The latest DLA Piper GDPR Fines and Data Breach Survey provides a comprehensive overview of data protection enforcement trends across Europe, including the Central and Eastern European (CEE) region. CEE countries are in the mid-range in terms of total GDPR fines imposed since the regulation became applicable in 2018 and for last year, but enforcement activity is steadily increasing. Here are the latest trends and legal developments in Austria, the Czech Republic, Hungary, Poland, Romania, and Slovakia.

On 11 February 2025, the Ukrainian Government adopted a resolution regulating various aspects of cloud and data center services (the "Services") provision and use. In particular, the resolution introduces:

By judgment from 9 January 2025 in Case C‑394/23 the Court of Justice (CJEU) rules that the processing of personal data relating to the title of the customers of a transport undertaking is not necessary and might even be not legally grounded.

Kinstellar has advised Paradox Interactive on its acquisition of Haemimont Games.

CMS has advised Actis on the acquisition of Dot Towers through its Connectis Tower platform, adding 50 sites to Actis’ portfolio.

Digital transformation has become a priority for all major companies. This is being driven only further by the spread of artificial intelligence's commercial use cases and ever-tightening data protection and cybersecurity regulations. However, procuring enterprise software (concerning both the development of custom-made software and "off-the-shelf" software developed for mass use) may give rise to various legal issues. Promptly identifying and addressing these issues can help prevent considerable legal and operational expenses, as well as other inconveniences.