Scope: GDPR

Can't find what you're looking for? Try the search bar!

What the formal launch of TCF 2.2 means for publishers and adtech vendors

15 months, countless meetings with publishers, audience measurement providers, adtech players, personalized content companies, … With TCF 2.2 launched, time to reflect on the enormous privilege I had of being involved (and prominently so) in so many stages of the development of new iterations to such an important standard for the online ecosystem. My role […]

Read Analysis →

Utilizing the new ENISA report to build a comprehensive security strategy for AI

Looking for good practices re AI security? The new ENISA report can help. It shows the need for a broad strategy that takes into account various risks (including legal ones) regarding not just your machine-learning algorithm or other tool but also the data sources themselves and the expected output. Bias, for instance, is not a […]

Read Analysis →

Why the EDPB fining methodology hits small and medium enterprises the hardest

We showed a year ago that the European Data Protection Board’s fining methodology would likely lead to much higher fines… but at the time it seemed like SMEs would not be that strongly affected. The newest version of the fines just seems to confirm that everyone will be affected, and even more so than before. […]

Read Analysis →

Practical strategies for aligning data governance with upcoming EU tech laws

Good reflexes regarding datagovernance and aigovernance, what to expect from the upcoming legislation and how to prepare, those were some of the topics discussed during our panel on the EU draft AIAct and the DataAct at the Flanders AI Forum 2023. A few additional thoughts: “Data/AI isn�t our core business�? Every business involves data & […]

Read Analysis →

The absolute necessity of understanding your corporate data before hiring talent

On the importance of knowing your data well: a recruiter just cold-contacted me about a position that would be perfect for “a data scientist such as yourself”. Hint: data scientist and data lawyer do not often mean the same thing* **. The GDPR and other data protection rules are there to ensure that if you […]

Read Analysis →

Reflecting on what it takes to build an agile, tech-focused legal team

The team is intellectually agile, energetic and always available. Our industry can be complicated to understand, due to fast-paced technology developments, and the technical background of the partner we work with facilitates a lot our interactions and significantly improves the quality of deliverables. “[…] pedagogy and ability to simplify has been crucial to boost communications […]

Read Analysis →

The Belgian DPA draws a hard line against excessive eight-year email access requests

Ex-employee request for 8 years of e-mails, labelled excessive by Belgian data protection authority in new decision. What is an “excessive” data subject request under the GDPR has not often been discussed by authorities, so this case may be of interest – but careful generalising it too hastily, due to the facts. Facts: – X, […]

Read Analysis →

Comparing French CNIL enforcement strategies with the uniform EDPB fine rules

How do GDPR fines of the French CNIL (and other authorities) compare to the EDPB’s guidelines on administrative fines for data protection infringements? That’s what the excellent Florence Chafiol and I will be discussing during our session (in French) at the IAPP’s “DPI: France” on Tuesday 14 March in Paris. Trends, divergences (+ forum shopping), […]

Read Analysis →