Events 2026
members
–
6 min read
Next up: 28-29 Sep 🇸🇪 Stockholm: Nordic Privacy Arena I 29 Sep online: Privacy Conference (#PCO26)
CJEU C-526/24 Brillen Rottler 19 Mar 2026
members
–
2 min read
If a DSAR is made solely to engineer a compensation claim rather than to verify lawful processing, it can be refused as abusive – even if it's the first request.
The DPO role: Key resources
members
–
3 min read
🇫🇷 CNIL shares Conflict of interest guidance | Key DPO role resources: CJEU, EDPB, DPAs, EDPS, GDPR commentaries and more
AI (Act) resources
members
–
24 min read
📣 On 27 Jul 2026, the AI Digital Omnibus entered into force – details here.
Rights: Access (DSAR, Right of access)
members
–
4 min read
Norway DPA clarifies: *paper* copy not necessary required | All things right of access: Article 15 elements table, a handy flowchart, key CJEU rulings and Rie's practical guide (including how to deal with nightmare DSARs).
New SCCs on public consultation (delayed again)
members
–
1 min read
Announced in Sep 2024, delayed to Q2 2025, then to Q3, then to Q1 2026, and now to Q1 2027... Two public consultations for new SCCs: 1) For transfers to third country controllers/processors directly subject to the GDPR, and 2) for EU institutions' transfers to non-EU countries under the EUDPR
EDPB Plenary meeting agendas and minutes
members
–
15 min read
🚨 Guidelines x3 ready: anonymisation, AI web scraping, blockchain | TIA template on the way. Breach template public consultation till 5 Aug. Guidelines x 5: scientific research | children's data | political ads | DMA ↔ GDPR interplay. New Art. 65 Binding Decision. Certifications Opinions.
EDPB Guidelines 2/2025 Blockchain (public consultation)
members
–
1 min read
v2 ready 7 July 2026 + public consultation report | Guidelines on processing of personal data through blockchain technologies.
EDPB Support Pool of Experts (SPE)
members
–
6 min read
Latest: 3rd SPE report published quietly... 🤨 | About SPE: What is it, what have they spent (and spend) time and resources on, is it justified based on the current results, and should you apply? (Likely not.) Should you even spend time reading this post?
GDPR 2.0 - Digital Omnibus
members
–
24 min read
Council to drop legitimate interest legal basis for AI in Digital Omnibus proposal? | Digital Omnibus: COM's proposal to simplify AI, cybersecurity and (personal) data rules to "save businesses up to €5bn by 2029".