[{"source":"Faculté de droit Travaux récents","url":"https://hdl.handle.net/1866/46835","description":"dc.contributor.author: Forget, Marilou dc.date.issued: 2026-10 dc.description.abstract: Gilbert Simondon est connu pour la richesse de ses réflexions sur l’individuation et la technique, mais de nombreuses facettes de son œuvre demeurent à explorer – en particulier sa pensée esthétique. Notre recherche a pour but de mettre en lumière cette dimension de la philosophie simondonienne, qui parcourt en filigrane l’ensemble de son œuvre. Les deux premiers chapitres du présent mémoire portent sur la théorie de l’individuation présentée dans L’individuation à la lumière des notions de forme et d’information, et sur la place discrète mais cruciale qu’y tient la notion d’« esthétisme ». Le troisième chapitre s’intéresse à la place de l’esthétique au sein du devenir des phases de la pensée, dont la description occupe la troisième partie de Du mode d’existence des objets techniques. Le quatrième chapitre aborde l’expérience esthétique à l’aune des cours de psychologie de Simondon, en particulier par rapport à sa théorie de l’imagination et de l’invention. Finalement, le cinquième chapitre tente une explicitation du sens axiontologique de l’esthétique simondonienne et de ses résonances actuelles, au prisme de la notion de techno-esthétique. Il apparaîtra que la question esthétique s’articule étroitement à celle du devenir de la culture.; Gilbert Simondon is known for the depth of his insights on individuation and technics, but numerous aspects of his work are still to be explored – notably his aesthetic thought. Our research aims to shed light on this dimension of simondonian philosphy, which implicitly goes through his work. The first two chapters touch upon the theory of individuation laid out in Individuation in Light of Notions of Form and Information, as well as the crucial albeit subtle role held by the concept of « aesthetism ». The third chapter looks into the place of aesthetics in the becoming of thought, described in the third part of On the Mode of Existence of Technical Objects. The fourth chapter adresses the aesthetic experience in Simondon’s psychology courses, mainly with regard to his theory of imagination and invention. Lastly, the fifth chapter attempts an explanation of the axiontological meaning of simondonian aesthetics, and of its current resonance, through the concept of techno-aesthetics. Our research will show how aesthetics is linked to the becoming of culture. dc.type: Thèse ou mémoire / Thesis or Dissertation etd.degree.discipline:","titre":"L’esthétique transductive de Gilbert Simondon. Vers une éthique de la culture","pubDate":"Fri, 23 Oct 2026 14:09:24 +0200","id":3237215},{"titre":"The (Currently) Uneven Intelligence of AI in Comparative Constitutional Law","id":3218421,"pubDate":"Thu, 15 Oct 2026 08:26:22 +0200","description":"This article belongs to the debate » Thinking Machines, Thinking Lawyers14 October 2026The (Currently) Uneven Intelligence of AI in Comparative Constitutional Law From Years of Research to a Single Prompt? Artificial intelligence (AI) has the potential to accelerate and improve the quality of research. This potential has inspired numerous projects exploring how AI could help scholarship on constitutional law. For example, there is research using AI to interpret constitutions,1) apply constitutional principles,2) and predict court rulings.3) Even the question of whether AI could improve the process of constitution-making has been studied.4) AI’s potential is particularly significant for comparative constitutional research. Systematically comparing legal systems requires locating sources from different jurisdictions, which are often difficult to access and only available in local languages. The creation of comparative legal datasets has thus involved considerable personnel, time, and financial resources. AI can overcome many of these obstacles. AI models can search for and translate foreign-language sources, filter them, and convert the filtered information into a dataset. In doing so, AI offers the prospect of datasets — which previously required years of research and the efforts of numerous experts and research assistants to compile — being just a prompt away. However, whether AI models can generate comparative law datasets that are qualitatively comparable to human-coded datasets has not yet been addressed (although Guha et al provide an example for a broader legal benchmarking exercise).5) We therefore conducted our own benchmarking study.6) We found evidence suggesting that recent AI models may be able to code simple factual data, but they are likely unreliable substitutes for expert human coders when conceptual or interpretive judgment is required. The Benchmarking Project: Seven Coding Tasks, Four Datasets, Two LLMs In our project, we tested the ability of two large language models (LLMs) to code different types of information relevant to comparative constitutional law. We specifically assessed whether LLMs can reproduce information from four existing comparative constitutional law datasets, all of which were compiled through human coding and which served as a ‘ground truth’ for our exercise. From these datasets, we asked the LLMs to code seven variables, which can be thought of as seven tasks relevant to the creation of comparative constitutional law datasets. Each of these tasks is either a test of fact-finding or reasoning abilities. First, from the Executive Term Limit Evasion Dataset,7) we drew information on whether presidents in 106 presidential systems have evaded constitutionally mandated term limits between 2000 and 2019. The dataset includes one variable on whether presidents attempt to overstay past the end of their term. The second variable captures what strategies executives use for doing so, such as amending the constitution, replacing it with a new one, or asking the court to interpret term limits out of the constitution. While determining whether a president overstayed is a fact-finding task, assessing the strategy used to do so requires reasoning. Second, from the Comparative Constitution Making Dataset,8) we drew information on the process by which constitutions were adopted in democracies between 1900 and 2015. This dataset also includes fact-finding variables such as (1) whether citizens were involved in the formulation, discussion, or submission of reform proposals, and (2) whether citizens participated in popular referendums at any stage in the process. The dataset’s most important variable (3) captures whether constitutions reflect ‘plural elite agreement,’ that is, whether all relevant elite factions in society were involved and represented during the process. The recreation of this