Can't find what you're looking for? Try the search bar or refine your parameters using the Frameworks & Concepts button above.
The smart glasses debate has brought to the fore reactionary views that have been prevalent throughout history, at least since the portable camera was invented. In my previous deep dive (“Blinded by the LED: smart glasses, GDPR, and the illusion of hardware indicators“), I highlighted the fact that the same arguments being made today about […]
How the EDPB’s attempt to rewrite key data protection concepts creates more issues than it solves Through its Guidelines 02/2026 on Anonymisation of 7 July 2026, the European Data Protection Board seems at first glance to have done the honourable thing: admitting defeat and moving on. But behind the apparent recognition of the relative nature […]
Another week, another product announcement from someone involving AI in your pocket, on your wrist, in front of your eyes. I have met people whose lives have literally been transformed as a result of some of these tools, such as an individual who is suddenly able to use a camera in glasses to film his […]
OK, a few words about the CNIL decision re IQVIA. Spoiler alert: it’s in my view a completely wrong decision, and it deliberately misquotes the CJEU’s SRB judgment: 1. “[T]his role as controller prevents, in itself, the data from being regarded as anonymous” (CNIL, §90): incorrect! The CJEU explicitly states the following in §76 of […]
The clear repudiation of an “absolute” concept of personal data has thrown a sharp focus on the process of pseudonymisation in the world of data protection. Through its SRB judgment of 4 September 2025, the Court of Justice of the European Union (CJEU) made it clear that personal data that has undergone pseudonymisation can be […]
On the Criteo decision of the French Conseil d’État: beyond the question of whether online identifiers are sufficient for identification (see below), this is a typical case of a court keeping fines 100% intact after questioning the scope of processing. It’s not the first time I have seen this: a court says “this isn’t all […]
[This is a translation of an op-ed in French that was published in the French journal Revue Politique on SRB and the Digital Omnibus, plus the newest EDPB & EDPS Joint Opinion on the topic. The original in French can be found on the Revue Politique website. + The banner image is a jest – […]
Good & bad of the new CNIL study on perception of digital services and readiness to pay vs targeted advertising: 1. “Paid offers that allow them to better protect their personal data”: This line in the CNIL write-up shows part of the issue. Campaigners and some regulators view “pay or OK” approaches – i.e. “subscription […]
Simplification and the Draghi report in relation to EU digital laws: what could/should be done? Some thoughts I shared at an event yesterday on the topic: 1. The laws themselves are not always bad. While I have argued for getting rid of the ePrivacy Directive altogether (by taking into account overlaps with the GDPR and […]
Does training of AI systems involve the processing of personal data, and is it permitted under the GDPR? These were the two fundamental questions that I have already looked into in two previous articles: On the date of that second article, the Cologne Higher Regional Court (the Oberlandesgericht Köln – the Cologne HRC) delivered a […]
