Can't find what you're looking for? Try the search bar or refine your parameters using the Frameworks & Concepts button above.
Objectively indispensable”, that’s how the CJEU describes the threshold for processing of personaldata to be necessary for performance (or conclusion) of a contract under Art. 6(1)(b) GDPR. In its new Meta judgment (case 252/21), the Court of Justice examined many points of law, but it may be useful to other organisations to look at paragraphs […]
15 months, countless meetings with publishers, audience measurement providers, adtech players, personalized content companies, … With TCF 2.2 launched, time to reflect on the enormous privilege I had of being involved (and prominently so) in so many stages of the development of new iterations to such an important standard for the online ecosystem. My role […]
Looking for good practices re AI security? The new ENISA report can help. It shows the need for a broad strategy that takes into account various risks (including legal ones) regarding not just your machine-learning algorithm or other tool but also the data sources themselves and the expected output. Bias, for instance, is not a […]
We showed a year ago that the European Data Protection Board’s fining methodology would likely lead to much higher fines… but at the time it seemed like SMEs would not be that strongly affected. The newest version of the fines just seems to confirm that everyone will be affected, and even more so than before. […]
Good reflexes regarding datagovernance and aigovernance, what to expect from the upcoming legislation and how to prepare, those were some of the topics discussed during our panel on the EU draft AIAct and the DataAct at the Flanders AI Forum 2023. A few additional thoughts: “Data/AI isn�t our core business�? Every business involves data & […]
On the importance of knowing your data well: a recruiter just cold-contacted me about a position that would be perfect for “a data scientist such as yourself”. Hint: data scientist and data lawyer do not often mean the same thing* **. The GDPR and other data protection rules are there to ensure that if you […]
The team is intellectually agile, energetic and always available. Our industry can be complicated to understand, due to fast-paced technology developments, and the technical background of the partner we work with facilitates a lot our interactions and significantly improves the quality of deliverables. “[…] pedagogy and ability to simplify has been crucial to boost communications […]
Ex-employee request for 8 years of e-mails, labelled excessive by Belgian data protection authority in new decision. What is an “excessive” data subject request under the GDPR has not often been discussed by authorities, so this case may be of interest – but careful generalising it too hastily, due to the facts. Facts: – X, […]
How do GDPR fines of the French CNIL (and other authorities) compare to the EDPB’s guidelines on administrative fines for data protection infringements? That’s what the excellent Florence Chafiol and I will be discussing during our session (in French) at the IAPP’s “DPI: France” on Tuesday 14 March in Paris. Trends, divergences (+ forum shopping), […]