Privacy, data protection & security legal landscape
resource

Privacy, data protection & security legal landscape

members – 8 min read
COM shares CRA FAQ 3 Dec | ✅ Procedural rules on GDPR enforcement Regulation effective 12 Dec | COM fines X €120m under DSA | Political ads Regulation Article 13(6) public consultation planned Q2 2026 | CSAM Regulation: Council agrees position – next is negotiations with Parliament.
Rie Aleksandra Rie Aleksandra
AI (Act) resources
AI resource DPIA

AI (Act) resources

members – 23 min read
🇪🇸 shares interactive AI Act guide + internal AI policy | Digital Omnibus on AI Regulation Proposal published! | 🇬🇬 ODPA with practical 10-step AI guidance | EDPS EUDPR guide: AI Systems Risk Management
Rie Aleksandra Rie Aleksandra
National DPA news (2025)
resource

National DPA news (2025)

members – 5 min read
🇳🇴 Helseplattformen audit is out! | 🇬🇬 ODPA: practical 10-step AI guidance | 🇩🇪 Hessen DPA greenlights M365! | 🇭🇷 DPA fines telecoms operator €4.5m | 🇪🇸 Encryption guide for freelancers + YouTube series | 🇳🇴 Credit agencies audit | 🇫🇷 survey Monetizing personal data
Rie Aleksandra Rie Aleksandra
Data breaches
topic resource breaches

Data breaches

members – 2 min read
🇳🇴 DPA with significant breach page change | Upcoming topic page for breaches, prompted by EDPB's summary document. Links so far: Denmark, Finland, France, Greece, Ireland, Italy, Norway, Spain, Sweden, ICO, EDPB, EDPS, EC.
Rie Aleksandra Rie Aleksandra
The DPO role: Key resources
topic resource DPOs

The DPO role: Key resources

members – 3 min read
🇧🇷 Interesting DPO survey highlighting familiar challenges | 🇪🇸 Andalusia DPA in June: DPOs in public sector can't also be infosec officer | 🇱🇹 2025 DPO guide | 🇳🇴 New DPO podcast series | Key DPO role resources: CJEU, EDPB, DPAs, EDPS, GDPR commentaries and more
Rie Aleksandra Rie Aleksandra
The DPO role: Article 37(1)(b)
topic resource DPOs

The DPO role: Article 37(1)(b)

members – 5 min read
10 Oct: Estonia's thresholds for 'large-scale' (5k, 10k, 50k) | Breaking down Article 37(1)(b) key terms: 'core activities', 'regular', 'systematic', 'monitoring' and 'large scale'. And what should you do if you're still unsure whether you need to appoint a DPO? Appoint one voluntarily?
Rie Aleksandra Rie Aleksandra