Can't find what you're looking for? Try the search bar!
This should be fun! Didomi has invited me to share the floor with Max Schrems during a webinar on 24 Sept. on the Future of User Consent. I don’t always agree with Max or noyb.eu, whether in my personal conviction or through my professional work (in fact, I have/had a few litigation cases where we […]
This is not an AIAct post. Let’s not forget that before 2 August 2026 (the date that matters to most companies re that Act), there are already many other rules that apply – and have applied for some time – to all kinds of AI systems. For instance, data protection rules (such as the GDPR […]
Controversial discussion-starter of the day: has any authority or court actually established that LLMs and other such models *do* involve the processing of personal data when they predict what might be a relevant next word/token/string of characters in a sequence, a next pixel in an image, etc.? I would love to see the reasoning. Not […]
Very good piece by Kristin Johnston on aigovernance and in particular how to start the process. One recommendation – building AI governance on top of existing privacy processes – is very relevant but you have to be careful about how you implement it. The key challenge is making sure it can be sufficiently distinct as […]
A must-watch: here is the recording of our fun CPDP2024 panel discussion on the EU data strategy (covering GDPR, DMA, AI Act, fundamental rights, Pay Or OK and much more re data protection). The other panel participants were Patricia Vidal Martinez, Luca Bolognini and Rob van Eijk, and it was moderated by Cecilia Alvarez. Really […]
Lawyers can both be AI advisors (legal implications) and users of machine learning / generativeai / applied statistics / … systems. Tomorrow we will be helping members of the Flemish Bar Association understand some of the key things to look out for and reflexes to have – both for themselves and for their own clients. […]
Practical checklist: good practices for vendor/supplier risk management inspired by GDPR, NIS2, Data Governance Act and DORA. The underlying question: what good practices do these EU laws highlight and transform into legal obligations in certain cases, and how can we combine them? This checklist is *not* a comprehensive list of best practices, but it should […]
Suddenly general audiences in the EU are hearing about AI legislation in the news, and high-risk systems present a risk to… privacy (really, that’s the only angle being put forward in some news outlets). As if the GDPR didn’t contain anything that can be (and is) used to manage the data protection aspects of AI […]
What a week! So what’s next? After 3 speaker slots at CPDP2024 (featuring some of the most heated exchanges of the entire conference), one webinar, and loads of really good discussions on the biggest data protection topics (“Pay or OK”, “Advertising, data protection and AI”, “balancing of fundamental rights: protection of personal data vs/with freedom […]
So, about the Dutch DPA scraping guidelines: based on my experience, they are just wrong. I know they have gone viral in the data protection & AI circles, but they are based on premises about scraping that might not align with best practices. Why? First, much in the scraping guidelines of the Autoriteit Persoonsgegevens (AP) […]