’s privacy authority fined IQVIA €7 million for processing re-identifiable health data on one million patients.
PrivDev: Mapping Static-Analysis Data Types to DPV
PrivDev maps 122 Bearer CLI static-analysis data types to DPV personal-data categories and GDPR provisions via deterministic matching plus an LLM.
EU Cyber Resilience Act ‘completely kills’ manual vulnerability triage
Experts say the EU Cyber Resilience Act’s 24-hour reporting clock makes manual vulnerability triage impractical.
3