variable requires reasoning. Third, from the Characteristics of National Constitutions Dataset9), we drew on its coding of 43 first-generation constitutional","source":"Scoop.it - Documentation juridique (Stéphan Cottin)","url":"https://verfassungsblog.de/the-currently-uneven-intelligence-of-ai-in-comparative-constitutional-law/"},{"description":"dc.contributor.author: Gonzalez Fernandez, Nadia dc.date.issued: 2026-10 dc.description.abstract: La diversité logicielle contribue à améliorer la fiabilité et la sécurité des systèmes depuis les années 1960, notamment gr'ce à des modèles dans lesquels une autorité centrale mandate et certifie des implémentations indépendantes. Au cours de la dernière décennie, Ethereum a déployé la diversité à grande échelle sous une forme nouvelle : 11 clients indépendants y coexistent sans être mandatés ni certifiés par une autorité centrale, tout en bénéficiant de la diversité déjà présente dans l’écosystème open source. Cette thèse étudie Ethereum comme un exemple de ce modèle émergent de diversité logicielle, en examinant son adoption, son étendue dans le code des clients et les défis qu’elle soulève. Nous combinons des entretiens semi-directifs avec sept contributeurs impliqués dans le développement, la coordination et le suivi de la diversité des clients, avec la première analyse statique complète de la chaîne d’approvisionnement logicielle des 11 clients les plus utilisés. Deux principaux résultats se dégagent. Premièrement, la communauté Ethereum veille activement au maintien de cette diversité au moyen d’une spécification commune, d’un suivi continu de la distribution des clients, de financements dédiés et d’interventions visant à limiter leur concentration. Deuxièmement, notre analyse montre que cette diversité s’étend au code : huit moteurs de bases de données indépendants sont utilisés par les 11 clients, tandis que les équipes convergent volontairement vers les composants les plus difficiles à implémenter correctement et privilégient leur audit plutôt que la multiplication d’alternatives non vérifiées. Ainsi, Ethereum constitue un exemple de diversité logicielle étendue et activement entretenue par sa communauté.; Software diversity has improved reliability and security in systems since the 1960s, through models in which a central authority commissions and certifies independent implementations. Over the last decade, Ethereum has deployed diversity at scale in a new form: 11 independent clients coexist without any central authority commissioning or certifying them, while also leveraging the diversity already present in the open-source ecosystem. This thesis studies Ethereum as a case of this emerging software diversity model, asking how such diversity is adopted, how far it reaches into client code, and what challenges it introduces. We combine semi-structured interviews with seven contributors who build, coordinate, and monitor client diversity with the first comprehensive static analysis of the software supply chain of the 11 most widely used clients. Two results follow. First, the Ethereum community actively cares for and sustains its client diversity: interviewees describe coordination through a shared specification, continuous monitoring of client distribution, dedicated funding, and intervention against client concentration. For example, when Prysm exceeded 60% of the consensus layer, the community organized a campaign to redistribute validators away from it. Second, our supply chain analysis confirms that this diversity extends into the codebase: eight independent database engines back the 11 clients, and teams deliberately converge on the components hardest to implement correctly, funding their audit rather than multiplying unverified alternatives. Ethereum exhibits extensive software diversity that its community actively cares for and maintains. This sets an","titre":"State of software diversity in ethereum","id":3215934,"pubDate":"Wed, 14 Oct 2026 08:14:30 +0200","source":"Faculté de droit Travaux récents","url":"https://hdl.handle.net/1866/46704"},{"url":"https://www.ftc.gov/business-guidance/blog/2023/05/franchise-fundamentals-taking-deep-dive-franchise-disclosure-document","source":"FTC USA Business Blog Posts","id":3199079,"pubDate":"Tue, 06 Oct 2026 08:06:24 +0200","titre":"Franchise Fundamentals: Taking a deep dive into the Franchise Disclosure Document","description":"Franchise Fundamentals: Taking a deep dive into the Franchise Disclosure Document lfair May 23, 2023 | 6:41PM Franchise Fundamentals: Taking a deep dive into the Franchise Disclosure Document By Lesley Fair Love at first sight may (or may not) be a real thing, but when it comes to investing your money, it’s unwise to fall for a franchise without first subjecting it to tough-minded scrutiny. The third in the FTC’s Franchise Fundamentals blog series walks through an essential part of that evaluation: an in-depth review of the Financial Disclosure Document (FDD) required by the FTC’s Franchise Rule . You must receive the Franchise Disclosure Document at least 14 days before you’re asked to sign any contract or pay any money to the franchisor or one of its affiliates. In fact, you have the right to the FDD once the franchisor has received your application and agrees to consider it. So speak up if you don’t receive it and ask questions – lots of them – as you review the FDD and any attached documents.   Image Indeed, the franchisor’s conduct regarding the FDD may raise some red flags about how they do business. Providing the FDD doesn’t establish that a franchisor is reputable – it’s required by law, after all – but if a franchisor doesn’t promptly provide this mandatory document, gives you an incomplete FDD, evades your probing questions, or tries to rush you through the process, it doesn’t speak well of their approach to legal compliance.  