[{"source":"The Daily Intake","description":"Today, the U.S. Department of Health and Human Services (HHS) and the Food and Drug Administration (FDA) issued the first of three proposed rules that aim to update infant formula nutrient requirements. While the formal rulemaking process commences, FDA has also released new chemical contaminant testing data demonstrating that most infant formula samples showed low or non-detectable levels of contaminants, according to HHS' press release . FDA intends to conduct a comprehensive review of the 30 nutrients currently required in infant formula marketed in the United States. The FDA intends to consolidate final changes to infant formula nutrient requirements into a single comprehensive final rule. Today's proposed rule (phase 1 of three) would update requirements for iodine, manganese, vitamin A, and vitamin D and reaffirm existing requirements for chloride, potassium, selenium, and sodium. It would also change the units of measure for two nutrients and request public input on potential requirements for ingredients that are currently not required in infant formula but commonly added by manufacturers due to their nutritional value ( e.g ., arachidonic acid (ARA), docosahexaenoic acid (DHA), and L-carnitine). FDA is accepting comments on the proposed rule until February 26, 2027. Keller and Heckman LLP will provide updates throughout the rulemaking","id":3251756,"url":"https://www.dailyintakeblog.com/2026/10/fda-proposes-rule-to-update-infant-formula-nutrient-requirements/","titre":"FDA Proposes Rule to Update Infant Formula Nutrient Requirements","pubDate":"Fri, 30 Oct 2026 07:53:31 +0100"},{"titre":"Aspects novateurs de la mécanique des fluides appliquée à la biologie des coraux","url":"https://hdl.handle.net/1866/46820","pubDate":"Sat, 24 Oct 2026 08:07:41 +0200","description":"dc.contributor.author: Allard, Marianne dc.date.issued: 2026-10 dc.description.abstract: Les coraux, étant des animaux filtreurs, sont indispensables aux écosystèmes marins, créant des points chauds de biodiversité. Les pressions humaines grandissantes sur les coraux menacent leur survie et crée un changement de dominance des coraux durs aux coraux mous. Cette étude révèle la présence de vibrations chez plusieurs espèces de coraux mous à partir de données récoltées en laboratoire et en plongée. Les paramètres principaux influençant la fréquence de vibration sont le diamètre des branches, la vitesse d’écoulement et la présence des polypes (structures servant à capturer la nourriture). La dynamique d’interaction entre les coraux et leur environnement changeant se verra modifiée dans les prochaines années en raison de l’augmentation de l’intensité des tempêtes liée aux changements climatiques, risquant d’impacter leur capacité d’alimentation. Les déversements pétroliers représentent également une menace importante pour les coraux. Leur toxicité a été démontrée dans des études précédentes, sans toutefois qu’une ingestion directe n’ait été observée. Dans cette étude, deux espèces de coraux mous et trois espèces de coraux durs ont été exposés à trois types d’huile différents (canola, poisson et moteur) pour évaluer leur réaction et leur interaction avec les gouttelettes d’huile. L’ingestion des trois huiles a été confirmée chez les coraux mous, et l’ingestion accidentelle de l’huile de canola a été constatée chez une espèce de corail dur. Les deux autres espèces de coraux durs ont montré un gonflement des polypes lors de l’exposition aux trois types d’huile. Les coraux mous sont donc potentiellement plus vulnérables aux déversements de pétrole, alors que les coraux durs pourraient servir d’indicateurs d’exposition. Cette étude est significative car elle est la première à se pencher sur ces deux aspects des menaces anthropiques sur les récifs coralliens.; Corals are filter-feeding animals that play a vital role in marine ecosystems, creating biodiversity hotspots. Growing human pressures on corals are threatening their survival and creating a shift from hard to soft coral dominated reefs. This study revealed the presence of vibrations in several soft coral species, from diving and laboratory data. The main parameters influencing vibration frequency are branch diameter, water flow velocity, and the presence of polyps (structures that capture food particles). The fluid-structure interaction between the coral and its environment is expected to change in coming years due to stronger storms from climate change, potentially affecting their feeding capacity. Oil spills also pose a major threat to corals. While toxicity has been demonstrated in past studies, direct ingestion had not been observed. In this study, experiments were made exposing two soft coral species and three hard coral species to three oil types (canola, fish, and motor) to test their reaction and interaction with oil droplets. All three oils were ingested by soft corals, while only canola oil was accidentally ingested by one hard coral species. The other two hard coral species showed polyp swelling after exposure to all three oils. Soft corals may thus be more vulnerable to oil spills, while hard corals could serve as exposure indicators. This study is significant as it is the first to examine these two aspects of human threats on coral reefs. dc.type: Thèse ou mémoire /","id":3238635,"source":"Faculté de droit Travaux récents"},{"url":"https://www.cahiers-espi2r.fr/2305","titre":"The Old Québec (Vieux-Québec) historic district: Heritage, tourism and real-estate developers since the post-war years","pubDate":"Wed, 21 Oct 2026 14:33:39 +0200","description":"Introduction There are several ways of conceiving heritage conservation. For the purpose of this paper, we need to start from the premise that what we call “heritage” is a dynamic, evolving reality, and that a historic district such as “Old Québec” can undergo structuring transformations rooted in a process of heritage conservation. In Old Québec, the process of conservation —also referred to “patrimonialization”—has not received the attention it deserves. This paper aims to shed light on the process of functional requalification has undergone by Old Québec since the 1950s, within the broader context of its transformation into a historic district. It is based on discourse analysis (Berthold, 2013), supported by a diversifie body of documentation, including primary sources, such as archival documents, press reviews, geospatial and land-use data, and official reports. It is complemented by a body of scholarly literature devoted to Old Québec since the 1970s. First, we explain the sociohistorical process that led to the creation of Old Québec, starting in the 1950s. Then, we highlight the role played by tourism and the real-estate economy —includingdevelopers—in this process. Turning the Champlain District into a historic district At the turn of the 1950s, the area now known as “Old Québec” was referred to as the Champlain District. Named after the city’s main colonial founder, Champlain was one of the first areas to be settled, beginning in the early 17th century. It covers","id":3232003,"source":"ESPI2R"},{"pubDate":"Thu, 15 Oct 2026 08:26:22 +0200","url":"https://verfassungsblog.de/the-currently-uneven-intelligence-of-ai-in-comparative-constitutional-law/","titre":"The (Currently) Uneven Intelligence of AI in Comparative Constitutional Law","source":"Scoop.it - Documentation juridique (Stéphan Cottin)","id":3218421,"description":"This article belongs to the debate » Thinking Machines, Thinking Lawyers14 October 2026The (Currently) Uneven Intelligence of AI in Comparative Constitutional Law From Years of Research to a Single Prompt? Artificial intelligence (AI) has the potential to accelerate and improve the quality of research. This potential has inspired numerous projects exploring how AI could help scholarship on constitutional law. For example, there is research using AI to interpret constitutions,1) apply constitutional principles,2) and predict court rulings.3) Even the question of whether AI could improve the process of constitution-making has been studied.4) AI’s potential is particularly significant for comparative constitutional research. Systematically comparing legal systems requires locating sources from different jurisdictions, which are often difficult to access and only available in local languages. The creation of comparative legal datasets has thus involved considerable personnel, time, and financial resources. AI can overcome many of these obstacles. AI models can search for and translate foreign-language sources, filter them, and convert the filtered information into a dataset. In doing so, AI offers the prospect of datasets — which previously required years of research and the efforts of numerous experts and research assistants to compile — being just a prompt away. However, whether AI models can generate comparative law datasets that are qualitatively comparable to human-coded datasets has not yet been addressed (although Guha et al provide an example for a broader legal benchmarking exercise).5) We therefore conducted our own benchmarking study.6) We found evidence suggesting that recent AI models may be able to code simple factual data, but they are likely unreliable substitutes for expert human coders when conceptual or interpretive judgment is required. The Benchmarking Project: Seven Coding Tasks, Four Datasets, Two LLMs In our project, we tested the ability of two large language models (LLMs) to code different types of information relevant to comparative constitutional law. We specifically assessed whether LLMs can reproduce information from four existing comparative constitutional law datasets, all of which were compiled through human coding and which served as a ‘ground truth’ for our exercise. From these datasets, we asked the LLMs to code seven variables, which can be thought of as seven tasks relevant to the creation of comparative constitutional law datasets. Each of these tasks is either a test of fact-finding or reasoning abilities. First, from the Executive Term Limit Evasion Dataset,7) we drew information on whether presidents in 106 presidential systems have evaded constitutionally mandated term limits between 2000 and 2019. The dataset includes one variable on whether presidents attempt to overstay past the end of their term. The second variable captures what strategies executives use for doing so, such as amending the constitution, replacing it with a new one, or asking the court to interpret term limits out of the constitution. While determining whether a president overstayed is a fact-finding task, assessing the strategy used to do so requires reasoning. Second, from the Comparative Constitution Making Dataset,8) we drew information on the process by which constitutions were adopted in democracies between 1900 and 2015. This dataset also includes fact-finding variables such as (1) whether citizens were involved in the formulation, discussion, or submission of reform proposals, and (2) whether citizens participated in popular referendums at any stage in the process. The dataset’s most important variable (3) captures whether constitutions reflect ‘plural elite agreement,’ that is, whether all relevant elite factions in society were involved and represented during the process. The recreation of this variable requires reasoning. Third, from the Characteristics of National Constitutions Dataset9), we drew on its coding of 43 first-generation constitutional"},{"description":"FTC consumer protection year in review offers 2020 vision for your business lfair January 8, 2020 | 9:26AM FTC consumer protection year in review offers 2020 vision for your business By Lesley Fair They say hindsight is 20/20, but what about foresight? We’re not ones to prognosticate, but a look at notable FTC cases and initiatives from the past year suggests some topics likely to be top of mind in months to come. Here is a non-exhaustive list of issues in our 2019 rearview mirror and likely visible through the 2020 windshield. Consumer privacy. The FTC’s $5 billion enforcement action against Facebook made history and headlines, but the other notable part of the case is the monumental change the order mandates to Facebook’s privacy ecosystem. The Commission opinion in Cambridge Analytica reaffirms the proposition that like any other claim, a company’s privacy promises are viewed through the lens of established FTC consumer perception principles. A series of cases demonstrates the agency’s continued commitment to challenging false or misleading representations about businesses’ compliance with the EU-U.S. Privacy Shield Framework. Another important development is the FTC’s proposed settlement with Retina-X . It’s our first action against a marketer of stalking apps – software that allowed purchasers to monitor the mobile devices on which they’re installed, without users’ knowledge. COPPA. Congress passed the Children’s Online Privacy Protection Act to ensure that when it comes to the collection of kids’ personal information online, parents are in the driver’s seat. The FTC settlement with YouTube – brought in conjunction with the New York Attorney General – alleges that the company collected kids’ personal data without parental consent, in violation of the COPPA Rule . The $170 million civil penalty broke the record for the largest remedy in an FTC COPPA case, set months before in our $5.7 million settlement with Musical.ly , now known as TikTok. If you’re a YouTube channel owner, read a special Business Blog post for tips on determining if your content is directed to children. Data security. Is your company honoring its data security promises and taking reasonable steps to safeguard the sensitive information in its possession? The FTC, CFPB, and State AG actions against Equifax illustrate how consumers are injured when companies ignore reasonably foreseeable threats. The settlement, which totals between $575 million and $700 million – also reminds businesses that heeding warnings about known risks is more prudent (and cost-effective) than the alternative. Three threads tie together the FTC’s unrelated actions against LightYear Dealer Technologies and InfoTrax Systems . They both sell management software to specific industries. They both allegedly failed to take reasonable steps to secure their networks, resulting in damaging data breaches. And they’re both covered by similar new orders the FTC has introduced in recent data security cases. If you or your clients are