News Summary
The University of Central Florida (UCF) has limited website access for users in the European Economic Area to comply with GDPR regulations. This action follows an EDPB enforcement sweep aimed at ensuring organizations meet data subjects’ rights, specifically the right to erasure. A recent ruling by the CJEU emphasizes the need for organizations to provide clear explanations concerning automated decisions. UCF encourages affected individuals to reach out for assistance as they navigate these data protection challenges.
Orlando, FL – The University of Central Florida (UCF) has restricted access to its website for users located in the European Economic Area (EEA) as a direct response to the regulations set forth by the EU General Data Protection Regulation (GDPR). This restriction comes as the European Data Protection Board (EDPB) initiates a year-long enforcement sweep focused on organizations’ compliance with data subjects’ right of erasure. This sweep began on March 5, 2025, and involves 32 EU member state data protection authorities (DPAs).
The enforcement sweep aims to ensure that organizations uphold their responsibilities under GDPR, allowing individuals, including job candidates and employees, to request the deletion of their personal data. Institutions, both inside and outside the EEA with employees or data handling operations within this region, must assess and potentially revise their data management practices to align with these regulations concerning data subject access requests and erasure rights.
Enforcement and Compliance Expectations
The EDPB’s annual enforcement sweeps, known as Coordinated Enforcement Framework actions (CEFs), evaluate organizations’ adherence to specific principles of the GDPR. Previous CEFs have examined aspects such as the appointment of data protection officers and the execution of the right to access personal data.
A significant ruling by the Court of Justice of the European Union (CJEU) on February 27, 2025, now adds weight to the right of access in relation to automated decision-making processes. This decision stemmed from the case of an individual who was denied a phone contract due to an unfavorable assessment of their creditworthiness based on an automated evaluation by Dun & Bradstreet Austria GmbH. The court concluded that organizations must furnish data subjects with “meaningful information” concerning the logic involved in automated decisions, as outlined in Article 15(1)(h) of GDPR.
Implications of the GDPR Ruling
This ruling highlights that explanations provided by organizations must be clear, intelligible, and accessible, enabling data subjects to comprehend how their data has influenced decision-making. The court emphasized that organizations cannot rely solely on complex algorithms or mathematical formulas for compliance; instead, they must ensure that explanations are straightforward and provide sufficient context.
Moreover, the ruling establishes that the right to data protection under GDPR should be weighed against other fundamental rights, and organizations cannot use trade secret protections as a blanket justification to deny access to information. Organizations are now required to provide substantive explanations to data subjects regarding decisions that significantly impact them, a necessity that grows alongside the heightened use of artificial intelligence technologies.
Looking Forward
The CJEU’s decision is anticipated to have a lasting impact on future interpretations of both the GDPR and the forthcoming AI Act, particularly in relation to the explainability requirements for AI systems. Compliance with GDPR and associated regulations becomes ever more critical, especially with the rise of automated decision-making applications within various sectors.
UCF urges those who may encounter access issues to reach out for assistance via [email protected] or by dialing 407-823-1711. As organizations navigate the evolving landscape of data privacy and protection, adherence to the GDPR appears paramount, marking a significant move towards safeguarding personal information across Europe and beyond.
Deeper Dive: News & Info About This Topic
HERE Resources
Online Bookkeeping Surge Set to Transform Florida’s Small Businesses by 2026
Additional Resources
- Jackson Lewis: EU Data Enforcement Sweep
- Inside Privacy: CJEU Clarifies GDPR Rights
- Data Matters: EDPB Adopts Report on GDPR Right of Access
- Data Guidance: EU Commission Publishes Draft Adequacy Decision
- Reuters: TikTok Fined Over Data Protection
Author: STAFF HERE ORLANDO WRITER
ORLANDO STAFF WRITER The ORLANDO STAFF WRITER represents the experienced team at HEREOrlando.com, your go-to source for actionable local news and information in Orlando, Orange County, and beyond. Specializing in "news you can use," we cover essential topics like product reviews for personal and business needs, local business directories, politics, real estate trends, neighborhood insights, and state news affecting the area—with deep expertise drawn from years of dedicated reporting and strong community input, including local press releases and business updates. We deliver top reporting on high-value events such as Orlando International Fringe Theatre Festival, Megacon Orlando, and Central Florida Fair. Our coverage extends to key organizations like the Orlando Economic Partnership and Hispanic Chamber of Commerce Metro Orlando, plus leading businesses in leisure and hospitality that power the local economy such as Walt Disney World Resort, AdventHealth, and Universal Orlando. As part of the broader HERE network, including HEREJacksonville.com, HEREPetersburg.com, HERETallahassee.com, and HERETampa.com, we provide comprehensive, credible insights into Florida's dynamic landscape.
