Can't find what you're looking for? Try the search bar!
[This is a translation of an op-ed in French that was published in the French journal Revue Politique on SRB and the Digital Omnibus, plus the newest EDPB & EDPS Joint Opinion on the topic. The original in French can be found on the Revue Politique website. + The banner image is a jest – […]
Under which circumstances does the GDPR consider scientific research compatible with existing purposes of personal data processing? Recent positions by regulators and legislators show it is still a hot topic – one with major implications for R&D globally. Recital 159 of the GDPR states that “the processing of personal data for scientific research purposes should […]
Some thoughts (+ & -) on the EDPB & EDPS’s joint opinion on the GDPR & ePrivacy Digital Omnibus, part 1: + The overall tone seems constructive – On the definition of personal data (PD), I don’t think quoting the Scania/SRB situation of information being “indirectly” PD for a disclosing party (§16) helps the EDPB/EDPS’s […]
What to expect from the EDPB and EDPS on 10 February re the Digital Omnibus on GDPR and ePrivacy? Today I had the privilege of attending an event organised by The Lisbon Council with a very select group of representatives of companies, industry associations, BEUC, the Commission and the EDPB. We discussed the Digital Omnibus […]
Great to see the European Data Protection Board listening to feedback! For their next stakeholder event, the EDPB is giving time to people to register their interest in participating – and it might even consider making a distinction between active and passive participants (speakers vs observers). Don’t dismiss this one just because it’s about a […]
Podcast alert: Almost an hour, but lots of topics about the GDPR & ePrivacy Digital Omnibus in the launch episode of the ADPO’s podcast (Irish Association of DPOs) Thanks to Dr Maria Moloney & Gonzalo Caro for having me on their inaugural podcast! Topics include the importance of a dialogue, sensitive categories of personal data, […]
How a simple sentence in your privacy notice can restrict your digital marketing: the Belgian DPA issued an injunction to adapt digital marketing practices for a fitness club that had sent marketing e-mails to a club member, including for non-sporting events. The case highlights a classic misalignment between documentation and marketing practices, as well as […]
With the festive season upon us, I may be posting a little less and instead singing Christmas songs with the family. So let’s look back at 2025 and anticipate 2026, based on interactions with my LinkedIn articles & posts: – Pseudonymisation & the concept of “personal data” were significant in 2025. 4 of my top […]
Podcast time again, with The Monopoly Report on the Digital Omnibus (focus on GDPR and ePrivacy changes). In this episode, Alan Chapell and I discuss the apparent intentions of the Commission, the link with case law of the EU Court of Justice, possible reactions from data protection regulators and more. Its publication this Wednesday ties […]
Digital Omnibus & GDPR: I like some things & dislike others about the proposal, but want to push back against claims that the “personal data” definition change will weaken protection. Of course some data protection supervisory authorities will say this (non-personal data generally falls outside of their remit), but is there truly weakening of protection […]