Assuming you have the FDD in hand, let’s consider some of the 23 required items line by line. Here are things to look for as you review the FDD. Franchisor’s Background (FDD Item 1) Item 1 provides background information about the franchisor and any parent companies, predecessors, and affiliates, including how long the franchise has been in business. It also lets you know if there are any legal requirements unique to the franchised business, like the need to get a special license or permit. This can help you understand the costs and risks you would be taking on. Business Background (FDD Item 2) Remember the old adage “People are known by the company they keep”? Well, companies are known by the people they keep, which is why Item 2 identifies directors, principal officers, and other key executives. Pay attention to their business backgrounds, their experience in managing a franchise system, and how long they’ve been with the franchisor. Litigation History (FDD Item 3) Item 3 lists information about prior litigation, including whether the franchisor or any of its executive officers have been convicted of certain crimes or have been found liable – or settled lawsuits – related to the franchise relationship. Lawsuits against the franchisor could mean it hasn’t honored its agreements or that franchisees are dissatisfied with its performance. Item 3 also says whether the franchisor has sued any of its franchisees in the past year. That information could suggest problems in the franchise system. For example, if a franchisor sued franchisees for failing to pay royalties, was it because franchisees weren’t successful and couldn’t make their royalty payments? Bankruptcy (FDD Item 4) Have the franchisor, its affiliates, or any of its executives filed for bankruptcy? Item 4 discloses that information and could give you insights into the financial condition of the business.  Initial and Other Fees (FDD Items 5-7) Items 5-7 go over some of the costs involved in starting and operating a franchise. That could include things like deposits or franchise fees (some of which may be non-refundable); what you’ll have to pay for initial inventory, signs, equipment, leases, or rentals; and ongoing costs, like royalties and advertising fees. A Consumer’s Guide to Buying a Franchise suggests more than a dozen other areas of financial inquiry, which should give you an indication about the importance of both getting in touch with your inner bean"},{"source":"FTC USA Business Blog Posts","url":"https://www.ftc.gov/business-guidance/blog/2025/09/first-inform-consumers-act-enforcement-case-filed-against-online-marketplace-temu","description":"First INFORM Consumers Act enforcement case filed against online marketplace Temu kkrown September 5, 2025 | 10:00AM First INFORM Consumers Act enforcement case filed against online marketplace Temu Online marketplaces and third party sellers looking for a refresher on the INFORM Consumers Act should look no further than the recent settlement with Whaleco, Inc., which operates the online marketplace Temu. The complaint alleges the company failed to provide online shoppers with required information and tools. This is the first case brought to enforce the INFORM Act. The INFORM Act, which went into effect in 2023, seeks to make online transactions more transparent. Among other things, the law requires online marketplaces to collect, verify, and disclose certain information about high-volume third party sellers. ( Informing Businesses about the INFORM Consumers Act  has more on how the law defines terms, what’s required of online marketplaces, and the substantial penalties the FTC and state law enforcers may seek if online marketplaces violate the law.) In 2022, Temu launched its online marketplace in the United States, where consumers can view product listings on Temu’s homepage, through search results, and in gamified shopping experiences on the platform. According to the complaint, Temu violated the INFORM Act by failing to offer a mechanism for consumers to report suspicious activity — electronically and by phone — on the gamified product listings of many high-volume third party sellers and by failing to offer a telephonic mechanism on non-gamified product listings. The complaint also alleges that Temu did not post required identifying information about sellers on its gamified product listings or mobile site, and that Temu’s disclosures, when made, were difficult to find. According to the settlement, Temu will pay a $2 million civil penalty, provide a telephonic mechanism for consumers to report suspicious activity on listings, and make other required disclosures. Is your business covered by the INFORM Act? Make sure you:  Review the provisions of the INFORM Act thoroughly . Make sure you fully understand — and have measures in place to comply with — each of its requirements. Make required disclosures easy for consumers to notice . Required disclosures should stand out from any surrounding material and use plain language. Minimize or eliminate steps consumers need to take to reach required disclosures. Ensure required disclosures are available across all iterations of your platform . The INFORM Act mandates disclosures on all interfaces with product listings. And as your platforms evolve, regularly assess and update your compliance efforts. If your business sells through online platforms, check out  What Third Party Sellers Need to Know About the INFORM Consumers Act . This covers what sellers are impacted by the INFORM Act, what you can expect online platforms to require of you, and what information platforms must disclose about you to consumers. It also answers some questions you may have about the law. And if you spot a violation of the INFORM Act, r­eport it to the FTC using this  dedicated link","titre":"First INFORM Consumers Act enforcement case filed against online marketplace Temu","id":3198178,"pubDate":"Mon, 05 Oct 2026 14:07:45 +0200"},{"id":3197409,"pubDate":"Mon, 05 Oct 2026 08:07:08 +0200","titre":"Stick with Security: Require secure passwords and authentication","description":"Stick with Security: Require secure passwords and authentication lfair August 11, 2017 | 10:47AM Stick with Security: Require secure passwords and authentication By Thomas B. Pahl, Acting Director, FTC Bureau of Consumer Protection To make it harder for hackers to bluff their way onto a computer network, careful companies follow the advice of Start with Security and require strong authentication practices . We’ve considered FTC settlements, closed investigations, and the questions we get from businesses about implementing good authentication “hygiene.” Here are some tips on using effective authentication procedures to help safeguard your network. Insist on long, complex, and unique passwords. A password’s very reason for being is to be easy for a user to remember, but hard for a fraudster to figure out. Obvious choices like ABCABC, 121212, or qwerty are the digital equivalent of a “hack me” sign. Furthermore, experts have determined that passphrases or longer passwords are generally harder to crack. The smarter strategy is for companies to think through their standards, implement minimum requirements, and educate users about how to create stronger passwords. Also, when you install software, applications, or hardware on your network, computers, or devices, change the default password immediately. And if you design products that require consumers to use a password, configure the initial set-up so they have to change the default password. Example: A staff member attempts to select payroll as the password for the database that includes employee payroll information. The company