players in the Internet of Things, the settlement of the FTC’s litigation against connected device company D-Link sends an unmistakable message: The future of the IoT marketplace depends on secure software development. Endorsements, certifications, and influencers. Why is the FTC concerned about the accuracy of endorsements and certifications? Because they’re material to consumers. The FTC says Truly Organics’ claim that its personal care products were “certified organic” lathered up a double bubble of deception. First, its merchandise contained ingredients that weren’t organic. Second, the company falsely claimed that its products were certified by USDA’s National Organic Program. Other FTC developments focused on the use of endorsements in social media. The FTC’s action against Devumi alleges the company sold fake followers, phony subscribers, and bogus","id":3203247,"source":"FTC USA Business Blog Posts","url":"https://www.ftc.gov/business-guidance/blog/2020/01/ftc-consumer-protection-year-review-offers-2020-vision-your-business","titre":"FTC consumer protection year in review offers 2020 vision for your business","pubDate":"Thu, 08 Oct 2026 08:06:58 +0200"},{"titre":"FTC challenges Online Trading Academy’s money-making claims","url":"https://www.ftc.gov/business-guidance/blog/2020/02/ftc-challenges-online-trading-academys-money-making-claims","pubDate":"Mon, 05 Oct 2026 08:07:09 +0200","description":"FTC challenges Online Trading Academy’s money-making claims lfair February 12, 2020 | 4:35PM FTC challenges Online Trading Academy’s money-making claims By Lesley Fair Ads for health products often target Boomer Consumers, but those aren’t the only claims pitched to people looking toward retirement. An FTC action alleges a company called Online Trading Academy has taken in more than $370 million by gearing its deceptive representations to that demographic. In addition, the complaint alleges violations of the Consumer Review Fairness Act. According to the FTC, the California-based operation, related companies, and three individual defendants advertise a “patented strategy” that consumers can apply “to any asset class including stocks, options, futures and currencies” to rake in big money. They claim their “training programs” – with price tags as high as $50,000 – will teach consumers how to “invest like the pros on Wall Street.” ”No matter your experience and goals,” people were told the defendants’ “proven” strategy was “designed to make money in any market, whether it’s going up or down.” The complaint recounts the process the defendants use to attract consumers through TV and radio ads, online promotions, and direct mail. First comes an in-person “preview” seminar. Next, people pay $299 for a three-day “orientation.” That’s where the defendants urge attendees to sign up for seminars costing thousands more. The defendants assign each attendee an “Education Counselor” – a/k/a salesperson working on commission – who follows up by phone or email. According to the complaint, the defendants train their Education Counselors not to “look like, act like or sound like, a traditional salesperson,” but instead to take on a “role” and lead consumers through “The Pain Funnel,” Q&A designed to overcome consumer qualms. To get people to sign up for more seminars, the defendants routinely offer to finance all or part of the cost with loans at 18%, with the promise to forgive the interest if the consumer pays the total off within six months. The FTC says that in some instances, the defendants lead buyers to believe they’ll be able to repay the loan quickly with money they’ll make using that “patented strategy.” So how much does Online Trading Academy say consumers will earn? A central theme of their pitch is “You don’t have to work on Wall Street to make money like Wall Street.” Infomercials feature purchasers claiming that “in three hours I made $12,000” or “I made $32,000 in less than seven trading days.” In a YouTube video, a retiree says he made “$40,000 in a single trade.” In addition, a speaker at a live event claimed consumers “could potentially make $50,000 of annual income with an account size as low as $5,000” because Online Trading Academy has “a patent on the fact that you can time the markets,” which “gives us the ability to know when to get in and when to get out, long-term and short-term.” Other speakers – including some of the named defendants – paint a picture of lavish lifestyles filled with international travel, a “super luxury car” every year, and homes in areas where kids have “live-in nannies, cooks, gardeners.” One speaker said the money he made using Online Trading Academy’s strategy allows him to live in an enclave so exclusive that a neighbor, a renowned Olympic gold medalist, taught his daughter to swim. But the facts paint a different picture. The FTC alleges the defendants don’t systematically collect data sufficient to substantiate their earnings claims. But even the evidence they do have gave them good reason to know their representations are deceptive. For starters, according to the FTC, the defendants know that few consumers who","id":3197414,"source":"FTC USA Business Blog Posts"},{"titre":"Speaking of Spokeo: Part 2 — The company’s allegedly bogus endorsements","url":"https://www.ftc.gov/business-guidance/blog/2012/06/speaking-spokeo-part-2-companys-allegedly-bogus-endorsements","pubDate":"Sat, 03 Oct 2026 14:06:13 +0200","description":"Speaking of Spokeo: Part 2 — The company’s allegedly bogus endorsements wfg-adm109 June 13, 2012 | 12:25PM Speaking of Spokeo: Part 2 — The company’s allegedly bogus endorsements By Lesley Fair The lawsuit against data broker Spokeo is the FTC’s first Fair Credit Reporting Act case addressing the collection of online info — including data from social networking sites — when used in the context of employment screening.  But that’s not the only way the Spokeo settlement touches on social media.  The FTC also charged that Spokeo violated Section 5 by having employees post glowing recommendations of the company’s services on news and technology websites without disclosing their true identity. Perhaps just the work of a rogue cubicle occupant?  No, said the FTC.  According to the complaint , Spokeo directed its employees to write the comments.  Spokeo managers then edited what they wrote and had the staffers post the endorsements using account names provided by Spokeo.  The purpose, says the FTC, was to give readers the misleading impression that the laudatory words had been posted by independent consumers or business users of Spokeo. The FTC’s revisions to its Endorsement Guides made headlines a few years ago.  Ironically enough, the provision that seemed to attract the most attention is one that didn’t change.  It’s the law — and it’s always been the law under Section 5 — that consumers have a right to know when there’s a material connection between an advertiser and an endorser.  Here’s how the Guides put it:  \"When there exists a connection between the endorser and the seller of the advertised product that might materially affect the weight or credibility of the endorsement ( i.e., the connection is not reasonably expected by the audience), such connection must be fully disclosed.