GDPR

Ireland's data protection regulator has fined Google €403 million for breaches of the EU's General Data Protection Regulation. It is one of the largest GDPR penalties issued to date, and the decision is drawing attention across Europe as regulators continue to scrutinise how major technology companies handle users' personal data. The Irish authority serves as Google's lead EU regulator.

Employers across the European Union are being reminded of their legal duties when using AI tools in hiring. Under the GDPR and the EU AI Act, companies deploying automated recruitment systems must ensure transparency, fairness and data protection, with obligations ranging from informing candidates to assessing high-risk systems. Legal commentators stress that non-compliance could expose employers to significant penalties.