Can't find what you're looking for? Try the search bar or refine your parameters using the Frameworks & Concepts button above.
Is Brillen-Rottler truly nothing new, as some appear to be suggesting? This new judgment of the EU Court of Justice confirms that data subject access requests made with a demonstrable aim of obtaining an advantage other than the gaining of awareness about the processing of personal data can be rejected as abusive. Given the number […]
What evolutions await data protection litigation & GDPR fines/sanctions in Belgium? Since Hielke Hijmans announced he is stepping down from his role as Director of the Litigation Chamber of the Belgian Data Protection Authority, hearings in ongoing cases have been pushed back until an as of yet unspecified date. It’s unclear whether it is feasible […]
Why banning minors from accessing social media etc is a bad idea: (i) While I think it is unjustified fear-mongering, several consumer rights organisations and privacy researchers say it will lead to mandated surveillance of Internet usage, and that it will concentrate power among the platforms that are able to deploy age verification effectively. I […]
Scientific push against blocking of minors: since December, journalists from across Europe & Australia have asked me to comment on age-gating initiatives internationally to restrict minors’ access to online content, and at the CEDPO conference in 2025 I pushed back against a 5-person panel that was fully in favour of prohibiting minors’ access to social […]
Is “personal data” an asset? A study on human dignity & data protection has been released that on paper sounds like it should cover all the key topics. Its authors argue that individuals are “the primary right-holders in relation to the processing of their personal data” and that these “are dignity-relevant manifestations of the person […]
Interesting study on where human dignity and data protection come together, worth the read. I’m not convinced by some parts, though, as there is too much room left for subjectivity in the way certain things are worded. The authors suggest 7 guiding principles, but of particular interest to me were their suggested 6 limits to […]
[This is a translation of an op-ed in French that was published in the French journal Revue Politique on SRB and the Digital Omnibus, plus the newest EDPB & EDPS Joint Opinion on the topic. The original in French can be found on the Revue Politique website. + The banner image is a jest – […]
What to expect from the EDPB and EDPS on 10 February re the Digital Omnibus on GDPR and ePrivacy? Today I had the privilege of attending an event organised by The Lisbon Council with a very select group of representatives of companies, industry associations, BEUC, the Commission and the EDPB. We discussed the Digital Omnibus […]
When do contracts have to be provided in response to a data subject access request? And should a controller maintain a copy thereof to enable data subject requests? A new Belgian DPA decision deals with this issue, applying the EU Court of Justice’s CRIF judgment to the issue of bank account contracts. Article 15 GDPR […]
The Irish DPC’s guide on accessing data on behalf of someone else remains relevant but incomplete. (It dates back to 2021 and has just been republished, in case anyone thought it sounded familiar.) It touches upon a very difficult issue – and one less clear-cut than the Irish DPC suggests. Yes, there are good reasons […]
