Scope: AI

Can't find what you're looking for? Try the search bar!

Blinded by the LED: smart glasses, GDPR, and the illusion of hardware indicators

Smart glasses are attracting much attention these days. Already significant sales seem to pale in comparison to the explosion of social commentary on them, just as the segment of camera-enabled wearables is growing also in terms of form factors and devices, with AI-powered pins, portable speakers and even headphones around the corner. A few months […]

Read Analysis →

Incidental processing and GDPR: from bystanders to spontaneous notes, do data protection rules apply?

Another week, another product announcement from someone involving AI in your pocket, on your wrist, in front of your eyes. I have met people whose lives have literally been transformed as a result of some of these tools, such as an individual who is suddenly able to use a camera in glasses to film his […]

Read Analysis →

Digital Omnibus: GDPR & ePrivacy implications of new compromise proposal

What does the EU Council’s draft Presidency compromise text on the GDPR & ePrivacy Digital Omnibus tell us? (1) The Council (for now) seems to recognise the need to clarify the concept of “personal data”. As a Recital 27a would provide: The identification of a natural person should be assessed *ex ante and in concreto*, […]

Read Analysis →

Age assurance: scientific critique of online restriction initiatives

Scientific push against blocking of minors: since December, journalists from across Europe & Australia have asked me to comment on age-gating initiatives internationally to restrict minors’ access to online content, and at the CEDPO conference in 2025 I pushed back against a 5-person panel that was fully in favour of prohibiting minors’ access to social […]

Read Analysis →

Making the GDPR realistic? Authorities only want that in part

[This is a translation of an op-ed in French that was published in the French journal Revue Politique on SRB and the Digital Omnibus, plus the newest EDPB & EDPS Joint Opinion on the topic. The original in French can be found on the Revue Politique website. + The banner image is a jest – […]

Read Analysis →

Scientific research: definition and commercial limits

Under which circumstances does the GDPR consider scientific research compatible with existing purposes of personal data processing? Recent positions by regulators and legislators show it is still a hot topic – one with major implications for R&D globally. Recital 159 of the GDPR states that “the processing of personal data for scientific research purposes should […]

Read Analysis →

Perspectives on EDPB & EDPS Joint Opinion on Digital Omnibus

Some thoughts (+ & -) on the EDPB & EDPS’s joint opinion on the GDPR & ePrivacy Digital Omnibus, part 1: + The overall tone seems constructive – On the definition of personal data (PD), I don’t think quoting the Scania/SRB situation of information being “indirectly” PD for a disclosing party (§16) helps the EDPB/EDPS’s […]

Read Analysis →

AI Act Digital Omnibus: addressing the deployer gap

An unintentional oversight? The proposed Digital Omnibus on the AI Act contains certain deadline extensions but a key one is missing, suggesting a disconnect between the text itself and the reality that organisations face. While many other aspects merit discussion (such as the yet unresolved overlap issues between the GDPR and the AI act), there […]

Read Analysis →

Podcast: Discussing the Digital Omnibus on the ADPO podcast

Podcast alert: Almost an hour, but lots of topics about the GDPR & ePrivacy Digital Omnibus in the launch episode of the ADPO’s podcast (Irish Association of DPOs) Thanks to Dr Maria Moloney & Gonzalo Caro for having me on their inaugural podcast! Topics include the importance of a dialogue, sensitive categories of personal data, […]

Read Analysis →

Synthetic data: accuracy and real-life limitations

This does not surprise me – as I was explaining yesterday to two podcast hosts, synthetic data is great on paper but it does not help with accuracy or real-life outliers/divergent situations. It’s easy to claim that synthetic data is the best way to comply with data minimisation and that “you don’t really need all […]

Read Analysis →