\" According to the FTC, by posting comments that conveyed the untruthful impression that they came from satisfied users of Spokeo’s services, Spokeo engaged in false and misleading practices.  To settle the endorsement count in the lawsuit, Spokeo has agreed that it won’t misrepresent, expressly or by implication, the status of any user of a product or service — for example, that someone is an independent, ordinary endorser if that’s not the case.  The company also will clearly and prominently disclose any material connection between an endorser and Spokeo (or any other entity advertising, selling, or promoting a product) when a connection exists.  What about the bogus endorsements already posted?  Spokeo has seven days to take all reasonable steps to pull them down. Looking for more about complying with the Endorsement Guides?  Read The FTC’s Revised Endorsement Guides: What People are Asking and watch this video: While you’re at it, share this post and those resources with your marketing staff, your ad agency, your PR firm, and anyone else who plays a role in your publicity and promotions. Next:  What the Spokeo settlement means for your business, your next ad campaign, and your job search","id":3195787,"source":"FTC USA Business Blog Posts"},{"description":"Practice Fusion case suggests 6 health privacy pointers lfair June 8, 2016 | 9:01AM Practice Fusion case suggests 6 health privacy pointers By Lesley Fair Combine two of the most talked-about consumer protection topics – health privacy and consumer-generated online content – and what do you get? A proposed FTC settlement with Practice Fusion, the largest cloud-based electronic health records company in the country, and six compliance tips for others in the industry. One of San Francisco-based Practice Fusion’s primary products is an electronic records system for outpatient providers. In 2009, the company launched “Patient Fusion,” an online portal where patients whose providers were already using Practice Fusion could view or download their health information or transmit it to another provider. Patient Fusion also let patients send and receive secure messages from their providers. Fast forward several years and the company decided to expand Patient Fusion to include a public directory where current and prospective enrollees could search for doctors geographically or by specialty, read patient reviews of providers, and request appointments. But Practice Fusion had to ask itself a question familiar to many online companies: How do we get the content – in this case, patient reviews? That’s the focus of the FTC’s lawsuit. According to the complaint , Practice Fusion solicited data in a misleading way that led some patients to believe they were sending follow-up messages directly to their doctors about their diagnosis, medical treatment, prescriptions, etc. – and not contributing content to a public website. Practice Fusion, however, populated its new site with the information those people provided, some of which was highly sensitive. Here’s what happened. After appointments with their doctors, patients received emails titled “How was your visit?” The message continued, “To help improve your service in the future, please let us know how your visit went” and included a link with rating stars. The message ended this way: Thank you, Dr. [Name] In a footer, the message said “This email was sent to you by Patient Fusion®, a tool Doctor [Name] uses to deliver the highest quality of care to patients.” Below that in smaller print it said “Sent on behalf of Doctor [Name]’s office by: Practice Fusion.” If patients clicked the link, they were taken to a page that asked for feedback about things like how long they had to wait for their appointment, the doctor’s bedside manner, and whether their medical concern was addressed. There also was a text box where patients were invited to “leave a review for your provider.” Below that was a pre-checked box with the phrase “Keep this review anonymous.” What did some people put in that box? Highly sensitive information directly addressed to their doctors, not evaluations meant to be shared publicly. Here are just a few examples: “Dr [name], My Xanax prescription that I received on Monday was for 1 tablet a day but usually it’s for 2 tablets a day. I have not taken it to the pharmacy yet. Can I pick up a new one, or can I get a prescription called into a pharmacy? Thanks, [patient’s full name] “I called today and left a message regarding my daughter and no one has returned my call. I think she is depressed and has stated several times this week that she wishes she was dead. Could someone please call me [phone number]?” “The cefuroxime axetil does not seem to be doing anything for me. I did a little research and I think I have a yeast infection called candida. Not sure what to do about it yet. I guess I will first try to change my diet. Medication? [patient’s full name] “I would like to make an appointment for my back pain and possible shingles. Can you please call me @ [phone number]? Thank you! [patient's full name]” “I HAVE NO INFECTION [healthcare provider name].  EVERYTHING WENT","id":3194910,"source":"FTC USA Business Blog Posts","titre":"Practice Fusion case suggests 6 health privacy pointers","url":"https://www.ftc.gov/business-guidance/blog/2016/06/practice-fusion-case-suggests-6-health-privacy-pointers","pubDate":"Sat, 03 Oct 2026 08:09:37 +0200"},{"url":"https://www.ftc.gov/business-guidance/blog/2021/02/it-amour-or-scam-more","titre":"Is it amour – or scam-more?","pubDate":"Thu, 01 Oct 2026 14:10:47 +0200","source":"FTC USA Business Blog Posts","description":"Is it amour – or scam-more? lfair February 11, 2021 | 12:17PM Is it amour – or scam-more? By Lesley Fair Online romance may begin with Panic! At The Disco’s High Hopes , but according to a new FTC Data Spotlight , all too often it ends with the conclusion that – to quote the J. Geils Band –  Love Stinks . Far be it from us to put a damper on Valentine’s Day, but reports to the Consumer Sentinel Network suggest that the injury inflicted by romance scams is on the rise. According to the new Data Spotlight , “For three years running, people have reported losing more money on romance scams than on any other fraud type identified in Sentinel. In 2020, reported losses to romance scams reached a record $304 million, up about 50% from 2019. For an individual, that meant a median dollar loss of $2,500.” Why the increase? The continued popularity of dating apps is part of the story, but the pandemic has played a part, too. For right now, the need for social distancing and masking makes the “meet cute” at the local coffee shop less likely. Of course, we’ve all heard heart-warming stories of romances that started on screen and blossomed IRL, but the Data Spotlight suggests that at least some of those digital dalliances may be hiding something more sinister. What does that have to do with you? We thought you’d never ask. Chances are that someone you know – a friend or family member perhaps – has a long-distance love they have yet to meet. A subtle word from you about the telltale signs of a romance scam could mean one less report to Consumer Sentinel in 2021 about a heart broken and a wallet emptied by a romance scammer. It can be