Kritia Law WatchAI-generated
DPC prosecution, Dutch Uber fine, UODO AI questions and healthcare AI recommendations
AI-generated. This briefing was drafted by artificial intelligence and passed Kritia’s automated source and claims checks. It did not receive human editorial review before publication.
The DPC reports a guilty plea and court orders against Brown Thomas Arnotts; CNIL reports a fine imposed by the Dutch authority on Uber. The UK National Commission recommends a future healthcare-AI framework, while UODO’s president highlighted pre-deployment questions for AI administrators.
01 — ENFORCEMENT
Decisions authorities and courts actually published.
DPC prosecution over unlawful electronic marketing (3 minute read)
Irish Data Protection Commission· IE
The DPC reports a guilty plea by Brown Thomas Arnotts Limited in an electronic-marketing prosecution. The court ordered €1,000 to a local charity and €1,000 towards the DPC’s legal fees. The DPC says engagement and mitigation measures provided a suitable conclusion, and notes a previous warning in March 2022.
Why it matters to you
The DPC says organisations remain accountable for personal data used in marketing and that non-compliance with the ePrivacy Regulations may result in criminal prosecution.
CNIL reports €825 million automated-decision fine against Uber (4 minute read)
French Data Protection Authority (CNIL)· EU
CNIL reports that, in cooperation with it, the Dutch data protection authority fined Uber B.V. and Uber Technologies Inc. €824,990,000 over automated individual decisions concerning platform drivers. The Dutch authority considered account deactivations for suspected fraud or low customer ratings to be automated individual decisions because there was no human intervention.
Why it matters to you
The decision concerns automated decisions that significantly affect drivers, according to the Dutch authority as reported by CNIL. The evidence identifies the Dutch authority as the imposing authority and CNIL as a cooperating authority.
02 — RULES & GUIDANCE
New or changed official text, guidance and proposals.
National Commission recommendations for a future framework regulating AI in healthcare (5 minute read)
UK Department of Health and Social Care· GBNot law yet
The UK National Commission recommends a future framework for healthcare AI that is more proportionate, lifecycle-based and system-wide. Its evidence found support for healthcare AI was conditional on safe, fair and transparent use, clear evidence of benefit, meaningful human oversight, accountability and continued public trust. The recommendations are for a future framework, not current law.
Why it matters to you
The recommendations indicate possible future UK expectations around lifecycle monitoring, real-world evidence, oversight and responsibility for AI-enabled healthcare products and services.
03 — PRACTICAL
Worth doing, or worth the time to read.
UODO highlights pre-deployment questions for organisations using AI (3 minute read)
Polish Data Protection Authority (UODO)· EU
At an event in Opole, UODO’s president referred participants to the authority’s initial questions for administrators to ask before deploying AI systems. The evidence says UODO stressed that AI use should respect data-protection law and that data protection officers should be involved in processing-related processes. The item reports remarks made during UODO’s September initiative.
Why it matters to you
The item points readers to UODO’s own pre-deployment questions and records the authority’s emphasis on legal basis, data protection officer involvement and data-protection risks when using AI.
04 — THE WIDER VIEW
Written about the rules, not by the people who make them.
Nothing worth your time today.
05 — COUNTDOWN
83days · 2026-12-02
Machine-readable marking for generative systems placed on the market before 2 Aug 2026.
What this isn’t
News about the law, not legal advice, and not an assessment of your business. Items marked Analysis are someone’s view of the rules, not the rules. Whether a duty applies to you depends on what you actually do. The public guides explain the general rules and link their primary sources.
Get this each publishing day
Free by email, with no account and no card. About a minute to read, every reported item linked to its source.