{"id":85323,"date":"2026-03-26T11:00:09","date_gmt":"2026-03-26T10:00:09","guid":{"rendered":"https:\/\/www.lexxion.eu\/?post_type=dpi&#038;p=85323"},"modified":"2026-03-26T11:00:09","modified_gmt":"2026-03-26T10:00:09","slug":"data-protection-insider-issue-151","status":"publish","type":"dpi","link":"https:\/\/www.lexxion.eu\/en\/dpi\/data-protection-insider-issue-151\/","title":{"rendered":"Data Protection Insider, Issue 151"},"content":{"rendered":"<h2><a href=\"https:\/\/eur-lex.europa.eu\/legal-content\/EN\/TXT\/HTML\/?uri=CELEX:62024CJ0371\" target=\"_blank\" rel=\"noopener\"><span class=\"TextRun SCXW170875332 BCX8\" lang=\"EN-GB\" xml:lang=\"EN-GB\" data-contrast=\"auto\"><span class=\"NormalTextRun SCXW170875332 BCX8\">-CJEU <\/span><span class=\"NormalTextRun SCXW170875332 BCX8\">Rules on the Systematic Collection of Biometric Data for Law Enforcement-<\/span><\/span><\/a><\/h2>\n<p><a href=\"https:\/\/eur-lex.europa.eu\/legal-content\/EN\/TXT\/HTML\/?uri=CELEX:62024CJ0371\" target=\"_blank\" rel=\"noopener\"><span data-contrast=\"auto\">On 19<\/span><span data-contrast=\"auto\">th<\/span><span data-contrast=\"auto\">\u00a0March, the CJEU ruled in the case of\u00a0<\/span><i><span data-contrast=\"auto\">HW<\/span><\/i><span data-contrast=\"auto\">. In terms of the facts,<\/span><\/a><span data-contrast=\"auto\">\u00a0the case\u00a0essentially concerned\u00a0a participant in a demonstration, who was arrested by police. Following their arrest, the plaintiff refused to be fingerprinted and photographed. In consequence, he was charged with the offence of \u2018having refused, although he was reasonably suspected on one or more grounds of having committed or attempted to commit an offence, to consent to the gathering of identification data, in particular by the taking of fingerprints, palm prints or photographs for the purposes of entry into and consultation of police databases, in accordance with the rules applicable to each of those databases\u2019.\u00a0\u2018HW and the\u00a0minist\u00e8re\u00a0public (Public Prosecutor\u2019s Office, France) each brought an appeal against that judgment before the\u00a0cour\u00a0d\u2019appel\u00a0de Paris (Court of Appeal, Paris, France), which is the referring court\u2019.\u00a0This court referred\u00a0the following three questions to the CJEU:\u00a0<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/p>\n<ul>\n<li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"29\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"1\" data-aria-level=\"1\"><span data-contrast=\"auto\">Does Article\u00a010 of Directive 2016\/680,\u00a0\u2018read in conjunction with Article 4(1)(a) to (c) and Article 8\u2019\u00a0preclude\u00a0national legislation\u00a0which\u00a0provides for\u00a0\u2018systematic gathering of identification data (fingerprints and photographs) from persons who are suspected on one or more grounds of having committed or attempted to commit an offence?\u2019<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/li>\n<\/ul>\n<ul>\n<li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"29\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"2\" data-aria-level=\"1\"><span data-contrast=\"auto\">Do the same Articles\u00a0preclude\u00a0national legislation\u00a0\u2018which does not impose on the competent authority an obligation to provide, in each individual case, a sufficient statement of reasons as to why it is strictly necessary to gather identification data?