Can't find what you're looking for? Try the search bar!
Scarily powerful – don’t dismiss the risk of deep fakes for your company. With now tools like Deep Live Cam (“real time face swap and one-click video deepfake with only a single image”) making the rounds, it is imperative for you to educate *everyone* in your organisation about good reflexes regarding both cybersecurity and AI. […]
My takeaways from the 100+ comment discussion following my post on whether the Crowdstrike incident is a “personal data breach” under the GDPR: 1. There are clearly two camps on this. I didn’t expect this level of opposition between two visions of what is a personal data breach. 2. One camp adheres to the views […]
Glad to see the Hamburg DPA going in a similar direction as what I was suggesting in the post below: tokens should not be viewed as personal data. Even at the level of the output, “the mere presence of plausible personal information in LLM output is not conclusive evidence that personal data has been memorized, […]
Some food for thought re adtech & metrics, whether you are publisher, CMP or vendor – six points based on recent discussions with a range of clients (and based on the things they need assistance with): 1. Are you sure you are involved in the processing of personal data? The notion of “personal data” has […]
In Belgium? Speak Dutch and French? Active in data protection? Mark 2 September in your agenda for an exclusive event regarding the Belgian DPA’s Litigation Chamber. More details soon, but it should be really fun, and I am honoured to be among the excellent panel of speakers! (Stay tuned – limited seating, and in an […]
That was fast – less than a week after a CJEU judgment stating that it may be necessary for a controller to reveal the identity of the persons (e.g. employees) who processed personal data (C-579/21), the Belgian DPA applies that reasoning (in a separate case from the one handled by the CJEU) and orders a […]
Amusing settlement decision by the Belgian DPA published yesterday: 500 EUR & 250 EUR respectively, plus adaptations to policies and procedures, so that when people book a table in a given restaurant by phone their data isn’t included automatically in a third-party table booking system and then used to send commercial e-mails. The lesson? If […]
Today’s release of an artificialintelligence fairness toolkit (Veritas Toolkit v2.0) by the Monetary Authority of Singapore is an occasion to recall that there is no plug-and-play tool for everyone – but toolkits can be a useful source of inspiration. Released under an Apache 2.0 open source licence, the diagnosis tool (in Python) and assessment tool […]
Interesting case filed before the EU General Court by a person represented by noyb.eu, now published in the EU Official Journal. The complainants (the applicant + noyb) had sought access to the European Data Protection Board’s file concerning the EDPB’s Facebook-related binding decision of 5 December 2022. The EDPB refused to grant access, “on the […]
Heated exchanges at our “Pay or OK” workshop yesterday at CPDP, in particular between Max Schrems, Peter Hense ???????? and Lex Zard on the one hand and Cecilia Alvarez, Dirk Auer and myself on the other hand, with Miko?aj Barczentewicz moderating and economic input from Garrett Johnson. Perhaps the overcrowded room without ventilation played its […]