a difficult topic to broach, but we have a sure-fire opener: “I just read the most fascinating thing on the website of the Federal Trade Commission, America’s consumer protection agency.” (What? That’s not your typical conversation starter? No Valentine for you!) Regardless of how you bring up the topic, Valentine’s Day offers a way to share some heart-to-heart hints. Romance scams can happen to anyone. According to the Data Spotlight, reports of money lost on romance scams increased for every age group in 2020. The 20-29 crowd saw the most notable spike, with the number of reports more than doubling since 2019. People between 40 and 69 were once again the most likely to report losing money to romance scams. And people 70+ reported the highest individual median losses at $9,475. Every picture tells a story, but some of those stories are fiction. Knowing that fetching photos can lure in a love, scammers routinely steal people’s snaps and pass themselves off as the person in the picture. To investigate their identity, try a reverse-image search of their profile picture or other photos they send you. If the picture is associated with another name or if the details don’t match up, you’re dealing with a scammer. Don’t mix romance with finance. We’ve always cautioned people not to wire money or send gift cards to online loves, but we have a new tip to add. Don’t let your guard down just because that special someone sends you money first. You can bet the money’s stolen. Next, they’ll want you to send it on for some cooked-up reason. This is how people become unwitting accomplices to money laundering. As soon as the requests for money start, it’s time to – depending on your musical generation – Go Your Own Way , bid them Bye Bye Bye , or make it clear that We Are Never Ever Getting Back Together . The FTC has more advice on how to spot a romance scam . ","id":3191273},{"titre":"EDPB brings clarity to data processing for scientific research, speeds up the finalisation of the anonymisation guidelines and approves first European data protection seal as a tool for transfers","url":"https://www.edpb.europa.eu/news/news/2026/edpb-brings-clarity-data-processing-scientific-research-speeds-finalisation_en","pubDate":"Thu, 16 Apr 2026 14:15:11 +0200","description":"Brussels, 16 April – During its latest plenary, the EDPB has adopted Guidelines on processing of personal data for scientific research purposes . In addition, the Board has created a team to speed up the finalisation of the guidelines on anonymisation. The EDPB has also adopted two opinions on the two sets of the Europrivacy certification criteria for approval as European Data Protection Seals, one of which to be used as a tool for transfers. Many areas of scientific research rely on the processing of individuals’ personal data, and this has driven significant scientific breakthroughs that benefit society. The rise of new technologies, such as artificial intelligence, also contributes to scientific progress by enabling researchers to use and analyse data in innovative ways. The main objective of the EDPB guidelines on scientific research is to provide more clarity for researchers and make GDPR compliance easier , while ensuring the protection of individuals’ fundamental rights . “Scientific research can drive societal progress and improve our daily lives.  Our guidelines facilitate innovative research by helping researchers to navigate the GDPR. The EDPB is committed to supporting the scientific community and unlocking the full potential of scientific research in the EU while upholding data protection rights.\" EDPB Chair, Anu Talus In its guidelines, the Board provides clarifications on the concept of ‘scientific research’ . To determine if the processing takes place for scientific research purposes in the meaning of the GDPR, the Board provides six key-indicative factors that should be considered, in addition to the nature, scope, context and purposes of processing. These are: 1) methodical and systematic approach, 2) adherence to ethical standard, 3) verifiability and transparency, 4) autonomy and independence, 5) objectives of the research, and 6) potential to contribute to existing scientific knowledge or apply existing knowledge in novel ways. If the research activities meet these six factors, they can be presumed to constitute scientific research. Otherwise, the controller should justify and be able to demonstrate why the activities should be considered scientific research, within the meaning of the GDPR. Further processing for scientific research purposes is presumed to be compatible with the initial purpose for collecting individuals’ personal data. Therefore, controllers are not obliged to do the purpose compatibility test under the GDPR to determine if the new processing is compatible with the original purpose of collection. However, controllers must still make sure that the legal basis of the initial processing is also suitable for the further processing of personal data for scientific research purposes. Controllers can rely on “broad consent” where the purposes of research are not fully known at the time of collecting the personal data. In this case, researchers should respect ethical standards for scientific research and put additional safeguards in place to compensate for the lack of purpose specification. Controllers can also ask individuals to consent to different individual research projects separately, as soon as the purposes of those projects become known (dynamic consent). A combination of both broad and dynamic consent is also possible. In addition, the EDPB clarifies rights of individuals when their personal data are processed for scientific purposes. This includes the rights to erasure and object for which limitations may apply when personal data are processed for scientific research purposes. The Board provides examples to explain when the right to erasure can be considered likely to render impossible or seriously impair the objective of conducting scientific research. The EDPB also explains when controllers may reject an individuals’ objection to the processing of their personal data for scientific research purposes. This can be the case when processing is necessary for the performance of a task carried out for reasons of","id":2829942,"source":"EDPB News"},{"source":"Les Cahiers Scientifiques du Transport - Scientific Papers in Transportation - Dernières publications","description":"While the development of urban public transport (UPT) is considered a priority to promote the ecological transition, the Covid-19 health crisis has affected its operation. It results from constraints on supply, made necessary by travel restrictions and limitations on economic activity during periods of confinement. Existing literature has focused mainly on the use of different modes of transport, changes in mobility practices and the way governments managed the crisis. This article focuses instead on the effects of covid-19 on the supply and financing of UPT, and analyses whether this crisis has given rise to new dynamics in the mobility organising authorities (AOMs). Using data from 95 AOMs (i.e. 35% of all AOMs in 2019) and a survey of some 39 AOMs (14%), three main results are established. First, there