-
IAPP UK 2025: panel on adtech
In London on 12 March for the IAPP DPI25 conference? Come to our great panel (ICO rep, UK lawyer, US lawyer & me) on “PETs, AI and Cookieless: Framework for New Adtech and Metrics Approaches”. It is quite the panel, with a super list of topics: Speakers:– Hannah Crowther (Partner for Data Protection & Privacy…
-
Bindl – preliminary comments
The Bindl judgment is significant. Some positives for controllers/processors: (i) hypothetical, unproven data transfers are not transfers (“the mere risk of access to personal data by a third country cannot amount to a transfer of data” – para. 135);(ii) repeating the principle (for EU Institutions’ non-contractual liability, but similar ones exist in most countries) that…
-
Mousse – first thoughts
First thoughts on the CJEU’s Mousse judgment (“is Mr/Mrs necessary?”): (i) alternative apparently required to each personalisation; (ii) data minimisation is inherent to the assessment of (strict) necessity; (iii) the risk of discrimination has an impact on a legitimate interest assessment. I’ll focus for now on (i). The CJEU appears to require the offering of…
-
Op-ed: AI training data = (non-)personal data? And is consent really relevant?
The European Data Protection Board is at it again: an urgent procedure has been launched to obtain clarification on “some of the core issues that arise in the context of processing for the purpose of developing and training an AI model”. The aim? To bring “some much needed clarity into this complex area”. Yet the…
-
Op-Ed: Who dares question the primacy of data protection?
Let the name-calling begin. Companies looking to leverage data are now told that it is just like they are responsible for oil spills, cancer and drug cartel violence. As a lawyer working for some of the companies facing these absurd comparisons, I thought I would tackle another controversial stance now: just how absolute (or relative)…
-
Op-Ed: A critical analysis of the EDPB’s “Pay or Consent” Opinion
Illustration: Dall-E rendering of just how potentially evil the European Data Protection Board (EDPB) and certain privacy rights campaigners view the “Pay or Consent” approach + large companies. I didn’t try to get any drug cartel references in there, though as a lawyer acting for adtech companies I have been likened to a drug cartel…
-
Op-Ed: If AI replaces work for junior lawyers, what happens next?
“AI won’t replace you – a lawyer who uses it will” is quickly becoming a cliché – but what about junior lawyers and the next generation(s)? A newly published study on legal contract review brings this question again into focus (Better Call GPT, Comparing Large Language Models Against Lawyers), as it concludes that “LLMs perform…