In Short (TL;DR)Violators face maximum fines of up to 6% of their global annual revenue for serious, repeated violations.
BRUSSELS — Parliament passed the Consumer Data Sovereignty Act (CDSA) today, representing the most aggressive digital privacy legislation enacted in a generation.
The bill, which passed with a majority, establishes strict rules on data collection, targeted ads, and user data retention schedules.
Key Pillars of the Privacy Bill
Under the CDSA, corporations operating in our trade block must adhere to:
1. **Active Opt-in Consents**: Companies cannot pre-check data sharing boxes. Users must actively opt-in before data monetization.
2. **Right to Complete Erasure**: Enables citizens to request permanent deletion of their database records within 72 hours.
3. **Ban on Search History Monitization**: Restricts search engines and web portals from selling personal search strings to ad networks.
Enforcement & Financial Fines
The legislation introduces severe financial penalties for non-compliance. Regulatory bodies can impose fines up to 6% of a company's global annual revenue for flagrant privacy violations.
Tech lobbies warn that the restrictions will increase operating costs for startups, while digital rights groups hail it as a monumental step toward rebalancing user sovereignty in the digital age.
