IMY’s latest sandbox report suggests that AI transcription in social services can be GDPR-compliant where it meaningfully improves efficiency and remains tied to an existing legal task, redefining how “necessity” is assessed.

The EDPB has approved the Europrivacy certification criteria for use in international data transfers under the GDPR, adding a new potential Article 46 transfer tool for certified data importers outside the EEA.

The Swedish DPA has published its supervisory priorities for 2026.