GDPR fines for Google and Swedish software provider. Spain's 1st agentic AI data breach

By Sypher | Published in News - September 28, 2026


Welcome to #SypherPrivacyTalks - your data protection, governance and compliance weekly roundup. Bringing you the top stories of the week.

Google hit with €403M GDPR fine over location tracking

helpnetsecurity.com • 2 min read

💶 Google’s €403 million GDPR penalty highlights how opaque and invasive location tracking defaults can undermine user control. The company was ordered to bring its processing into compliance within six months … read more


Swedish software provider fined after data breach exposed data of 2.2M people

cybernews.com • 3 min read

💥 Sweden’s data protection authority fined public-sector software supplier Miljödata €160,000 for failing to implement basic GDPR security measures. This allowed attackers to steal and leak the sensitive data of 2.2 million people… read more


Lessons from Spain’s first reported agentic AI data breach

ropesgray.com • 10 min read

🤖 Spain has reported its first AI-driven data breach, after an autonomous, LLM-based attack broke into a system and altered personal data. This raises questions about whether current GDPR security models can withstand machine-speed intrusions… read more


The Data Act: “Access by Design” requirement comes into force for medical devices

matheson.com • 10+ min read

🏥 The EU’s Data Act has reached a major milestone. From 12 September 2026, all new connected products, including medical devices, must be designed to allow users to directly access the data they generate free of charge and by default… read more


Europe’s digital rulebook: Understanding the DMA, DSA, and the new enforcement landscape

reedsmith.com • 25 min listen time

🎙️ Listen to this recording to find out how record fines, gatekeeper obligations and new content governance duties are changing the EU tech landscape, affecting everything from search engines and app stores to marketplaces and social media platforms… listen here

--

Get connected with us on LinkedIn or by subscribing to our weekly newsletter. We do our best to select the most interesting and relevant content in our field and deliver it to you in a bite-sized format, so you can stay up to date on topics such as Privacy Management & Compliance.