\u2019<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/li>\n<\/ul>\n<ul>\n<li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"29\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"3\" data-aria-level=\"1\"><span data-contrast=\"auto\">Do the same Articles\u00a0preclude\u00a0national legislation\u00a0\u2018which allows the prosecution and conviction\u2026of a person\u2019 on the sole basis that they have \u2018refused to consent to the gathering of identification data\u2019?<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/li>\n<\/ul>\n<p><span data-contrast=\"auto\">In relation to these questions, the\u00a0CEJU provided the following clarifications:\u00a0<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/p>\n<ul>\n<li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"30\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"1\" data-aria-level=\"1\"><span data-contrast=\"auto\">These Articles\u00a0preclude\u00a0national legislation which\u00a0provides for such\u00a0\u2018systematic collection of the biometric data\u2026unless it is established, first, that the national law defines the specific and concrete purposes pursued by that collection in an appropriate and sufficiently precise manner, and second, that the competent authority is required, in each individual case, to assess whether that collection is strictly necessary\u2019.<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/li>\n<\/ul>\n<ul>\n<li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"30\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"2\" data-aria-level=\"1\"><span data-contrast=\"auto\">These Articles\u00a0preclude\u00a0national legislation\u00a0national legislation\u00a0which does not require the \u2018competent authority to provide a sufficient statement of reasons\u2026as to why\u00a0it\u00a0is\u2019\u00a0strictly necessary\u00a0\u2018to collect the biometric data of a person reasonably suspected\u2026of having committed or attempted to commit a criminal offence\u2019.<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/li>\n<\/ul>\n<ul>\n<li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"30\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"3\" data-aria-level=\"1\"><span data-contrast=\"auto\">These Articles do not preclude\u00a0\u2018national legislation which allows a person to be prosecuted\u2019 solely\u00a0\u2018for\u2026refusal to allow the collection of his or her biometric data\u2026provided that that collection satisfies the\u2019\u00a0strictly necessary\u00a0\u2018condition\u2026and\u2026the criminal penalty\u2026observes the principle of proportionality\u2019.<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/li>\n<\/ul>\n<h2><a href=\"https:\/\/eur-lex.europa.eu\/legal-content\/EN\/TXT\/HTML\/?uri=CELEX:62024CJ0526\" target=\"_blank\" rel=\"noopener\"><span class=\"TextRun SCXW185543949 BCX8\" lang=\"EN-GB\" xml:lang=\"EN-GB\" data-contrast=\"auto\"><span class=\"NormalTextRun SCXW185543949 BCX8\">-CJEU <\/span><span class=\"NormalTextRun SCXW185543949 BCX8\">Clarifies the Scope of Abuse of the Right of Access<\/span><\/span><span class=\"EOP SCXW185543949 BCX8\" data-ccp-props=\"{}\">&#8211;<\/span><\/a><\/h2>\n<p><a href=\"https:\/\/eur-lex.europa.eu\/legal-content\/EN\/TXT\/HTML\/?uri=CELEX:62024CJ0526\" target=\"_blank\" rel=\"noopener\"><span class=\"TextRun Underlined SCXW239449226 