Scope: AI

Can't find what you're looking for? Try the search bar!

“Better Regulation”, part II: improving the GDPR – or not? (Art. 1, 2, 4(1), 5 & 30)

The European Commission’s announcement that it will consider simplifying regulatory regimes, notably in relation to data and technology, seems to open Pandora’s box. Is it a chance to draw lessons from what works well and what works less well? In this series on “Better Regulation” in relation to the digital economy, I will be exploring […]

Read Analysis →

Catch my three upcoming data protection speaking sessions at CPDP

At CPDP this Wednesday and Friday, with three speaking appearances – be sure to stop by if you would like to chat! 1. 22 May, at 10:30: Hackathon workshop on “Advertising and data protection in an AI driven world Link: https://lnkd.in/eaND-m8i 2. 22 May, at 14:15, workshop on “Pay or OK: Law & Economics Meets […]

Read Analysis →

Lessons from a US lawyer who let an unverified AI chatbot invent legal citations

AI won’t replace you, you’ll be replaced by someone who uses AI” – or perhaps “you will replace someone who uses AI badly”? A U.S. lawyer appears to have ignored key�AIgovernance�rules, in a case where ChatGPT was asked to do legal research on behalf of the lawyer and ended up making up references (very realistically […]

Read Analysis →

Pre-CPDP brief: our two-hour webinar on evolving adtech and metrics

This week our 2h (free) webinar on adtech & metrics, next week 3 (!) speaking slots at CPDP in Brussels. “Consent or Pay”, profile-based ads versus (or plus) contextual ads, AI and advertising, European Data Strategy, … Loads of content that I will be touching upon during all of these sessions! 1?? Join us for […]

Read Analysis →

Join our upcoming seminar in Antwerp covering the AI Act and data regulation

AI-powered translation of the blurb of our AI-related talk on Tuesday 6 June in Antwerp: “Update on the AI Act and other regulations within Europe AI and Data Act: how to prepare for them? What impact does European legislation on data and AI have on the activities of Flemish companies and other organizations? And why […]

Read Analysis →

How GDPR principles are serving as the blueprint for non-personal data laws

On this fifth GDPR anniversary, remember that data protection principles are increasingly serving as inspiration for legal obligations regarding the use of “non-personal”/”corporate” data. What was good business practice is becoming a statutory obligation. So double-check that you have everything you *should* have, because soon you will be *required* to have it. Not that privacy […]

Read Analysis →

Previewing my data protection and adtech speaking engagements in May

Great events I’ll have the pleasure of speaking at in May: 1?? First, an IAPP web conference on adtech where I will be speaking alongside Dr. Sachiko Scheuing (with Joe Jones as moderator). “Adtech: Practical takeaways from recent EU developments”, on 7 May 2024 (4-5pm CET; 10-11am Eastern US). Organised by the IAPP – International […]

Read Analysis →

Can a corporate entity face GDPR fines for completely accidental human errors?

Can GDPR administrative fines be imposed for infringements that are not the result of either intent or negligence? (e.g. excusable, non-negligent human error) The CJEU Advocate General Campos S�nchez-Bordona says “No”. Others have already reported on the consequences of the new Opinion in the Deutsche Wohnen case (C?807/21) from the perspective of whether an undertaking […]

Read Analysis →

EDPB accountability: are Guidelines and Opinions challengeable?

Are Guidelines of the European Data Protection Board “challengeable acts”, and could you attack them before the General Court of the EU? What about Art. 64 GDPR Opinions of the EDPB? The Advocate General’s Opinion in the WhatsApp v EDPB case (re EDPB Binding Decisions) suggests that the answer could be “yes” regarding those Art. […]

Read Analysis →

NIS2 compliance: 7 strategic takeaways for global business

7 points after giving another in-depth presentation to global businesses on the path to NIS2 compliance (with a flavour of DORA and GDPR): (i) Having a broad enough team (“multidisciplinary” / “multi-stakeholder” / however you wish to call it) is not easy for many organisations, irrespective of their size (this is nothing new, but it […]

Read Analysis →