sets up its system to reject an obvious choice like that. Example: To access the corporate network, a business allows employees to type in their username and a shared password common to everyone who works there. Employees are also allowed to use that shared password to access other services on the system, some of which contain sensitive personal information. The more prudent policy would be to require strong, unique passwords for each employee and to insist that they use different passwords to access different applications. Example: At a staff meeting, a company’s IT manager offers tips for employees about good password hygiene. She explains that passphrases or longer passwords are better than short passwords based on standard dictionary words or well-known information (for example, a child’s name, a pet, a birthday, or a favorite sports team). By establishing a more secure corporate password standard and educating employees about implementing it, the IT manager is taking a step to help her company reduce the risk of unauthorized access. Store passwords securely. A company’s first line of defense against data thieves is a workforce trained to keep passwords secret. But even the strongest password is ineffective if an employee writes it on a sticky note on her desk or shares it with someone else. Train your staff not to disclose passwords in response to phone calls or emails, including ones that may appear to be coming from a colleague. Con artists have been known to impersonate corporate officials by spoofing phone numbers or email addresses. A compromised password poses a particular risk if it can be used to open the door to even more sensitive information – for example, a database of other user credentials maintained on the network in plain, readable text. Make it difficult for data thieves to turn a lucky password guess into a catastrophic breach of your company’s most sensitive data by implementing policies and procedures to store credentials securely. Example: A new employee gets a call from someone who claims to be the company’s system administrator. The caller asks him to verify his network password. Because the new staffer learned about impersonation scams at an in-house security orientation, he refuses to disclose his password and instead reports the incident to the appropriate person in the company. Example: A company keeps user credentials and other passwords in plain","url":"https://www.ftc.gov/business-guidance/blog/2017/08/stick-security-require-secure-passwords-authentication","source":"FTC USA Business Blog Posts"},{"source":"FTC USA Business Blog Posts","url":"https://www.ftc.gov/business-guidance/blog/2016/06/practice-fusion-case-suggests-6-health-privacy-pointers","description":"Practice Fusion case suggests 6 health privacy pointers lfair June 8, 2016 | 9:01AM Practice Fusion case suggests 6 health privacy pointers By Lesley Fair Combine two of the most talked-about consumer protection topics – health privacy and consumer-generated online content – and what do you get? A proposed FTC settlement with Practice Fusion, the largest cloud-based electronic health records company in the country, and six compliance tips for others in the industry. One of San Francisco-based Practice Fusion’s primary products is an electronic records system for outpatient providers. In 2009, the company launched “Patient Fusion,” an online portal where patients whose providers were already using Practice Fusion could view or download their health information or transmit it to another provider. Patient Fusion also let patients send and receive secure messages from their providers. Fast forward several years and the company decided to expand Patient Fusion to include a public directory where current and prospective enrollees could search for doctors geographically or by specialty, read patient reviews of providers, and request appointments. But Practice Fusion had to ask itself a question familiar to many online companies: How do we get the content – in this case, patient reviews? That’s the focus of the FTC’s lawsuit. According to the complaint , Practice Fusion solicited data in a misleading way that led some patients to believe they were sending follow-up messages directly to their doctors about their diagnosis, medical treatment, prescriptions, etc. – and not contributing content to a public website. Practice Fusion, however, populated its new site with the information those people provided, some of which was highly sensitive. Here’s what happened. After appointments with their doctors, patients received emails titled “How was your visit?” The message continued, “To help improve your service in the future, please let us know how your visit went” and included a link with rating stars. The message ended this way: Thank you, Dr. [Name] In a footer, the message said “This email was sent to you by Patient Fusion®, a tool Doctor [Name] uses to deliver the highest quality of care to patients.” Below that in smaller print it said “Sent on behalf of Doctor [Name]’s office by: Practice Fusion.” If patients clicked the link, they were taken to a page that asked for feedback about things like how long they had to wait for their appointment, the doctor’s bedside manner, and whether their medical concern was addressed. There also was a text box where patients were invited to “leave a review for your provider.” Below that was a pre-checked box with the phrase “Keep this review anonymous.” What did some people put in that box? Highly sensitive information directly addressed to their doctors, not evaluations meant to be shared publicly. Here are just a few examples: “Dr [name], My Xanax prescription that I received on Monday was for 1 tablet a day but usually it’s for 2 tablets a day. I have not taken it to the pharmacy yet. Can I pick up a new one, or can I get a prescription called into a pharmacy? Thanks, [patient’s full name] “I called today and left a message regarding my daughter and no one has returned my call. I think she is depressed and has stated several times this week that she wishes she was dead. Could someone please call me [phone number]?” “The cefuroxime axetil does not seem to be doing anything for me. I did a little research and I think I have a yeast infection called candida. Not sure what to do about it yet. I guess I will first try to change my diet. Medication? [patient’s full name] “I would like to make an appointment for my back pain and possible shingles. Can you please call me @ [phone number]? Thank you! [patient's full name]” “I HAVE NO INFECTION [healthcare provider name].  