.png)
EU
DSA
Commission seeks evidence on DSA ad repositories
On 4 November, the Commission opened a call for evidence on technical guidelines for advertising repositories operated by very large online platforms and search engines. The consultation closes 2 December. The guidelines are still being developed; no new requirements were adopted this week.
NIS2
EU coordinates response to refrigeration cyber incidents
A joint Commission, ENISA, Europol, CSIRTs Network and EU-CyCLONe statement was published 4 November after a fresh wave of incidents on 1–2 November. The disruption began on 11 October. This is a new coordinated response, not a new NIS2 measure.
DSA
TikTok's 'For You' feed faces DSA scrutiny
On 6 November, the Commission issued preliminary findings that TikTok's 'For You' recommender feed may breach DSA systemic-risk obligations because of harmful repeated-content 'rabbit holes'. The concerns cover risk assessment and mitigation, especially for minors and vulnerable users. These are preliminary findings, not a final decision.
GDPR
EDPB launches Privacy for Kids resource hub
On 4 November, the EDPB launched an online privacy education hub for parents, teachers and children. It gathers resources from data protection authorities across Europe, searchable by age, topic and format. This is a new educational initiative, not a new GDPR decision or guideline.
AI Policy
EU launches practical AI toolbox for public bodies
Published on the Interoperable Europe portal on 4 November and highlighted by the Commission on 5 November, the toolbox groups standards, case studies, training and legal/procurement resources for public-sector AI adoption. It implements the Apply AI Strategy; it does not change the AI Act.
Sweden
GDPR
IMY reprimands four people-search services
On 3 November, IMY announced GDPR reprimands against Lexbase and Krimfup over criminal-offence data, and MrKoll and Upplysning over erasure rights. It also ordered the first two services to restrict searchable offence records. IMY says publication certificates do not override applicable EU data-protection law.
GDPR / AI
IMY probes AI support for Swedish jobseekers
On 5 November, IMY opened a GDPR investigation into Arbetsförmedlingen's statistical assessment tool used in the Rusta och matcha programme. It will examine transparency, lawfulness, necessity, data minimisation and whether automated decisions occur. This is an inquiry, not a finding of infringement.
