Trustworthy Data Governance for AI: A Global Commitment

Data protection professionals and privacy experts worldwide celebrated a significant step forward as twenty data protection authorities (DPAs) convened at the Global Privacy Assembly in Seoul in September 2025. Their mission was critical: to sign the Joint Statement on Building Trustworthy Data Governance Frameworks for Artificial Intelligence (AI), a commitment to foster the evolution of […]

Court Declares “Pay or Okay” on DerStandard.at Unlawful

The Austrian Federal Administrative Court (BVwG) has affirmed an earlier ruling by the Austrian Data Protection Authority (DSB), declaring the “Pay or Okay” model implemented by the Austrian newspaper, DerStandard.at, as a violation of the GDPR. This decision stresses the necessity for users to be able to selectively consent or reject each processing purpose, counteracting […]

GDPR art 13 or art 14 on Body Camera’s surveillance (ECJ) ?

Core Question:When ticket inspectors use body cameras to record passengers (images + sound), does the duty to inform under the GDPR fall under Article 13 (direct collection) or Article 14 (indirect collection)? Key Findings: Conclusion of the Advocate General: For personal data collected by body cameras worn by ticket inspectors in public transport, Article 13 […]

Streamlining GDPR Compliance: EDPB’s Initiatives for European Organizations

As data protection professionals, navigating the complex landscape of the General Data Protection Regulation (GDPR) is an ongoing challenge, particularly for small to medium-sized enterprises. The European Data Protection Board (EDPB) has recently taken significant steps to simplify compliance with the GDPR, as discussed in their Helsinki meeting this July. Key Developments: – Clear Guidance […]

Navigating GDPR Implications: Multinationals Face Legal Challenges in the US

The complexity of navigating GDPR compliance across international boundaries has once again come to the forefront as a major US business lobby group steps into a legal battle involving multinational rights under GDPR. The Chamber of Commerce of the United States of America has voiced concerns regarding a recent US court ruling which mandates the […]

AI App DeepSeek Labeled as Unlawful Content by Berlin Data Protection Officer

The Berlin Commissioner for Data Protection and Freedom of Information has flagged the DeepSeek AI application as unlawful content within Apple and Google’s platforms in Germany. As data protection professionals are aware, handling users’ personal data according to the GDPR is of utmost importance, and the implications of failing to do so are significant. Key […]

Explaining the Dismissal of NOYB’s Complaints by the GBA (Belgian DPA)

The Belgian Data Protection Authority, Geschillenkamer van de GBA, announced the dismissal of sixteen complaints filed by NOYB, an Austrian organization championing privacy rights. This decision has sparked interest within the data protection community, underscoring the nuanced legal realities surrounding complaints submissions by non-institutional entities. Key Insights: – Role of Non-Institutional Bodies: Organizations like NOYB […]

Proposed Amendments to Archival Law: Implications on Data Privacy (The Netherlands)

As data protection professionals, staying updated about legislative changes is crucial, particularly those impacting privacy rights. Recently, the Dutch Data Protection Authority, Autoriteit Persoonsgegevens (AP), raised concerns over proposed amendments to the Archival Law that could significantly affect the privacy of individuals featured in sensitive archival records. Insights for Privacy Experts: – Significant Privacy Risks: […]

Everyone commits fraud ? – critical Insights on striking a balance between lawful financial surveillance and privacy rights

Data protection and privacy remain paramount in the sphere of governance and economic regulation, particularly with regard to the handling of sensitive financial data. The recent advisory opinion from the Belgian Data Protection Authority underscores the importance of striking a balance between lawful financial surveillance and individual rights under the GDPR framework. The De Wever […]