BCX8\" lang=\"EN-GB\" xml:lang=\"EN-GB\" data-contrast=\"auto\"><span class=\"NormalTextRun SCXW239449226 BCX8\">On 19<\/span><\/span><span class=\"TextRun Underlined SCXW239449226 BCX8\" lang=\"EN-GB\" xml:lang=\"EN-GB\" data-contrast=\"auto\"><span class=\"NormalTextRun Superscript SCXW239449226 BCX8\" data-fontsize=\"12\">th<\/span><\/span><span class=\"TextRun Underlined SCXW239449226 BCX8\" lang=\"EN-GB\" xml:lang=\"EN-GB\" data-contrast=\"auto\"><span class=\"NormalTextRun SCXW239449226 BCX8\">\u00a0March, the CJEU delivered its judgment in\u00a0<\/span><\/span><span class=\"TextRun Underlined SCXW239449226 BCX8\" lang=\"EN-GB\" xml:lang=\"EN-GB\" data-contrast=\"auto\"><span class=\"NormalTextRun SpellingErrorV2Themed SCXW239449226 BCX8\">Brillen<\/span><span class=\"NormalTextRun SCXW239449226 BCX8\">\u00a0<\/span><span class=\"NormalTextRun SCXW239449226 BCX8\">Rottler<\/span><span class=\"NormalTextRun SCXW239449226 BCX8\">\u00a0GmbH &amp; Co. KG v TC<\/span><\/span><span class=\"TextRun Underlined SCXW239449226 BCX8\" lang=\"EN-GB\" xml:lang=\"EN-GB\" data-contrast=\"auto\"><span class=\"NormalTextRun SCXW239449226 BCX8\">, in which it\u00a0<\/span><span class=\"NormalTextRun SCXW239449226 BCX8\">ruled that the right of access to one\u2019s data may be abused where the\u00a0<\/span><span class=\"NormalTextRun SCXW239449226 BCX8\">data subject does not request access for the purpose of protecting their rights as guaranteed by the GDPR.<\/span><\/span><\/a><span class=\"TextRun SCXW239449226 BCX8\" lang=\"EN-GB\" xml:lang=\"EN-GB\" data-contrast=\"auto\"><span class=\"NormalTextRun SCXW239449226 BCX8\">\u00a0As to the facts of the case, the applicant\u00a0<\/span><span class=\"NormalTextRun SCXW239449226 BCX8\">(TC)\u00a0<\/span><span class=\"NormalTextRun SCXW239449226 BCX8\">subscribed to\u00a0<\/span><span class=\"NormalTextRun SpellingErrorV2Themed SCXW239449226 BCX8\">Brillen<\/span><span class=\"NormalTextRun SCXW239449226 BCX8\">\u00a0<\/span><span class=\"NormalTextRun SCXW239449226 BCX8\">Rottler\u2019s<\/span><span class=\"NormalTextRun SCXW239449226 BCX8\">\u00a0newsletter by providing his personal information. Then, he\u00a0<\/span><span class=\"NormalTextRun SCXW239449226 BCX8\">filed<\/span><span class=\"NormalTextRun SCXW239449226 BCX8\">\u00a0a data access request<\/span><span class=\"NormalTextRun SCXW239449226 BCX8\">.\u00a0<\/span><span class=\"NormalTextRun SpellingErrorV2Themed SCXW239449226 BCX8\">Brillen<\/span><span class=\"NormalTextRun SCXW239449226 BCX8\">\u00a0<\/span><span class=\"NormalTextRun SCXW239449226 BCX8\">Rottler<\/span><span class=\"NormalTextRun SCXW239449226 BCX8\">\u00a0refused to act upon it within the legally prescribed one month, arguing it was\u00a0<\/span><span class=\"NormalTextRun SCXW239449226 BCX8\">excessive and thus\u00a0<\/span><span class=\"NormalTextRun SCXW239449226 BCX8\">abusive. TC\u00a0<\/span><span class=\"NormalTextRun SCXW239449226 BCX8\">submitted<\/span><span class=\"NormalTextRun SCXW239449226 BCX8\">\u00a0a claim for damages\u00a0<\/span><span class=\"NormalTextRun SCXW239449226 BCX8\">(1000 Euros)\u00a0<\/span><span class=\"NormalTextRun SCXW239449226 BCX8\">under Article 82 GDPR<\/span><span class=\"NormalTextRun SCXW239449226 BCX8\">.