Practitioners’ Corner: The Proactive Imperative: A Legal Analysis of DPA Enforcement Actions and Lessons from the 23andMe and Carrefour Data Breach Incidents

Felipe Romero-Moreno

doi:10.21552/edpl/2025/3/13

Practitioners’ Corner: The Proactive Imperative: A Legal Analysis of DPA Enforcement Actions and Lessons from the 23andMe and Carrefour Data Breach Incidents

Felipe Romero-Moreno

Schools of Law and Education

Research output: Contribution to specialist publication › Article

10 Downloads (Pure)

Original language	English
Pages	361-368
Number of pages	7
Volume	11
No.	3
Specialist publication	European Data Protection Law Review (EDPL)
Publisher	Lexxion Verlagsgesellschaft mbH
DOIs	https://doi.org/10.21552/edpl/2025/3/13
Publication status	Published - 25 Sept 2025

Keywords

Data Protection
Enforcement Actions
Data Protection Authorities
UK
Spain
Data Breach
23andMe
Carrefour

Access to Document

10.21552/edpl/2025/3/13Licence: Unspecified

Accepted_VersionAccepted author manuscript, 299 KBLicence: Unspecified

Cite this

@misc{83e2d1ddf8804a0b8468f8c3497d0393,

title = "Practitioners{\textquoteright} Corner: The Proactive Imperative: A Legal Analysis of DPA Enforcement Actions and Lessons from the 23andMe and Carrefour Data Breach Incidents",

keywords = "Data Protection, Enforcement Actions, Data Protection Authorities, UK, Spain, Data Breach, 23andMe, Carrefour",

author = "Felipe Romero-Moreno",

year = "2025",

month = sep,

day = "25",

doi = "10.21552/edpl/2025/3/13",

language = "English",

volume = "11",

pages = "361--368",

journal = "European Data Protection Law Review (EDPL)",

issn = "2364-2831",

publisher = "Lexxion Verlagsgesellschaft mbH",

address = "Germany",

}

TY - GEN

T1 - Practitioners’ Corner: The Proactive Imperative: A Legal Analysis of DPA Enforcement Actions and Lessons from the 23andMe and Carrefour Data Breach Incidents

AU - Romero-Moreno, Felipe

PY - 2025/9/25

Y1 - 2025/9/25

KW - Data Protection

KW - Enforcement Actions

KW - Data Protection Authorities

KW - UK

KW - Spain

KW - Data Breach

KW - 23andMe

KW - Carrefour

U2 - 10.21552/edpl/2025/3/13

DO - 10.21552/edpl/2025/3/13

M3 - Article

SN - 2364-2831

VL - 11

SP - 361

EP - 368

JO - European Data Protection Law Review (EDPL)

JF - European Data Protection Law Review (EDPL)

PB - Lexxion Verlagsgesellschaft mbH

ER -