Can't find what you're looking for? Try the search bar or refine your parameters using the Frameworks & Concepts button above.
First come, first served! Register now for an exclusive event on 2 September with the Belgian DPA for the 5th anniversary of its Litigation Chamber, in French & Dutch (with live translation into the other language – but no English foreseen). Very honoured to be among the very select group of speakers – and as […]
Art. 64(2) GDPR is really problematic. It’s a horrendous mechanism, as currently applied by data protection authorities and the EDPB: – If a supervisory authority (SA) thinks something is important it can ask an Opinion from the EDPB, which has 8 weeks (+ 6, so 14 in total, in complex cases) to respond. Not much […]
Good analysis by Rob Corbet and his team. [+ thanks for the references to my op-eds!*] We have been advising many companies and associations on this, notably on possibilities to challenge this Opinion (and other EDPB positions) or to influence the coming Guidelines on Consent or Pay. Interesting times ahead regarding subscription models and advertising-based […]
What a sight outside during our debate today on “Privacy by Design Online Marketing”, with Tobias Judin ?????? of the Norwegian DPA / Datatilsynet (great exchanges between us of course), Dr. Sachiko Scheuing of Acxiom/FEDMA (ever practical insights into how organisations approach digital marketing) and Luca Bolognini of ICT Legal Consulting (fantastic ideas regarding transparency), […]
Very good piece by Kristin Johnston on aigovernance and in particular how to start the process. One recommendation – building AI governance on top of existing privacy processes – is very relevant but you have to be careful about how you implement it. The key challenge is making sure it can be sufficiently distinct as […]
Very soon higher GDPR fines in Belgium? A recent judgment by the Court of Appeal of Brussels said that the Belgian DPA’s methodology for calculating fines was unclear, but that symbolic victory by one controller may create a significant risk for others… In a judgment in which it *confirmed* the Belgian DPA’s decision on the […]
New Belgian DPA decision, interesting on 3 points: 1. Confirmation of BDPA’s approach re “legal obligation” and “public interest” legal grounds 2. Re retention: the need to assess recidivism does not justify unlimited processing 3. Reference to EDPB’s newly updated GDPR fining guidelines (re factors affecting the amount of the fine) 1. The Order of […]
A must-watch: here is the recording of our fun CPDP2024 panel discussion on the EU data strategy (covering GDPR, DMA, AIAct, fundamental rights, PayOrOK and much more re data protection). The other panel participants were Patricia Vidal Martinez, Luca Bolognini and Rob van Eijk, and it was moderated by Cecilia Alvarez. Really fantastic stuff – […]
Is your DPO overworked? Do certain requests from authorities fall through the cracks? You could be in breach of the GDPR, says the Belgian DPA in its newest decision. In this particular case, a DPO was working three days per week, and was the only person to have access to a particular e-mail address to […]
Lawyers can both be AI advisors (legal implications) and users of machine learning / generativeai / applied statistics / … systems. Tomorrow we will be helping members of the Flemish Bar Association understand some of the key things to look out for and reflexes to have – both for themselves and for their own clients. […]