<\/span><span class=\"NormalTextRun SCXW239449226 BCX8\">\u00a0<\/span><span class=\"NormalTextRun SpellingErrorV2Themed SCXW239449226 BCX8\">Brillen<\/span><span class=\"NormalTextRun SCXW239449226 BCX8\">\u00a0<\/span><span class=\"NormalTextRun SCXW239449226 BCX8\">Rottler<\/span><span class=\"NormalTextRun SCXW239449226 BCX8\">\u00a0argued that from information\u00a0<\/span><span class=\"NormalTextRun SCXW239449226 BCX8\">posted\u00a0<\/span><span class=\"NormalTextRun SCXW239449226 BCX8\">online,\u00a0<\/span><span class=\"NormalTextRun SCXW239449226 BCX8\">e.g. in legal blogs,\u00a0<\/span><span class=\"NormalTextRun SCXW239449226 BCX8\">it was\u00a0<\/span><span class=\"NormalTextRun SCXW239449226 BCX8\">apparent<\/span><span class=\"NormalTextRun SCXW239449226 BCX8\">\u00a0that TC systematically subscribes to various newsletters, requests access to his data and then claims for compensation, and that this\u00a0<\/span><span class=\"NormalTextRun SCXW239449226 BCX8\">proves the abusive nature of his reliance on the right of access<\/span><span class=\"NormalTextRun SCXW239449226 BCX8\">.<\/span><span class=\"NormalTextRun SCXW239449226 BCX8\">\u00a0The dispute escalated to the CJEU, which was called on to rule\u00a0<\/span><span class=\"NormalTextRun SCXW239449226 BCX8\">(1)\u00a0<\/span><span class=\"NormalTextRun SCXW239449226 BCX8\">whether a first request\u00a0<\/span><span class=\"NormalTextRun SCXW239449226 BCX8\">for<\/span><span class=\"NormalTextRun SCXW239449226 BCX8\">\u00a0access to one\u2019s data can be excessive<\/span><span class=\"NormalTextRun SCXW239449226 BCX8\">;<\/span><span class=\"NormalTextRun SCXW239449226 BCX8\">\u00a0<\/span><span class=\"NormalTextRun SCXW239449226 BCX8\">(2)\u00a0<\/span><span class=\"NormalTextRun SCXW239449226 BCX8\">whether\u00a0<\/span><span class=\"NormalTextRun SCXW239449226 BCX8\">the right to compensation in Article 82 GDPR applies when the right of access has been infringed<\/span><span class=\"NormalTextRun SCXW239449226 BCX8\">\u00a0and (3) whether non-material damage can result from the loss of control over the processing of one\u2019s data<\/span><span class=\"NormalTextRun SCXW239449226 BCX8\">.\u00a0<\/span><span class=\"NormalTextRun SCXW239449226 BCX8\">The Court\u00a0<\/span><span class=\"NormalTextRun SCXW239449226 BCX8\">ruled as follows. With regard<\/span><span class=\"NormalTextRun SCXW239449226 BCX8\">s<\/span><span class=\"NormalTextRun SCXW239449226 BCX8\">\u00a0to the first question, it\u00a0<\/span><span class=\"NormalTextRun SCXW239449226 BCX8\">ruled that a first request of access could be regarded as \u2018excessive<\/span><span class=\"NormalTextRun SCXW239449226 BCX8\">\u2019<\/span><span class=\"NormalTextRun SCXW239449226 BCX8\">,<\/span><span class=\"NormalTextRun SCXW239449226 BCX8\">\u00a0<\/span><span class=\"NormalTextRun SCXW239449226 BCX8\">but that the concept of \u2018excessive\u2019\u00a0<\/span><span class=\"NormalTextRun AdvancedProofingIssueV2Themed SCXW239449226 BCX8\">has to<\/span><span class=\"NormalTextRun SCXW239449226 BCX8\">\u00a0be read restrictively<\/span><span class=\"NormalTextRun SCXW239449226 BCX8\">.