Adtech & metrics: EU law evolutions and tomorrow�s legal strategies” – tentative title for our next webinar mid-May, in the form of a 2h virtual & complimentary workshop. Measurement, attribution, monetisation; legal grounds and technologies. A number of key topics would be examined from a legal perspective (taking into account the broader data protection framework […]
No, consent is *not* required for real-time bidding or targeted ads pursuant to the CJEU’s IAB Europe / TCF judgment. Why not? Because the paragraph where the CJEU suggests this is not part of the scope of the responses, so it’s an “obiter dictum” – that’s what it’s called when a court says something that […]
You’re a Chief AI Officer! And you! And you too!” – Recently, requiring AI officers has become all the rage. (Funnily enough, there were Chief Internet Officers at one point, and there may still be vestiges of the role of Chief Blockchain Officer in some places) In the US, the White House Office of Management […]
Did I get this right? Thierry Breton at the European Commission is suggesting that a specific form of advertising (“contextual” – i.e. ads based on limited data) is required by the DMA, as an alternative to another (profile-based advertising), and that a “consent or pay” approach might not be permitted (the Commission apparently has “serious […]
Laws with cybersecurity requirements: time for the lawyer to wear a hoodie and for the CISO to put on a lawyer’s gown. [because we all know that’s how the other profession dresses 100% of the time] For years I have been stressing the need for cybersecurity and legal teams to work as one – and […]
Stunned to notice, while re-reading an important Opinion by an Advocate General to advise a client, that when he says “According to the case-law of the Court of Justice [of the European Union]”, he is actually quoting non-binding regulatory opinions (not from the CJEU) and only one CJEU judgment that doesn’t even come close to […]
With the IAB Europe judgment and some others, you may have missed the CJEU’s appellate judgment in the OLAF case on the EUI GDPR – which (also) deals with the concept of “personal data”. Here is my take: First, the EUI GDPR – Regulation 2018/1725 – is extremely similar to the GDPR itself, also as […]
Want to know what is the impact of today’s IAB Europe / TCF judgment for your business? (A couple of adtech / martech players have already reached out for advice, so I figure it may be a question many have) If you can’t find the answer to your specific situation in the IAB Europe FAQ […]
Summary + thoughts on the CJEU’s answer to the 2nd question (“is IAB Europe (joint) controller?”) in the�IAB Europe�& TCF case (C-604/22). [Again, I may be biased] – 55: Broad definition of “controller” in order to ensure an effective and complete protection of data subjects (C-210/16) 57: A natural or legal person who influence “for […]
Summary + thoughts on the CJEU’s answer to the 1st question (“is the TC String personal data?”) in the IAB Europe & TCF case (C-604/22). [I may be biased] – 33: CJEU data protection Directive case law is “in principle” also relevant for the GDPR, “given that this directive was withdrawn by and replaced by […]