Can't find what you're looking for? Try the search bar or refine your parameters using the Frameworks & Concepts button above.
Want to learn about mobile app reflexes re GDPR + ePrivacy compliance, and fancy hearing about both the legal and technical aspects and how they interact? Watch the recording of the webinar that Thomas Ghys and I gave today (1h). We talk in it about the CNIL recommendations re mobile apps, what regulators are likely […]
Websites, web apps & cookies get a lot of attention, but the GDPR and ePrivacy rules also apply to other digital properties & technologies. To emphasise this, the CNIL published recommendations for mobile apps last September. During a free webinar on 3 February, Thomas Ghys and I will cover practical considerations relating to these recommendations, […]
The new French fine against Orange for notably displaying ads among a list of e-mails is a misstep, in my view. It builds upon a rare legal misstep of the CJEU, a case in which the highest EU judges introduced subjectivity in an ePrivacy provision that was built around objective criteria. I am speaking about […]
The European Data Protection Board is at it again: an urgent procedure has been launched to obtain clarification on “some of the core issues that arise in the context of processing for the purpose of developing and training an AI model”. The aim? To bring “some much needed clarity into this complex area”. Yet the […]
Let the name-calling begin. Companies looking to leverage data are now told that it is just like they are responsible for oil spills, cancer and drug cartel violence. As a lawyer working for some of the companies facing these absurd comparisons, I thought I would tackle another controversial stance now: just how absolute (or relative) […]
Reading through the CNIL’s new decision against Yahoo on cookies brings back to mind a question that has stuck with me for well over a decade: what is the exact reasoning that has led many EU-based authorities to say that advertising cookies/etc. are not strictly necessary for the provision of a service, and why does […]
Last week, I questioned the European Data Protection Board’s very authority to adopt its newly published Guidelines 2/2023 on Technical Scope of Art. 5(3) of ePrivacy Directive (i.e. the so-called “cookie” rule), guidelines according to which those rules should also apply to a broad range of other technologies and information, such as IP addresses, pixels […]
