Soft opt-in for telemarketing abolished
Effective July 1, 2026, prior consent will be required for commercial telemarketing. The soft opt-in for existing customers has been eliminated. Organizations…
Soft opt-in for telemarketing abolished
Effective July 1, 2026, prior consent will be required for commercial telemarketing. The soft opt-in for existing customers has been eliminated. Organizations…
EDPB Guidelines on Scientific Research
The EDPB’s Draft Guidelines clarify when research qualifies as genuinely scientific, how GDPR flexibilities apply and which safeguards organisations need.…
Article 88c GDPR: A New Route for AI Processing
Proposed Article 88c GDPR could give organisations more clarity on using legitimate interests for AI. It does not create a general AI exemption: existing…
Data Subject Access Requests Abuse Under the Digital Omnibus
Data subject access requests are increasingly used for purposes beyond data protection, such as litigation. This blog explains the Digital Omnibus proposal…
Baking a New Batch: Digital Omnibus and Cookies
This blog is about the proposed changes by the European Commission to the ePrivacy Directive and GDPR to make handling of cookies easier and the response…
The Omnibus single-entry portal for incident reporting
The EU’s Digital Omnibus proposes a Single-Entry Point for reporting incidents under laws such as GDPR, NIS2 and DORA, reducing administrative complexity.…
Shifting privacy left and ensuring privacy by design
Do you want a mature privacy program that operates proactively rather than reactively? In this blog I explain the origin of the shift left concept, what…
