Compliance Pulse · Issue #1 May 23, 2026

What happened in compliance
this week

← All issues
This Week in Enforcement
EDPB / DPC Ireland €310M
LinkedIn Ireland
Behavioural advertising based on contract lawful basis — GDPR Art. 6 violated; users could not opt out of targeted ads under the original consent framework.
FTC $5M
NGL Labs (anonymous messaging app)
Marketed app as anonymous while retaining identifying data and selling it to advertisers; violated COPPA by collecting data on under-13 users without consent.
EU AI Office €2.4M
Replika (Luka Inc.)
AI companion deployed without required transparency disclosures (EU AI Act Art. 50) and failed to provide adequate human oversight mechanisms for high-risk emotional dependency use cases.
Leaderboard Movers

Scan data not yet available for this issue. View the live leaderboard →

One Fix This Week (GDPR)
GDPR

Add a reject-all cookie banner (GDPR Art. 7)

Under GDPR Art. 7 and the EDPB 2023 guidelines, a consent banner must offer a Reject All option at the same level of prominence as Accept All. Burying the reject path in settings or making it multiple clicks away is no longer compliant.
<!-- Minimal compliant cookie banner -->
<div id="cookie-banner" role="dialog" aria-modal="true">
  <p>We use cookies to analyse traffic and improve your experience.</p>
  <button onclick="acceptAll()">Accept All</button>
  <button onclick="rejectAll()">Reject All</button>
</div>

Want continuous monitoring instead of weekly digests?

Upgrade to WatchSuit Pro — $499/mo → Daily automated scans · Violation alerts · Score history for up to 5 domains
← Back to all issues