EVERYTHING WENT","titre":"Practice Fusion case suggests 6 health privacy pointers","id":3194910,"pubDate":"Sat, 03 Oct 2026 08:09:37 +0200"},{"description":"Public consultation on the draft BEREC Work Programme 2027 yannick.stephan Thu, 01/10/2026 - 09:00 Breadcrumbs Public Consultations & Calls for Inputs Deadline to submit contributions:  31 October 2026 In January this year, BEREC adopted the Outline BEREC Work Programme 2027 , which reflected BEREC's objectives for the upcoming year. BEREC launched a first Call for inputs on the Work Programme 2027 from 27 February to 15 April. During the call for proposals, several additional actions were identified. Considering the early input received, during the 68th BEREC ordinary meetings (1-2 October 2026), the Board of Regulators adopted the draft BEREC Work Programme 2027 [BoR (26) 142] for public consultation. Background BEREC prepares its annual work programme in accordance with Article 21 of the BEREC Regulation and the BEREC Strategy 2026-2030 to guide how it organises and prioritises its work towards clearly defined objectives. The 2027 draft work programme was developed inclusively and transparently, with contributions from various stakeholders. This approach helps ensure that BEREC remains responsive to market needs, regulatory developments, and end-user expectations. Aim The BEREC Work Programme 2027 aims to align with the BEREC Strategy 2026-2030 and its five strategic pillars: Promoting full connectivity and the Digital Single Market; Supporting competition-driven and open digital ecosystems; Empowering end-users; Contributing to sustainable, secure, and resilient digital infrastructures; Strengthening BEREC’s capabilities and continuous improvement. The work programme will also take into consideration priorities set for BEREC’s institutional and international cooperation. Furthermore, the 2027 work programme has been developed against the backdrop of the ongoing review of the regulatory framework and the European Commission’s proposal for a Digital Networks Act, published in January 2026. This piece of legislation is meant to be the cornerstone shaping the future of the sector in the EU. As an advisory body to EU institutions for electronic communications, BEREC is committed to providing expert, independent advice to co-legislators and the European Commission throughout the legislative procedure. BEREC also aims to provide support and advice on other relevant policy developments. In addition to the mandatory work foreseen in the EU regulatory framework, the BEREC work programme follows a multiannual approach, meaning some projects started in 2026 will be completed in 2027 and are therefore included as carryovers. Additionally, recurring items are considered by default. Submit your contributions The incoming BEREC Chair 2027, Alejandra de Iturriaga Gandini (CNMC, Spain), encourages all interested stakeholders to provide their views and contributions to the draft BEREC Work Programme 2027 by submitting them to BEREC-WP2027@DISTRO.BEREC.EUROPA.EU by 31 October 2026 . After submitting the contribution, you will receive an automatic acknowledgement email. If you do not receive this acknowledgement, please contact the BEREC Office. Contributions should be sent preferably in English, and, to facilitate processing of the responses, the comments provided should clearly refer to specific paragraphs of the document. In accordance with the BEREC policy on public consultations , BEREC will publish all contributions and a summary thereof, respecting confidentiality requests. In that regard, please clearly mark the parts you define as confidential. We strongly encourage all stakeholders to submit their contributions as early as possible. Contributions received after the above-mentioned deadline will not be taken into account. Privacy statement type Privacy Statement for Public Consultation Category Name Ongoing Public Consultations and Calls for Inputs Notify subscribers","pubDate":"Fri, 02 Oct 2026 08:34:17 +0200","id":3193166,"titre":"Public consultation on the draft BEREC Work Programme 2027","url":"https://www.berec.europa.eu/en/public-consultations-calls-for-inputs/public-consultation-on-the-draft-berec-work-programme-2027","source":"BEREC Office"},{"description":"Today, 22 states joined the Federal Trade Commission in filing suit against Amazon, alleging that the company engaged in deceptive and unfair practices that secretly inflated prices in its online search advertising auctions. The complaint   alleges that, for over seven years, Amazon has covertly and substantially increased the prices that more than one million brands and sellers were required to pay to advertise on its platform. As a result, the complaint alleges that Amazon’s scheme has likely extracted tens of billions of dollars from its unwitting advertising customers. “When one of the world’s largest online retailers engages in unfair and deceptive conduct, the impact can be staggering,” said Chairman Andrew N. Ferguson. “Amazon has millions of advertising customers who were misled into paying significantly higher prices. These higher costs were largely passed on to American consumers. The FTC under President Trump won’t allow this deception to continue.” The FTC, along with the attorneys general of Alaska, Arizona, California, Colorado, Florida, Idaho, Illinois, Indiana, Iowa, Kentucky, Louisiana, Maryland, Nebraska, New Jersey, New York, North Carolina, Oklahoma, Pennsylvania, Rhode Island, South Carolina, Vermont and Washington, allege Amazon has imposed undisclosed surcharges on its advertising customers, which include over 500,000 small- and medium-sized businesses that participated in auctions for advertising placements on Amazon.com and its mobile app. In these auctions, prospective advertisers bid to place Sponsored Product ads, Sponsored Brands ads and Display Ads alongside the results that appear when a consumer searches for a product using a keyword on Amazon’s store. Placements are auctioned to the highest-ranked bidder for each keyword. As described in the complaint, Amazon has represented to prospective advertisers for years that Amazon runs “second price” auctions where the winner of the auction would only pay “one cent more than the next highest bidder” for each successful bid for an advertising keyword. However, in practice, the complaint alleges that Amazon has charged its Sponsored Products advertisers their own winning bid close to 80% of the time and has effectively converted its nominally “second price” auction into a first price auction. According to the complaint, Amazon’s “second price” auctions have been described by Amazon, and understood by advertisers, to be run as generalized second-price, or GSP auctions, which have been the accepted industry standard for digital advertising placements. The complaint states that Amazon has made these or similar representations on its website, in training videos and in other public-facing materials, as well as in presentations made to advertisers by its hundreds of sales personnel.  