Can't find what you're looking for? Try the search bar or refine your parameters using the Frameworks & Concepts button above.
In 2026, agentic AI has moved from being a trendy tinkerer’s experiment to a tool of mass appeal, with corporate AI agents being deployed increasingly often and most high-profile AI labs launching personal AI agent offerings one after another, over the course of just a few months. The period in which I wrote my previous […]
The clear repudiation of an “absolute” concept of personal data has thrown a sharp focus on the process of pseudonymisation in the world of data protection. Through its SRB judgment of 4 September 2025, the Court of Justice of the European Union (CJEU) made it clear that personal data that has undergone pseudonymisation can be […]
From fishing (instead of the GDPR) to a random “v” having appeared instead of a few words (a typo upon deletion?), the Commission’s GDPR & Data Act Omnibus feels like a rushed document. But what does it cover really? I’m focussing here on GDPR & ePrivacy: – Personal data definition: I like the idea of […]
Does training of AI systems involve the processing of personal data, and is it permitted under the GDPR? These were the two fundamental questions that I have already looked into in two previous articles: On the date of that second article, the Cologne Higher Regional Court (the Oberlandesgericht Köln – the Cologne HRC) delivered a […]
The European Commission’s announcement that it will consider simplifying regulatory regimes, notably in relation to data and technology, seems to open Pandora’s box. Is it a chance to draw lessons from what works well and what works less well? In this series on “Better Regulation” in relation to the digital economy, I will be exploring […]
Great events I’ll have the pleasure of speaking at in May: 1?? First, an IAPP web conference on adtech where I will be speaking alongside Dr. Sachiko Scheuing (with Joe Jones as moderator). “Adtech: Practical takeaways from recent EU developments”, on 7 May 2024 (4-5pm CET; 10-11am Eastern US). Organised by the IAPP – International […]
Yesterday, I had the pleasure of giving a 5h presentation on the latest case law on the GDPR and other data protection legislation at various levels (Belgium, other EU countries, the Court of Justice and the European Court of Human Rights) to Data Protection Officers from a broad range of organisations and companies. The past […]
The European Data Protection Board is at it again: an urgent procedure has been launched to obtain clarification on “some of the core issues that arise in the context of processing for the purpose of developing and training an AI model”. The aim? To bring “some much needed clarity into this complex area”. Yet the […]
Out of the blue, I just received an invitation to apply for a job as Tax legal advisor. Contrary to their belief (hopefully not yours), I have developed a different kind of expertise (maybe I should offer my services to help them improve their understanding of their data). If, unlike them, you think I might […]
Illustration: Dall-E rendering of just how potentially evil the European Data Protection Board (EDPB) and certain privacy rights campaigners view the “Pay or Consent” approach + large companies. I didn’t try to get any drug cartel references in there, though as a lawyer acting for adtech companies I have been likened to a drug cartel […]
