Rie Aleksandra - DPO Hub

Right of access (DSARs)

members – 4 min read

All things right of access: Article 15 elements table, a handy flowchart, key CJEU rulings and Rie's practical guide. Latest: 🇳🇴 DPA clarifies that *paper* copy isn't necessary required.

Sep 20, 2026

Lawfulness: Legitimate interest

members – 3 min read

When can you rely on legitimate interest as a legal basis? Plus practical tips and key resources (GDPR, DPD, CFR, OECD, CJEU rulings and EDPB guidance). Latest: 🇳🇴 DPA with updated legitimate interest guidance (March 2026).

Sep 20, 2026

Welcome! Start here 👇

members – 2 min read

DPO Hub as-is Sep 2026. But changes are coming!

Sep 19, 2026

Events 2026

members – 6 min read

Next up: 28-29 Sep 🇸🇪 Stockholm: Nordic Privacy Arena I 29 Sep online: Privacy Conference (#PCO26)

Sep 19, 2026

Lawfulness: Consent

members – 6 min read

When can you rely on consent as a legal basis? Plus practical tips and key resources (GDPR, DPD, CFR, OECD, CJEU rulings and EDPB guidance). Latest: 🇱🇺 Luxembourg DPA with updated guidance.

Sep 19, 2026

CJEU C-526/24 Brillen Rottler 19 Mar 2026

members – 2 min read

If a DSAR is made solely to engineer a compensation claim rather than to verify lawful processing, it can be refused as abusive – even if it's the first request.

Sep 9, 2026

AI (Act) resources

members – 24 min read

📣 On 27 Jul 2026, the AI Digital Omnibus entered into force – details here.

Jul 28, 2026

New SCCs on public consultation (delayed again)

members – 1 min read

Announced in Sep 2024, delayed to Q2 2025, then to Q3, then to Q1 2026, and now to Q1 2027... Two public consultations for new SCCs: 1) For transfers to third country controllers/processors directly subject to the GDPR, and 2) for EU institutions' transfers to non-EU countries under the EUDPR

Jul 9, 2026

EDPB Plenary meeting agendas and minutes

members – 15 min read

🚨 Guidelines x3 ready: anonymisation, AI web scraping, blockchain | TIA template on the way. Breach template public consultation till 5 Aug. Guidelines x 5: scientific research | children's data | political ads | DMA ↔ GDPR interplay. New Art. 65 Binding Decision. Certifications Opinions.

Jul 8, 2026

EDPB Guidelines 2/2025 Blockchain (public consultation)

members – 1 min read

v2 ready 7 July 2026 + public consultation report | Guidelines on processing of personal data through blockchain technologies.

Jul 8, 2026

Privacy, data protection & security legal landscape

members – 8 min read

👮 LED review coming Q3

Jun 10, 2026

EDPB Support Pool of Experts (SPE)

members – 6 min read

Latest: 3rd SPE report published quietly... 🤨 | About SPE: What is it, what have they spent (and spend) time and resources on, is it justified based on the current results, and should you apply? (Likely not.) Should you even spend time reading this post?

Apr 26, 2026