The type of auction matters to advertisers because it impacts how they bid. In a sealed first-price auction—the type of auction where winners pay the amount of their winning bid—bidders run the risk that they might overbid. So, in repetitive auctions for the same goods, they will often reduce their bid to determine what the minimum amount needed to win future auctions might be. This is called bid shading. In second-price auctions, bidders are more likely to bid higher, closer to their true value for the product, because they will only be liable to pay the least bid amount needed to win under the auction’s rules.  As alleged in the complaint, Amazon told advertisers it ran a GSP, but for years its auction pricing had “a surcharge hidden in it,” in the words of one internal Amazon document. The complaint alleges that, beginning in 2019, Amazon changed its auction rules without notice by adding an undisclosed surcharge that Amazon referred to internally as a “soft reserve price.” This resulted in advertisers paying substantially more than the price determined by the GSP auction.  According to the complaint, Amazon","id":3127461,"pubDate":"Tue, 01 Sep 2026 08:10:10 +0200","titre":"FTC, States Sue Amazon Over Secret Ad Surcharge Scheme","url":"https://www.ftc.gov/news-events/news/press-releases/2026/08/ftc-states-sue-amazon-over-secret-ad-surcharge-scheme","source":"Federal Trade Commission - Protecting America's Consumers"},{"source":"Blog d'Arthur Perret","url":"https://www.arthurperret.fr/blog/2023-11-01-document-theory-and-document-design.html","description":"<p>This paper reports on an experiment which connects document design with document theory. Document design is about what documents should do. We use the example of document graphs and of Cosma, a visualization program created during the HyperOtlet research programme, to show how theory can inform design decisions and help conceptualize results. This paper is currently under peer review.</p> <hr/> <section id=\"document-design-or-information-design\" class=\"level1\"> <h1>Document design or information design?</h1> <p><span class=\"citation\" data-cites=\"findeli2015\">Findeli (2015)</span> defines design as diagnostic and prescriptive, an example of “projective” epistemology: designers view the world as a project to realize, rather than an object to know. This definition of design implies that document design is less about what documents <em>are</em> and more about what they <em>should do</em>. This aligns with the evolution of document theory from an ontic view of documents to a functional one, which was pioneered by the European documentation movement in the first half of the twentieth century and reintroduced as “neo-documentation” in the literature during the 1990s.</p> <p>Currently in the literature, document design is mostly considered to be a part of information design.<a href=\"#fn1\" class=\"footnote-ref\" id=\"fnref1\" role=\"doc-noteref\"><sup>1</sup></a> The purpose of information design is to create effective communications <span class=\"citation\" data-cites=\"renkema2006 pettersson2002\">(Renkema 2006 ; see also Pettersson 2002)</span>. Document design is usually taught within communications programs ; in the US, in either English or fine arts departments <span class=\"citation\" data-cites=\"schriver1997\">(Schriver 1997, p. 92‑93)</span> ; in France, in Information and Communication Science departments.</p> <p>Research on information design has very few connections with documentation. It has been criticized for its lack of theory: <span class=\"citation\" data-cites=\"carliner2006\">Carliner (2006, p. 10–14)</span> warned about the field’s tendency to generalize findings despite shaky conceptual foundations and a limited understanding of topics such as the World Wide Web.<a href=\"#fn2\" class=\"footnote-ref\" id=\"fnref2\" role=\"doc-noteref\"><sup>2</sup></a> We believe document theory can help address some of these challenges and bring perspective to information design.</p> <p><span class=\"citation\" data-cites=\"zacklad2019a\">Zacklad (2019)</span> gives us an example of this. He draws from document theory to define information design as the interplay between textualization (creating content information), documentarization (shaping the medium) and auctorialization (creating author identities). Zacklad puts documentarization at the heart of information design (see fig. <a href=\"#fig:zacklad2019\">1</a>). Documentarization can be internal (the organization of fragments into documents) or external (the relational organization of documents, e.g. classification); it can involve different roles or positions (author, editor, printer/programmer, distributor, reader); it implies significant differences between designing the systems that involve documents (“system-oriented design”) and designing the documents themselves (“author design”).</p> <figure id=\"fig:zacklad2019\"> <img src=\"https://www.arthurperret.fr/img/2023-docam-zacklad2019.png\" class=\"fullwidth\" alt=\"Information design according to","titre":"[Article] Document theory and document design","id":3047509,"pubDate":"Thu, 23 Jul 2026 10:17:34 +0200"},{"description":"Brussels, 27 April – Today marks the 10th anniversary of the GDPR’s adoption, the first comprehensive data protection framework spanning an entire continent, establishing clear rights for individuals and obligations for organisations across Europe. The moment that led to the creation of the EDPB The GDPR led to the establishment of the European Data Protection Board (EDPB) on 25 May 2018, replacing the Article 29 Working Party that was previously in charge of dealing with issues relating to the protection of personal data. The GDPR gave the Data Protection Authorities (DPAs) stronger enforcement powers and expanded the scope of their work from focusing mainly on national compliance complaints to routinely dealing with cross-border cases. In the past 10 years, the 31 European DPAs comprising the EDPB have worked together to ensure the consistent enforcement of the GDPR and a harmonised data protection approach across Europe.   A key role in an evolving digital landscape Today, the GDPR is part of a broader and evolving European digital framework, alongside other digital laws such as the Digital Services Act, the Digital Markets Act, and the AI Act . In a world shaped by artificial intelligence, platform economies, and increasing data-driven innovation, the GDPR ensures that technological progress goes hand in hand with the protection of individuals’ fundamental rights . An inspiration for the rest of the world The impact of the GDPR has extended far beyond Europe’s borders, inspiring similar frameworks across the globe and contributing to a growing international recognition of privacy as a fundamental right .   