Can't find what you're looking for? Try the search bar or refine your parameters using the Frameworks & Concepts button above.
Great to see so many big and small(er) names of the adtech, publishing and metrics world have already registered for our 2h complimentary webinar taking place on 16 May at 3pm CET / 9am EDT, entitled “Adtech & Metrics: EU Law Evolutions and Tomorrow�s Legal Strategies”. GDPR, ePrivacy, DMA (Digital Markets Act) and DSA (Digital […]
7 points after giving another in-depth presentation to global businesses on the path to NIS2 compliance (with a flavour of DORA and GDPR): (i) Having a broad enough team (“multidisciplinary” / “multi-stakeholder” / however you wish to call it) is not easy for many organisations, irrespective of their size (this is nothing new, but it […]
Time to talk about what can be done to improve the “cookie” rule! In Part I of this series on the opportunities and difficulties of today’s ePrivacy regime, I discussed the underappreciated and seemingly-easy-but-really-complex world of the anti-spam rule, Article 13 of the ePrivacy Directive (or ePD). This Part II is about a provision that […]
Now that the Commission has withdrawn its proposal for an ePrivacy Regulation, where does that leave the ePrivacy Directive and the issues organisations face? Over the past 7-8 years, a lot has been said about the proposed ePrivacy Regulation. Intended as both a modernisation of the ePrivacy Directive and a manner of getting to (more) […]
Yesterday, I had the pleasure of giving a 5h presentation on the latest case law on the GDPR and other data protection legislation at various levels (Belgium, other EU countries, the Court of Justice and the European Court of Human Rights) to Data Protection Officers from a broad range of organisations and companies. The past […]
Wasn’t FOMO manipulation / “trick wording” a darkpattern? Why then do some critics thereof use them? Genuinely curious. Not all do so, far from it (and some of the most prominent ones are very good at *avoiding* such techniques), but it seems that some enjoy labelling everything as “Breaking” (even information that is more than […]
The European Data Protection Board is at it again: an urgent procedure has been launched to obtain clarification on “some of the core issues that arise in the context of processing for the purpose of developing and training an AI model”. The aim? To bring “some much needed clarity into this complex area”. Yet the […]
Panel I’m moderating at RAID: EDPB Chair Anu Talus, Luxembourg CNPD President Tine A. Larsen, Deputy Head of Data Protection Unit at the Commission’s DG Justice Karolina Mojzesowicz, MEP Brando Benifei and Gibson Dunn Partner Ahmed Baladi. Topic: “Making Tech Legislation Work in Practice Time: noon CET on Tuesday 24 September Key topics: – What […]
Practical checklist: good practices for vendor/supplier risk management inspired by GDPR, NIS2, Data Governance Act and DORA. The underlying question: what good practices do these EU laws highlight and transform into legal obligations in certain cases, and how can we combine them? This checklist is *not* a comprehensive list of best practices, but it should […]
What a week! So what’s next? After 3 speaker slots at CPDP2024 (featuring some of the most heated exchanges of the entire conference), one webinar, and loads of really good discussions on the biggest data protection topics (“Pay or OK”, “Advertising, data protection and AI”, “balancing of fundamental rights: protection of personal data vs/with freedom […]