is a big fall in fare revenue, whatever the category of AOM in France. However, due to the small proportion of UPT funding paid for by users, this decline is easily offset by a variation in the mobility tax (versement mobilité), government subsidies and an increase in the contribution from local authorities. Second, the AOMs seem confident about the funding for prospects, through an expected increase in UPT patronage and a stability, or even an expected dynamic, in the mobility tax in the future. As a result, the health crisis does not seem to have encouraged the AOMs to find new resources to finance the development of their UPT services in the medium-to-long term. Third, and finally, the health crisis has contributed to shift travel policy priorities in the AOMs, in particular when it comes to investment strategies, by raising the importance of developing the use of","id":2815881,"url":"https://doi.org/10.46298/cst.13310","titre":"The Covid-19 crisis and the French urban public transport: What are the short-, medium- and long-term effects on provision and funding?","pubDate":"Thu, 09 Apr 2026 14:03:49 +0200"},{"source":"EDPB News","id":2780286,"description":"Brussels, 23 March - On 17 March 2026, the EDPB conference “Cross-regulatory interplay and cooperation in the EU: a data protection perspective” took place in Brussels. The event showcased high-level discussions, featuring contributions from representatives of key EU institutions, European Data Protection Authorities, academia and industry.  Key takeaways from the panel discussions Throughout the day, three panels were held, focusing on 1) data protection and competition , 2) the Digital Markets Act (DMA) and the GDPR , and 3) the Digital Services Act (DSA) and the GDPR .  During the first panel , speakers emphasised the critical need for cooperation between regulatory bodies in the fields of data protection and competition and shared views on what regulators in the two fields can learn from each other, especially in the aftermath of the Bundeskartellamt ruling. A speaker emphasized that regulators should align their approaches and recognize synergies between the two fields, such as protecting consumers and data subjects. Others pointed out that fixing harm to end users does not always solve competition issues, and that data protection should be considered in competition analysis only when relevant, on a case-by-case basis. Panellists also highlighted the need to cooperate not just on individual cases, but on broader concepts and legal principles.  In this context, the EDPB has recently agreed to develop joint guidelines with the European Commission to address the interplay between competition law and data protection. The discussions in the second panel centred on the joint guidelines on the DMA and the GDPR , which were developed by the European Commission and the EDPB and recently underwent public consultation. The joint guidelines are an unprecedented work and a good example of regulatory cooperation paving the way for further examples ahead, in line with the  EDPB Strategy 2024-2027 and  Helsinki Statement ’s objectives to strengthen cross-regulatory cooperation. A crucial goal of the guidelines is the development of a coherent and compatible interpretation of the DMA and the GDPR while respecting the regulatory competences. It was emphasised that these guidelines help break silos, strengthen consistency, and provide further clarity and legal certainty. All of this contributes to easier compliance, which is valued by stakeholders and increases trust. At the same time, certain speakers suggested improvements to the final version of the guidelines, bearing in mind the DMA should not be given primacy over the GDPR and that the measures companies have to comply with should be proportionate.  Other examples of cooperation in this domain were also mentioned, such as the participation in the High Level Group for the Digital Markets Act and specific instances of cooperation on concrete cases.  The last panel of the day explored how the Digital Services Act (DSA) and the GDPR interact. Panellists provided the example of the protection of minors: age   verification should be effective yet fully in line with data protection legislation.  They highlighted the growing need for strong coordination between the two frameworks, including the role of the European Board for Digital Services and other ways for the Commission and the EDPB to work together. A speaker also underlined the challenges and ongoing work on cross-regulatory cooperation from the perspective of a national authority. Another speaker urged regulators to work on building a fully coherent interpretation of the two frameworks and more globally of the digital legislation. Panellists also stressed that emerging technologies such as artificial intelligence are reshaping online ecosystems and, as a result, the role of the DSA and the GDPR.  The panel concluded with a clear message: online safety under the DSA and the lawful processing of personal data are two sides of the same coin, both calling for the DSA and the GDPR to be read coherently.  Highlights from the keynote speeches The event also","pubDate":"Tue, 24 Mar 2026 14:08:47 +0100","titre":"EDPB conference on cross-regulatory cooperation: what we learned","url":"https://www.edpb.europa.eu/news/news/2026/edpb-conference-cross-regulatory-cooperation-what-we-learned_en"},{"url":"https://www.edpb.europa.eu/news/news/2026/edpb-identifies-challenges-hindering-full-implementation-right-erasure_en","titre":"EDPB identifies challenges hindering the full implementation of the right to erasure","pubDate":"Wed, 18 Feb 2026 15:27:14 +0100","source":"EDPB News","description":"Brussels, 18 February - The European Data Protection Board (EDPB) has adopted a  report on its Coordinated Enforcement Framework (CEF) action on the right to be forgotten (Art.17 GDPR) .  The  Board selected this topic  as it is one of the most frequently exercised GDPR rights and one about which DPAs frequently receive complaints from individuals. The main objectives of this coordinated action are to ensure that the right to erasure is effectively exercised by individuals in Europe and understand how controllers comply with this right in practice. In addition, the EDPB identified good practices and the most important related challenges, with the aim of providing further guidance on this topic.  Throughout 2025, 32 DPAs across Europe took part in this initiative. More specifically, 9 DPAs have initiated new formal investigations or have continued ongoing ones, and 23 DPAs carried out a fact-finding exercise. A total of 764 controllers across Europe responded to the action, ranging from small and medium-sized enterprises (SMEs) to big companies active in many different industries and fields, as well as various types of public entities. The results of these national actions have been aggregated and analysed together allowing for targeted follow-up on both national and EU level.   