Can't find what you're looking for? Try the search bar!
My takeaways from the 100+ comment discussion following my post on whether the Crowdstrike incident is a “personal data breach” under the GDPR: 1. There are clearly two camps on this. I didn’t expect this level of opposition between two visions of what is a personal data breach. 2. One camp adheres to the views […]
Mass rejection of NOYB complaints by Belgian DPA: repeating the cases I have commented before (see notably https://lnkd.in/eMGbdWPh), the Belgian DPA just rejected 16 complaints of NOYB in 5 different cases based on the fact that there was no actual (non-fictional) mandate by data subjects. In its press release (to explain the multiple rejections), the […]
Lots of potential for violations of the rights of defence. My critical analysis: https://lnkd.in/e3xDp82T GDPR data protection privacy
The GDPR Procedural Regulation (GPR) raises practical concerns, based on the text of the provisional agreement of the EU Council & Parliament, notably re the scope of complaints. I was discussing it with Sara Brandstätter @ MLex (who obtained the text) – here are some key concerns of mine: 1) This GPR will likely have […]
Some food for thought re adtech & metrics, whether you are publisher, CMP or vendor – six points based on recent discussions with a range of clients (and based on the things they need assistance with): 1. Are you sure you are involved in the processing of personal data? The notion of “personal data” has […]
In Belgium? Speak Dutch and French? Active in data protection? Mark 2 September in your agenda for an exclusive event regarding the Belgian DPA’s Litigation Chamber. More details soon, but it should be really fun, and I am honoured to be among the excellent panel of speakers! (Stay tuned – limited seating, and in an […]
Not a “what ABC taught me about privacy” thing, but a man held on for dear life to the seat in front of him as the plane banked (normally) on my flight back from a great conference in Vilnius. It did bring me back to what I had been telling the hundreds of attendees to […]
That was fast – less than a week after a CJEU judgment stating that it may be necessary for a controller to reveal the identity of the persons (e.g. employees) who processed personal data (C-579/21), the Belgian DPA applies that reasoning (in a separate case from the one handled by the CJEU) and orders a […]
Amusing settlement decision by the Belgian DPA published yesterday: 500 EUR & 250 EUR respectively, plus adaptations to policies and procedures, so that when people book a table in a given restaurant by phone their data isn’t included automatically in a third-party table booking system and then used to send commercial e-mails. The lesson? If […]
Today’s release of an artificialintelligence fairness toolkit (Veritas Toolkit v2.0) by the Monetary Authority of Singapore is an occasion to recall that there is no plug-and-play tool for everyone – but toolkits can be a useful source of inspiration. Released under an Apache 2.0 open source licence, the diagnosis tool (in Python) and assessment tool […]