How the GDPR has shaped the data protection landscape: insights from Data Protection Authorities Have you ever wondered what the data protection landscape looked like before the GDPR and how DPAs prepared for its entry into force? How has life for Europeans changed since its adoption? Watch the video for insights and testimonies from Data Protection Authorities which contributed to the shaping of the data protection landscape in Europe.   Sorry, your browser doesn't support embedded","titre":"Marking 10 years of the GDPR: the evolution of the European data protection landscape","id":2850552,"pubDate":"Mon, 27 Apr 2026 14:14:32 +0200","source":"EDPB News","url":"https://www.edpb.europa.eu/news/news/2026/marking-10-years-gdpr-evolution-european-data-protection-landscape_en"},{"id":2818173,"pubDate":"Fri, 10 Apr 2026 08:08:44 +0200","titre":"StubHub Refunding $10 Million in Fees to Consumers After Deceptive Ticket Pricing","description":"StubHub, the nation’s largest ticket exchange and resale ticket provider, will pay $10 million to settle Federal Trade Commission charges that the company violated the FTC Act and the agency’s Rule on Unfair or Deceptive Fees by deceptively advertising ticket prices on its website without clearly and conspicuously disclosing up-front how much consumers actually would pay, including all mandatory fees. “The Commission’s Fees Rule makes it very clear that the total price of live-event tickets must be disclosed up-front to enable consumers to make fully informed purchasing decisions,” said Christopher Mufarrige, Director of the FTC’s Bureau of Consumer Protection. “Price transparency is essential to a free and competitive marketplace. Today’s settlement underscores the Commission’s commitment to ensuring that consumers pay the price they are promised.” The FTC’s action against StubHub Holdings, Inc., follows a  warning letter the agency sent the online ticket platform in May 2025 stating that multiple prices displayed on its website appeared to be in violation of the Fees Rule. Under the Rule, which took effect on May 12, 2025 , it is an unfair and deceptive practice for any business to offer, display, or advertise the price of a live-event ticket without clearly, conspicuously, and most prominently disclosing the total price, which the Rule defines as “the maximum total of all fees or charges a consumer must pay for any good(s) or service(s) and any mandatory ancillary good or service.” Misrepresenting prices also violates the FTC Act. Today’s action also follows the Administration’s recent Executive Order on Ticketing , which includes a directive for the FTC to “take appropriate action . . . to ensure price transparency at all stages of the ticket-purchase process, including the secondary ticketing market.” According to the Commission’s complaint , in mid-May 2025—after the Rule went into effect—StubHub advertised its ticket prices without disclosing the full price consumers would actually pay by failing to include mandatory fees and to disclose the total price everywhere it displayed prices. Specifically, the FTC alleges StubHub failed to provide the total price for tickets—including high-demand National Football League tickets in the lead-up to when the NFL schedule was announced on May 14, 2025—in the first three pricing displays on its website. On the initial two pricing displays, in numerous instances, the advertised price did not include all mandatory fees, and StubHub did not disclose the total price. On the third pricing display, StubHub listed multiple fees and charges but did not disclose the total price. The proposed order settling StubHub’s alleged violations of the FTC Act and the Fees Rule requires the company to pay $10 million, which the company will use to provide monetary relief to eligible consumers through a settlement and consumer redress distribution program. The order also prohibits StubHub from misrepresenting the total price of any good or service; any fee or charge, including its nature, purpose, amount, or refundability, as well as why the fee or charge is being imposed; the final payment amount for any transaction; and any other material fact including those related to refunds or cancellations. The proposed order also prohibits StubHub from: Offering, displaying, or advertising any price of a good or service without clearly and conspicuously disclosing the total price; Failing to disclose the total price more prominently than any other pricing information; Failing to clearly and conspicuously disclose the amount of any fees or charges that have been excluded from the total price and what they are for, as well as the final payment amount—before the consumer agrees to pay for a product or service; and Violating the Commission’s Fees Rule. Within 90 days of the date of the order StubHub must provide redress to two groups of eligible","url":"https://www.ftc.gov/news-events/news/press-releases/2026/04/stubhub-refunding-10-million-fees-consumers-after-deceptive-ticket-pricing","source":"Federal Trade Commission - Protecting America's Consumers"},{"url":"https://www.edpb.europa.eu/news/news/2025/european-patent-organisation-and-extension-adequacy-decisions-uk-edpb-adopts_en","source":"EDPB News","pubDate":"Tue, 06 May 2025 15:51:59 +0200","id":2099053,"titre":"European Patent Organisation and extension of adequacy decisions for the UK: EDPB adopts opinions","description":"Brussels, 06 May - During its latest plenary, the European Data Protection Board (EDPB) adopted an opinion on the European Commission’s draft adequacy decision under the GDPR concerning the European Patent Organisation (EPO) . In addition, the Board adopted an opinion on the European Commission’s proposal to extend the validity of the UK adequacy decisions under the GDPR and the Law Enforcement Directive (LED) . Finally, the EDPB agreed to grant the status of observer to the Personal Data Protection Agency of Bosnia and Herzegovina.   