Areas of improvement and main challenges The report lists the issues that were identified, along with a series of recommendations addressed to controllers, to help them implement the right to erasure. Seven recurring main challenges were identified by DPAs. The results confirmed some of the findings of the 2024 coordinated action on the right of access , for example when it comes to the lack of appropriate internal procedures to handle requests, or the lack of sufficient information provided to individuals. In addition, participating DPAs reported specific findings related to the reliance by some controllers on inefficient anonymisation techniques to handle erasure requests as an alternative to deletion. DPAs also noted inconsistent practices, and the difficulties faced by controllers regarding the determination of retention periods and the deletion of personal data in the context of back-ups. In addition, as the right to erasure is not an absolute right, some controllers face difficulties in assessing and applying the conditions for the exercise of this right, including in carrying out the different balancing tests between the right to erasure and other rights and freedoms.   Follow-up to help organisations comply  Extensive guidance, documents and templates exist at national level to help controllers comply with the right of erasure and help individuals exercise this right. In line with the Helsinki Statement’s objectives of making GDPR compliance easier and ensuring consistent interpretation and enforcement across Europe, the extensive guidance and templates already available at national level will be leveraged at EDPB level where appropriate.   Background and next steps The CEF is a key action of the EDPB under its 2024-2027 Strategy , aimed at streamlining enforcement and cooperation among DPAs.  In 2023, the EDPB published the report on its first coordinated action on the  use of cloud-based services by the public sector . In 2024, the EDPB also published the report on the outcome of the second coordinated action on the  designation and position of Data Protection Officers . In 2025, the EDPB issued the report on its third coordination action on the  implementation of the right of access . The CEF 2026 action will be on the  obligations of transparency and information under the GDPR .   For further information: DA DPA:   EDPB vedtager rapport om dataansvarliges overholdelse af retten til sletning EL DPA: Ολοκλήρωση της συντονισμένης δράσης του","id":2703238},{"url":"https://www.ftc.gov/news-events/news/press-releases/2025/12/ftc-will-require-illusory-systems-return-money-stolen-hackers-implement-information-security-program","titre":"FTC Will Require Illusory Systems to Return Money Stolen by Hackers and Implement an Information Security Program","pubDate":"Wed, 17 Dec 2025 09:50:37 +0100","source":"Federal Trade Commission - Protecting America's Consumers","description":"The Federal Trade Commission is taking action against Illusory Systems Inc. for failing to implement adequate data security measures, leading to a major security breach in which hackers stole $186 million from consumers. Under a proposed order settling the FTC’s allegations, Utah-based Illusory, which does business as Nomad, will be required to implement an information security program to address numerous alleged security failures and to return recovered money to affected consumers. “The FTC Act requires companies to take reasonable security measures,” said Christopher Mufarrige, Director of the FTC’s Bureau of Consumer Protection. “It’s important that companies live up to their security promises to consumers.” In its complaint , the FTC alleged that Nomad prominently touted its security in its advertising, claiming that it offered “security-first” services. The FTC, however, alleged that the company failed to live up to these promises by failing to: use secure coding practices; implement processes for receiving and addressing vulnerability reports and responding to security incidents; and utilize widely known technologies that might have helped mitigate consumer losses. According to the complaint, in June 2022, Nomad introduced inadequately tested code that included a significant vulnerability. Just over a month later, hackers began exploiting the vulnerability. The FTC alleged that Nomad failed to respond to the attack in time because of its inadequate security and incident response measures, which led to the loss of $186 million. The company was able to recover some money, but consumers lost approximately $100 million. Nomad was warned about the dangers of inadequate testing as well as the need to ensure it had adequate staff and security in place. The company, however, failed to implement basic safety measures that would mitigate consumer losses, the FTC alleged. Under the proposed order , Nomad will be prohibited from making misrepresentations about its security practices. In addition, the company will also be required to: Implement a comprehensive information security program that is designed to protect consumers from theft or other unauthorized access and address the security issues outlined in the FTC’s complaint; Obtain biennial assessments of its information security program by an independent third party and cooperate with the third-party assessor; and Return to consumers money recovered following the security breach that was not already returned to customers. The Commission voted 2-0 to accept the proposed complaint and order for public comment. The FTC will publish a description of the consent agreement package in the Federal Register soon. The agreement will be subject to public comment for 30 days after publication in the Federal Register after which the Commission will decide whether to make the proposed consent order final. Instructions for filing comments will appear in the published notice. Once processed, comments will be posted on Regulations.gov. NOTE:  The Commission issues an administrative complaint when it has “reason to believe” that the law has been or is being violated, and it appears to the Commission that a proceeding is in the public interest. When the Commission issues a consent order on a final basis, it carries the force of law with respect to future actions. Each violation of such an order may result in a civil penalty of up to $51,744. The lead staff attorneys on this matter are M. Hasan Aijaz and Julia Horwitz with the FTC’s Bureau of Consumer","id":2577895},{"pubDate":"Tue, 06 May 2025 15:51:59 +0200","titre":"European Patent Organisation and extension of adequacy decisions for the UK: EDPB adopts opinions","url":"https://www.edpb.europa.eu/news/news/2025/european-patent-organisation-and-extension-adequacy-decisions-uk-edpb-adopts_en","source":"EDPB News","id":2099053,"description":"Brussels, 06 May - During its latest plenary, the European Data Protection Board (EDPB) adopted an opinion on the European Commission’s draft adequacy decision under the GDPR concerning the European Patent Organisation (EPO) . In addition, the Board adopted an opinion on the European Commission’s proposal to extend the validity of the UK adequacy decisions under the GDPR and the Law Enforcement Directive (LED) . Finally, the EDPB agreed to grant the status of observer to the Personal Data Protection Agency of Bosnia and Herzegovina.   