In-depth articles on GDPR compliance, DSARs, data governance, and privacy operations.
Supervisory Authorities & EnforcementYour force just approved a live facial recognition trial, believing it ll speed up crime detection. Now, your inbox is flooded with questions, and the ICO s latest audit findings aren t helping. These
Supervisory Authorities & EnforcementThe Challenge of Compliance When the EDPB adopted Guidelines 02/2025 on July 7, 2026, it addressed a key issue: can an immutable ledger comply with a regulation that requires data deletion? For your t
Security & Breach NotificationWhen a third-party provider gets breached, you re still accountable under Article 28 . Here s what your due diligence process should look like before you sign, and what you should audit after. Scope T
Supervisory Authorities & EnforcementWhen a complaint involves multiple regulators, such as GDPR intersecting with consumer protection or financial services oversight, you face a coordination challenge. The EDPB has called for clearer le
Get weekly security insights and compliance updates delivered to your inbox.
Security & Breach NotificationAround 1500 UK charities recently discovered they d outsourced their data protection obligations to a CRM provider with inadequate access controls. The Beacon incident didn t compromise payment card d
Supervisory Authorities & EnforcementThe challenge isn t whether you can rely on legitimate interests for AI web scraping. It s that many teams treat the legitimate interests assessment like a checkbox exercise rather than a defensible c
Supervisory Authorities & EnforcementWhat happens when you scrape 20 years of internet data to train a generative AI model and then discover you can t identify a lawful basis that holds up under scrutiny? This isn t hypothetical. The Eur
Supervisory Authorities & EnforcementThe European Data Protection Board (EDPB) published draft Guidelines 02/2026 on Anonymisation on 7 July 2026, and they re not a gentle update. If you ve been treating anonymisation as a one-time techn
Supervisory Authorities & EnforcementThe EDPB recently released draft Guidelines 02/2026 on Anonymisation for public consultation. Since then, I ve been hearing the same questions from DPOs and privacy leads trying to understand the impa
Security & Breach NotificationWhen the Direction générale des Finances publiques notified the CNIL of unauthorized access to fiscal and cadastral data in August 2026, they triggered Article 33 and Article 34 obligations that many
Scope & ExemptionsReform UK s proposal to replace UK GDPR with a New Zealand-style privacy law raises an important question: which regulatory framework will govern your processing activities? The answer isn t straightf