<\/span><span class=\"NormalTextRun SCXW239449226 BCX8\">\u00a0<\/span><span class=\"NormalTextRun SCXW239449226 BCX8\">It ruled further that<\/span><span class=\"NormalTextRun SCXW239449226 BCX8\">\u00a0the controller bears the burden of proof that an initial request is \u2018excessive\u2019<\/span><span class=\"NormalTextRun SCXW239449226 BCX8\">\u00a0by demonstrating that \u2018<\/span><span class=\"NormalTextRun SCXW239449226 BCX8\">despite formal observance of the conditions laid down by those provisions, that request was made by the data subject not for the purpose of being aware of the processing of those data and verifying the lawfulness of that processing, in order to be able, subsequently, to obtain protection of his or her rights under that regulation, but with an abusive intention, such as that of artificially creating the conditions laid down for obtaining an advantage from that regulation<\/span><span class=\"NormalTextRun SCXW239449226 BCX8\">\u2019<\/span><span class=\"NormalTextRun SCXW239449226 BCX8\">.<\/span><span class=\"NormalTextRun SCXW239449226 BCX8\">\u00a0In addition,\u00a0<\/span><span class=\"NormalTextRun SpellingErrorV2Themed SCXW239449226 BCX8\">Brillen<\/span><span class=\"NormalTextRun SCXW239449226 BCX8\">\u00a0<\/span><span class=\"NormalTextRun SCXW239449226 BCX8\">Rottler<\/span><span class=\"NormalTextRun SCXW239449226 BCX8\">\u00a0may\u00a0<\/span><span class=\"NormalTextRun AdvancedProofingIssueV2Themed SCXW239449226 BCX8\">take into account<\/span><span class=\"NormalTextRun SCXW239449226 BCX8\">\u00a0the information available about the conduct of the data subject, \u2018<\/span><span class=\"NormalTextRun SCXW239449226 BCX8\">provided that it is supported by other relevant material<\/span><span class=\"NormalTextRun SCXW239449226 BCX8\">\u2019<\/span><span class=\"NormalTextRun SCXW239449226 BCX8\">.<\/span><span class=\"NormalTextRun SCXW239449226 BCX8\">\u00a0With regards to the second question, the\u00a0<\/span><span class=\"NormalTextRun SCXW239449226 BCX8\">CJEU ruled that\u00a0<\/span><span class=\"NormalTextRun SCXW239449226 BCX8\">\u2018<\/span><span class=\"NormalTextRun SCXW239449226 BCX8\">even where there is an infringement of the GDPR that does not, as such, involve the processing of data, the data subject may rely on the right to compensation provided for in Article 82 of that regulation<\/span><span class=\"NormalTextRun SCXW239449226 BCX8\">\u2019<\/span><span class=\"NormalTextRun SCXW239449226 BCX8\">.<\/span><span class=\"NormalTextRun SCXW239449226 BCX8\">\u00a0As to the third question, the CJEU concluded that \u2018<\/span><span class=\"NormalTextRun SCXW239449226 BCX8\">the non-material damage suffered by the data subject encompasses the loss of control over his or her personal data or his or her uncertainty as to whether his or her data have been processed, provided that it is demonstrated, in particular, that the data subject actually suffered such damage and that his or her conduct was not the determining cause of that damage<\/span><span class=\"NormalTextRun SCXW239449226 BCX8\">\u2019<\/span><span class=\"NormalTextRun SCXW239449226 BCX8\">.<\/span><\/span><span class=\"EOP SCXW239449226 BCX8\" data-ccp-props=\"{}\">\u00a0<\/span><\/p>\n<h2><span class=\"TextRun SCXW190081606 BCX8\" lang=\"EN-GB\" xml:lang=\"EN-GB\" data-contrast=\"auto\"><span class=\"NormalTextRun SCXW190081606 BCX8\">-EDPB<\/span><span class=\"NormalTextRun SCXW190081606 BCX8\">\/<\/span><span class=\"NormalTextRun SCXW190081606 BCX8\">EDPS\u00a0<\/span><span class=\"NormalTextRun SCXW190081606 BCX8\">Publish New Documents-<\/span><\/span><\/h2>\n<p><span data-contrast=\"auto\">In the past two weeks, the EDPB\/EDPS published the following documents:<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/p>\n<ul>\n<li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"28\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"1\" data-aria-level=\"1\"><a