Latest from the Privacy Desk
All dispatches →
GDPR EDPB Draft Guidelines on Anonymization and AI Web Scraping Spotlight Re-Identification Risks Amid Digital Omnibus Debates
The European Data Protection Board has opened a public consultation on two closely related draft guidelines that address some of the most…
EU’s Renewed CSAM Scanning Rules Reopen the Debate Over Private-Message Surveillance
The European Union is moving to restore temporary rules that permit certain online communication providers to scan private messages voluntarily for child…
GDPR CNIL Tracking Pixels FAQ
France’s data protection authority, the Commission Nationale de l’Informatique et des Libertés (CNIL), has published a comprehensive FAQ clarifying its recommendations on…
GDPR Google Fonts and GDPR: What the Munich Ruling Requires and How to Self-Host Your Way Out of Exposure
A German website operator lost a GDPR lawsuit over a font. Not a tracking pixel, not an advertising cookie, not a data…
GDPR EDPB Orders Belgian Regulator to Hear NOYB Cookie Banner Complaint on the Merits
A Belgian regulator attempted to dismiss a cookie-banner complaint without deciding whether the banner was lawful.
AI EU Cloud Sovereignty Framework Compliance
Digital sovereignty has spent years sounding more like a political ambition than a measurable compliance standard.
EDPB’s Landmark Guidelines on Anonymisation, AI Web Scraping, and Blockchain
Being called a A New Era of Clarity and Accountability: The European Data Protection Board (EDPB) has taken a major step forward…
USANTIS: EU Representative Under Article 27 GDPR
A guest post by USANTIS USANTIS acts as the EU representative under Article 27 GDPR for companies based outside the EU.
GDPR CNIL Steps Up Enforcement with 23 New Sanctions Under Simplified Procedure
The French data protection authority, the CNIL, has significantly ramped up its use of the simplified sanctioning procedure in 2026.
ADDW Systems Explained: EU’s Driver Distraction Mandate
Driver distraction is one of the leading causes of road crashes today.
PIA vs DPIA
Privacy impact assessments are one of the most misunderstood compliance obligations in data protection law.
GDPR Article 27 EU Representative: Requirements, Enforcement, and Compliance Steps for Non-EU Companies
For the better part of a decade, the EU representative requirement under Article 27 of the General Data Protection Regulation was treated…