The DPO role: Key resources
members
–
3 min read
🇫🇷 CNIL shares DPO management report template | Key DPO role resources: CJEU, EDPB, DPAs, EDPS, GDPR commentaries and more
AI (Act) resources
members
–
24 min read
🇪🇺 Parliament and Council didn't reach agreement on sectoral regulations – new trilogue in two weeks | Check out the NIST AI Risk Management Framework (linked under 'Various updates/resources')
EDPB Plenary meeting agendas and minutes
members
–
13 min read
Minutes: 🚨 DPIA template, EDPB/EDPS Biotech Act Joint Opinion, Proposal for a Digital Networks Act, Guidelines bonanza, 🇸🇪 articles on Meta glasses false | EDPB/EDPS Joint Opinion 4/2026 Cybersecurity Act 2 and NIS2 Amendment proposals | Agendas: 🚨 Guidelines on anonymisation + scientific research
Events 2026
members
–
7 min read
Next up: 🚨 EDPB Stakeholder event coming up (date TBC) | 4-6 May 🇩🇪 Berlin: EFDPO Annual Conference | 19 May 🇭🇺 Budapest: ConnectED (Rie's speaking: Bridging the Gap. Everyone's right. Everyone's stuck.) | 19-22 May 🇧🇪 Brussels: CPDP (Computers, Privacy and Data Protection)
EDPB Support Pool of Experts (SPE)
members
–
6 min read
Latest: 3rd SPE report published quietly... 🤨 | About SPE: What is it, what have they spent (and spend) time and resources on, is it justified based on the current results, and should you apply? (Likely not.) Should you even spend time reading this post?
GDPR 2.0 - Digital Omnibus
members
–
24 min read
Council to drop legitimate interest legal basis for AI in Digital Omnibus proposal? | Digital Omnibus: COM's proposal to simplify AI, cybersecurity and (personal) data rules to "save businesses up to €5bn by 2029".
Your OSS for the EDPB
members
–
3 min read
🚨 Stakeholder event: competition & data protection (date TBC) | New PCs: Guidelines Scientific research purposes + DPIA template | Overview page for all things EDPB: Guidelines, Opinions, Recommendations, Members, Meetings, Strategy & Work Programs, CEF, SPE, OSS, Art. 65 Decisions, WP29, CSC
Privacy, data protection & security legal landscape
members
–
7 min read
"But wait, there's more..." Is the EU really living up to its simplification promises? Added the Commission's work program for 2026, and links to 'Cloud and AI development Act' + 'Quantum Act'.
EDPB Support Pool of Experts (SPE) projects
members
–
6 min read
Latest: Legitimate interest OSS case digest.
CJEU C-526/24 Brillen Rottler 19 Mar 2026
members
–
1 min read
If a DSAR is made solely to engineer a compensation claim rather than to verify lawful processing, it can be refused as abusive – even if it's the first request.