Can't find what you're looking for? Try the search bar or refine your parameters using the Frameworks & Concepts button above.
How the EDPB’s attempt to rewrite key data protection concepts creates more issues than it solves Through its Guidelines 02/2026 on Anonymisation of 7 July 2026, the European Data Protection Board seems at first glance to have done the honourable thing: admitting defeat and moving on. But behind the apparent recognition of the relative nature […]
The clear repudiation of an “absolute” concept of personal data has thrown a sharp focus on the process of pseudonymisation in the world of data protection. Through its SRB judgment of 4 September 2025, the Court of Justice of the European Union (CJEU) made it clear that personal data that has undergone pseudonymisation can be […]
Does training of AI systems involve the processing of personal data, and is it permitted under the GDPR? These were the two fundamental questions that I have already looked into in two previous articles: On the date of that second article, the Cologne Higher Regional Court (the Oberlandesgericht Köln – the Cologne HRC) delivered a […]
Many myths and exaggerations in reactions to WhatsApp’s announcement re ads. From “everything I mention in chats is used for ads” (that’s not how digital advertising works, and Meta had even made it clear message content is never used) to “all your Instagram and Facebook data is used” (while the WhatsApp announcement suggests this only […]
The European Commission’s announcement that it will consider simplifying regulatory regimes, notably in relation to data and technology, seems to open Pandora’s box. Is it a chance to draw lessons from what works well and what works less well? In this series on “Better Regulation” in relation to the digital economy, I will be exploring […]
Let the name-calling begin. Companies looking to leverage data are now told that it is just like they are responsible for oil spills, cancer and drug cartel violence. As a lawyer working for some of the companies facing these absurd comparisons, I thought I would tackle another controversial stance now: just how absolute (or relative) […]
Reading through the CNIL’s new decision against Yahoo on cookies brings back to mind a question that has stuck with me for well over a decade: what is the exact reasoning that has led many EU-based authorities to say that advertising cookies/etc. are not strictly necessary for the provision of a service, and why does […]