Adequate protection of personal data by the EPO At the European Commission’s request, the Board adopted an opinion on the Commission’s draft adequacy decision regarding the European Patent Organisation (EPO). Once formally adopted by the Commission, this will be the first adequacy decision concerning an international organisation and not a country or a region. An adequacy decision is a key-mechanism in EU data protection legislation which allows the European Commission to determine whether a third country or an international organisation offers an adequate level of data protection. The effect of such a decision is that personal data can flow freely from Europe to that third country or international organisation. EDPB Chair, Anu Talus, said: “The EDPB welcomes the Commission’s initiative to work on the first adequacy decision concerning an international organisation. This decision shows how the legal framework of such organisations can be recognised as ensuring an adequate level of protection on the basis of Art.45 GDPR. The EDPB underlines the importance of ongoing dialogue between the Commission and international organisations, with a view to developing this category of adequacy decisions in addition to those relating to third countries.” In its opinion, the Board positively notes that the EPO data protection framework is largely aligned with the European Union data protection framework, including on data protection rights and principles. This shows that the GDPR and, in particular, its transfer provisions, can facilitate safe data flows from Europe to international organisations, while taking into account their status.   Six-month extension of the UK adequacy decisions The EDPB opinion, requested by the European Commission, addresses the proposed extension of the two UK adequacy decisions under the GDPR and the LED, which are set to expire on 27 June 2025. The opinion only concerns the proposed 6-month extension of these adequacy decisions and does not address the level of protection for personal data afforded in the UK, which will be examined by the EDPB following the Commission’s assessment, and if the renewal of the UK adequacy decisions is proposed. Since the UK‘s data protection reform is still pending in the UK parliament, the EDPB recognises the need for a technical and time-limited extension of the adequacy decisions until 27 December 2025.This will give the European Commission sufficient time to evaluate the updated UK legal framework once it has been adopted.   The EDPB stresses that this extension is exceptional and is due to the ongoing legislative developments in the UK. It should not, in principle, be further prolonged. The Board recalls the validity of its opinions 14/2021 and 15/2021 on the two UK adequacy decisions, adopted in April 2021, and invites the European Commission to take them into account in its future assessments.  The Board also recalls the Commission’s obligation to monitor all relevant developments in the UK during the extension period.   New observer to the EDPB’s activities Finally, EDPB members agreed to grant observer status to the EDPB’s activities to the Bosnia and Herzegovina Data Protection Authority, in line with Art. 8 EDPB Rules of Procedure ."},{"url":"https://www.edpb.europa.eu/news/news/2024/edpb-opinion-ai-models-gdpr-principles-support-responsible-ai_en","source":"EDPB News","id":1792119,"pubDate":"Wed, 18 Dec 2024 15:47:16 +0100","titre":"EDPB opinion on AI models: GDPR principles support responsible AI","description":"Brussels, 18 December - The European Data Protection Board (EDPB) has adopted an opinion* on the use of personal data for the development and deployment of AI models . This opinion looks at 1) when and how AI models can be considered anonymous, 2) whether and how legitimate interest can be used as a legal basis for developing or using AI models, and 3) what happens if an AI model is developed using personal data that was processed unlawfully. It also considers the use of first and third party data. The opinion was requested by the Irish Data Protection Authority (DPA) with a view to seeking Europe-wide regulatory harmonisation. To gather input for this opinion, which deals with fast-moving technologies that have an important impact on society, the EDPB organised a stakeholders’ event and had an exchange with the EU AI Office. EDPB Chair Talus said: “AI technologies may bring many opportunities and benefits to different industries and areas of life. We need to ensure these innovations are done ethically, safely, and in a way that benefits everyone. The EDPB wants to support responsible AI innovation by ensuring personal data are protected and in full respect of the General Data Protection Regulation (GDPR).” Regarding anonymity , the opinion says that whether an AI model is anonymous should be assessed  on a case by case basis by the DPAs. For a model to be anonymous, it should be very unlikely (1) to directly or indirectly identify individuals whose data was used to create the model, and (2) to extract such personal data from the model through queries. The opinion provides a non-prescriptive and non-exhaustive list of methods to demonstrate anonymity. With respect to legitimate interest , the opinion provides general considerations that DPAs should take into account when they assess if legitimate interest is an appropriate legal basis for processing personal data for the development and the deployment of AI models. A three-step test helps assess the use of legitimate interest as a legal basis. The EDPB gives the examples of a conversational agent to assist users, and the use of AI to improve cybersecurity. These services can be beneficial for individuals and can rely on legitimate interest as a legal basis, but only if the processing is shown to be strictly necessary and the balancing of rights is respected. The opinion also includes a number of criteria to help DPAs assess if individuals may reasonably expect certain uses of their personal data. These criteria include: whether or not the personal data was publicly available, the nature of the relationship between the individual and the controller, the nature of the service, the context in which the personal data was collected, the source from which the data was collected, the potential further uses of the model, and whether individuals are actually aware that their personal data is online. If the balancing test shows that the processing should not take place because of the negative impact on individuals, mitigating measures may limit this negative impact. The opinion includes a non-exhaustive list of examples of such mitigating measures, which can be technical in nature, or make it easier for individuals to exercise their rights or increase transparency. Finally, when an AI model was developed with unlawfully processed personal data, this could have an impact on the lawfulness of its deployment, unless the model has been duly anonymised. Considering the scope of the request from the Irish DPA, the vast diversity of AI models and their rapid evolution, the opinion aims to give guidance on various elements that can be used for conducting a case by case analysis. In addition, the EDPB is currently developing guidelines covering more specific questions, such as web scraping. Note to editors: *An Article 64(2) opinion addresses a matter of general application or produces effects in more than one Member"}]