Adequate protection of personal data by the EPO At the European Commission’s request, the Board adopted an opinion on the Commission’s draft adequacy decision regarding the European Patent Organisation (EPO). Once formally adopted by the Commission, this will be the first adequacy decision concerning an international organisation and not a country or a region. An adequacy decision is a key-mechanism in EU data protection legislation which allows the European Commission to determine whether a third country or an international organisation offers an adequate level of data protection. The effect of such a decision is that personal data can flow freely from Europe to that third country or international organisation. EDPB Chair, Anu Talus, said: “The EDPB welcomes the Commission’s initiative to work on the first adequacy decision concerning an international organisation. This decision shows how the legal framework of such organisations can be recognised as ensuring an adequate level of protection on the basis of Art.45 GDPR. The EDPB underlines the importance of ongoing dialogue between the Commission and international organisations, with a view to developing this category of adequacy decisions in addition to those relating to third countries.” In its opinion, the Board positively notes that the EPO data protection framework is largely aligned with the European Union data protection framework, including on data protection rights and principles. This shows that the GDPR and, in particular, its transfer provisions, can facilitate safe data flows from Europe to international organisations, while taking into account their status.   Six-month extension of the UK adequacy decisions The EDPB opinion, requested by the European Commission, addresses the proposed extension of the two UK adequacy decisions under the GDPR and the LED, which are set to expire on 27 June 2025. The opinion only concerns the proposed 6-month extension of these adequacy decisions and does not address the level of protection for personal data afforded in the UK, which will be examined by the EDPB following the Commission’s assessment, and if the renewal of the UK adequacy decisions is proposed. Since the UK‘s data protection reform is still pending in the UK parliament, the EDPB recognises the need for a technical and time-limited extension of the adequacy decisions until 27 December 2025.This will give the European Commission sufficient time to evaluate the updated UK legal framework once it has been adopted.   The EDPB stresses that this extension is exceptional and is due to the ongoing legislative developments in the UK. It should not, in principle, be further prolonged. The Board recalls the validity of its opinions 14/2021 and 15/2021 on the two UK adequacy decisions, adopted in April 2021, and invites the European Commission to take them into account in its future assessments.  The Board also recalls the Commission’s obligation to monitor all relevant developments in the UK during the extension period.   New observer to the EDPB’s activities Finally, EDPB members agreed to grant observer status to the EDPB’s activities to the Bosnia and Herzegovina Data Protection Authority, in line with Art. 8 EDPB Rules of Procedure ."},{"pubDate":"Wed, 18 Dec 2024 15:47:16 +0100","titre":"EDPB opinion on AI models: GDPR principles support responsible AI","url":"https://www.edpb.europa.eu/news/news/2024/edpb-opinion-ai-models-gdpr-principles-support-responsible-ai_en","id":1792119,"description":"Brussels, 18 December - The European Data Protection Board (EDPB) has adopted an opinion* on the use of personal data for the development and deployment of AI models . This opinion looks at 1) when and how AI models can be considered anonymous, 2) whether and how legitimate interest can be used as a legal basis for developing or using AI models, and 3) what happens if an AI model is developed using personal data that was processed unlawfully. It also considers the use of first and third party data. The opinion was requested by the Irish Data Protection Authority (DPA) with a view to seeking Europe-wide regulatory harmonisation. To gather input for this opinion, which deals with fast-moving technologies that have an important impact on society, the EDPB organised a stakeholders’ event and had an exchange with the EU AI Office. EDPB Chair Talus said: “AI technologies may bring many opportunities and benefits to different industries and areas of life. We need to ensure these innovations are done ethically, safely, and in a way that benefits everyone. The EDPB wants to support responsible AI innovation by ensuring personal data are protected and in full respect of the General Data Protection Regulation (GDPR).” Regarding anonymity , the opinion says that whether an AI model is anonymous should be assessed  on a case by case basis by the DPAs. For a model to be anonymous, it should be very unlikely (1) to directly or indirectly identify individuals whose data was used to create the model, and (2) to extract such personal data from the model through queries. The opinion provides a non-prescriptive and non-exhaustive list of methods to demonstrate anonymity. With respect to legitimate interest , the opinion provides general considerations that DPAs should take into account when they assess if legitimate interest is an appropriate legal basis for processing personal data for the development and the deployment of AI models. A three-step test helps assess the use of legitimate interest as a legal basis. The EDPB gives the examples of a conversational agent to assist users, and the use of AI to improve cybersecurity. These services can be beneficial for individuals and can rely on legitimate interest as a legal basis, but only if the processing is shown to be strictly necessary and the balancing of rights is respected. The opinion also includes a number of criteria to help DPAs assess if individuals may reasonably expect certain uses of their personal data. These criteria include: whether or not the personal data was publicly available, the nature of the relationship between the individual and the controller, the nature of the service, the context in which the personal data was collected, the source from which the data was collected, the potential further uses of the model, and whether individuals are actually aware that their personal data is online. If the balancing test shows that the processing should not take place because of the negative impact on individuals, mitigating measures may limit this negative impact. The opinion includes a non-exhaustive list of examples of such mitigating measures, which can be technical in nature, or make it easier for individuals to exercise their rights or increase transparency. Finally, when an AI model was developed with unlawfully processed personal data, this could have an impact on the lawfulness of its deployment, unless the model has been duly anonymised. Considering the scope of the request from the Irish DPA, the vast diversity of AI models and their rapid evolution, the opinion aims to give guidance on various elements that can be used for conducting a case by case analysis. In addition, the EDPB is currently developing guidelines covering more specific questions, such as web scraping. Note to editors: *An Article 64(2) opinion addresses a matter of general application or produces effects in more than one Member","source":"EDPB News"}]