href=\"https:\/\/www.edpb.europa.eu\/our-work-tools\/our-documents\/edpbedps-joint-opinion\/edpb-edps-joint-opinion-32026-proposal-european_en\" target=\"_blank\" rel=\"noopener\"><span data-contrast=\"auto\">\u2018EDPB-EDPS Joint Opinion 3\/2026 on the Proposal for a European Biotech Act\u2019<\/span><\/a><\/li>\n<li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"28\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"1\" data-aria-level=\"1\"><a href=\"https:\/\/www.edpb.europa.eu\/our-work-tools\/our-documents\/letters\/edpb-letter-european-commission-privacy-implications-recent_en\" target=\"_blank\" rel=\"noopener\"><span class=\"NormalTextRun SCXW102896294 BCX8\">\u2018<\/span><span class=\"NormalTextRun SCXW102896294 BCX8\">EDPB letter to the European Commission on the privacy implications of recent proposed legislative changes\u00a0<\/span><span class=\"NormalTextRun SCXW102896294 BCX8\">regarding<\/span><span class=\"NormalTextRun SCXW102896294 BCX8\">\u00a0entry conditions to the United States for EEA\u00a0<\/span><span class=\"NormalTextRun SCXW102896294 BCX8\">citizens<\/span><span class=\"NormalTextRun SCXW102896294 BCX8\">\u2019<\/span><\/a><\/li>\n<li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"28\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"1\" data-aria-level=\"1\"><a href=\"https:\/\/www.edpb.europa.eu\/news\/news\/2026\/edpb-and-edps-support-strengthening-eus-cybersecurity-and-easing-compliance-while_en\" target=\"_blank\" rel=\"noopener\"><span class=\"NormalTextRun SCXW165092504 BCX8\">EDPB-EDPS \u2018<\/span><span class=\"NormalTextRun SCXW165092504 BCX8\">Joint Opinion on the European Commission\u2019s proposal for a Cybersecurity Act 2 (CSA2) and the proposal on amendments to the Network and Information Security 2 (NIS2) Directive<\/span><span class=\"NormalTextRun SCXW165092504 BCX8\">\u2019<\/span><\/a><\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>-CJEU Rules on the Systematic Collection of Biometric Data for Law Enforcement- On 19th\u00a0March, the [&hellip;]<\/p>\n","protected":false},"author":144,"featured_media":0,"menu_order":0,"comment_status":"open","ping_status":"closed","template":"","dpi-category":[],"dpi-tag":[],"class_list":["post-85323","dpi","type-dpi","status-publish","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/www.lexxion.eu\/en\/wp-json\/wp\/v2\/dpi\/85323","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.lexxion.eu\/en\/wp-json\/wp\/v2\/dpi"}],"about":[{"href":"https:\/\/www.lexxion.eu\/en\/wp-json\/wp\/v2\/types\/dpi"}],"author":[{"embeddable":true,"href":"https:\/\/www.lexxion.eu\/en\/wp-json\/wp\/v2\/users\/144"}],"replies":[{"embeddable":true,"href":"https:\/\/www.lexxion.eu\/en\/wp-json\/wp\/v2\/comments?post=85323"}],"version-history":[{"count":1,"href":"https:\/\/www.lexxion.eu\/en\/wp-json\/wp\/v2\/dpi\/85323\/revisions"}],"predecessor-version":[{"id":85324,"href":"https:\/\/www.lexxion.eu\/en\/wp-json\/wp\/v2\/dpi\/85323\/revisions\/85324"}],"wp:attachment":[{"href":"https:\/\/www.lexxion.eu\/en\/wp-json\/wp\/v2\/media?parent=85323"}],"wp:term":[{"taxonomy":"dpi-category","embeddable":true,"href":"https:\/\/www.lexxion.eu\/en\/wp-json\/wp\/v2\/dpi-category?post=85323"},{"taxonomy":"dpi-tag","embeddable":true,"href":"https:\/\/www.lexxion.eu\/en\/wp-json\/wp\/v2\/dpi-tag?post=85323"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}