Towards a single DPIA approach across the EU
The Digital Omnibus proposal and the EDPB’s draft DPIA template both point towards greater EU-wide alignment. This blog explains what may change, why the…
The Legal Fine Print of "Anonymous" Data
Effective July 1, 2026, prior consent will be required for commercial telemarketing. The soft opt-in for existing customers has been eliminated. Organizations…
Soft opt-in for telemarketing abolished
Effective July 1, 2026, prior consent will be required for commercial telemarketing. The soft opt-in for existing customers has been eliminated. Organizations…
EDPB Guidelines on Scientific Research
The EDPB’s Draft Guidelines clarify when research qualifies as genuinely scientific, how GDPR flexibilities apply and which safeguards organisations need.…
Article 88c GDPR: A New Route for AI Processing
Proposed Article 88c GDPR could give organisations more clarity on using legitimate interests for AI. It does not create a general AI exemption: existing…
Data Subject Access Requests Abuse Under the Digital Omnibus
Data subject access requests are increasingly used for purposes beyond data protection, such as litigation. This blog explains the Digital Omnibus proposal…
Baking a New Batch: Digital Omnibus and Cookies
This blog is about the proposed changes by the European Commission to the ePrivacy Directive and GDPR to make handling of cookies easier and the response…
The Omnibus single-entry portal for incident reporting
The EU’s Digital Omnibus proposes a Single-Entry Point for reporting incidents under laws such as GDPR, NIS2 and DORA, reducing administrative complexity.…
