How AI hallucinations clash with data subject rights under the GDPR

AI Hallucinations and Data Subject Rights under the GDPR: Regulatory Perspectives and Industry Responses” – really insightful paper on the links between the GDPR and the way AI models work. Worth the read (and do check out the links on page 4, not just the one to my op-ed on the issue – https://lnkd.in/eYXabSfs – […]

Read Analysis →

Will the Mayer case become the classic Streisand effect example for LLMs?

Will the “Mayer” case soon be the “Streisand effect” example for LLMs? As a reminder, there is much to be said about whether there is any processing of personal data in AI models and LLMs in particular – see my in-depth analysis here: https://lnkd.in/eVuiU5QJ

Read Analysis →

Why the extended public consultation deadline for ePrivacy guidelines matters to you

Very important public consultation – and now we have 3 additional weeks to respond. More insights: https://lnkd.in/dGWtcQCA eprivacy cookies data protection

Read Analysis →

Time is running out to comment on the expansive new EDPB tracking rules

Just over a month left to comment on the EDPB’s expansive ePrivacy guidelines*. Your business is more impacted than you think, so react quickly. Here are some observations based on my discussions with clients: – This has a very broad impact and has got several sectors worried, notably traditional digital service providers who see the […]

Read Analysis →

The Belgian DPA targets shared customer loyalty schemes among retailers

The Belgian DPA’s newest decision – about a shared customer loyalty scheme allowing participating retailers to have up-to-date data regarding a customer, some of the data coming from national identity cards – is worth a read. [Skip pages 8-35 if not a Belgian data protection lawyer, though] Q1: (Joint) controllership? [paras. 215-232] The Belgian DPA […]

Read Analysis →

Inside the Belgian DPA management plan for aligning sanctions with EDPB fine rules

One of the tidbits in the Belgian Data Protection Authority’s “Management Plan 2024”: “Setting a sanctions policy, taking the EDPB’s guidelines on fines into account” (action point for 2024 for the Litigation Chamber). Interestingly for the broader question of the legal value of EDPB guidelines, this sanctions policy is described elsewhere in the document as […]

Read Analysis →

Can you actually afford a free alternative tier under pay or OK rules?

Pay or OK: can you afford to have a “free alternative without behavioural advertising” next to a version of the service funded by profile-based advertising? Meta has just launched its own implementation of the European Data Protection Board’s requirement (see press release by Meta and article in the Wall Street Journal, linked to hereunder), and […]

Read Analysis →

Let’s connect at the upcoming IAPP DPC24 conference in Brussels

Going to IAPP DPC24 in Brussels next week? Fancy having a chat? Reach out by direct message or by e-mail! I will be giving the adtech workshop on Tuesday 19 November (from 9 to 12.30 at Studios 214 & 216) and will be around the conference venue the remaining days – be sure to say […]

Read Analysis →

Why every digital enterprise needs to challenge the new EDPB tracking scope

Why every company with digital activities should comment on the EDPB�s new ePrivacy guidelines” – the short(er) version of the two-parter I published the past week on the new EDPB guidelines on Article 5(3) of the ePrivacy Directive. *** So much for tackling consent fatigue. If unchanged, the new EDPB guidelines on what is known […]

Read Analysis →

An audio deep dive into pay or OK, ePrivacy, and adtech consent

Pay or OK, ePrivacy, GDPR consent and adtech: 60-minute interview by Sergio Maldonado available on Spotify, Apple Podcast and online: Web: https://lnkd.in/ewB236Wg Spotify: https://lnkd.in/eWd2bxpW Apple Podcast: https://lnkd.in/eGrKdQRE data protection

Read Analysis →