: Brussels, 16 April – During its latest plenary, the EDPB has adopted Guidelines on processing of personal data for scientific research purposes . In addition, the Board has created a team to speed up the finalisation of the guidelines on anonymisation. The EDPB has also adopted two opinions on the two sets of the Europrivacy certification criteria for approval as European Data Protection Seals, one of which to be used as a tool for transfers. Many areas of scientific research rely on the processing of individuals’ personal data, and this has driven significant scientific breakthroughs that benefit society. The rise of new technologies, such as artificial intelligence, also contributes to scientific progress by enabling researchers to use and analyse data in innovative ways. The main objective of the EDPB guidelines on scientific research is to provide more clarity for researchers and make GDPR compliance easier , while ensuring the protection of individuals’ fundamental rights . “Scientific research can driv[...]
: Brussels, 18 December - The European Data Protection Board (EDPB) has adopted an opinion* on the use of personal data for the development and deployment of AI models . This opinion looks at 1) when and how AI models can be considered anonymous, 2) whether and how legitimate interest can be used as a legal basis for developing or using AI models, and 3) what happens if an AI model is developed using personal data that was processed unlawfully. It also considers the use of first and third party data. The opinion was requested by the Irish Data Protection Authority (DPA) with a view to seeking Europe-wide regulatory harmonisation. To gather input for this opinion, which deals with fast-moving technologies that have an important impact on society, the EDPB organised a stakeholders’ event and had an exchange with the EU AI Office. EDPB Chair Talus said: “AI technologies may bring many opportunities and benefits to different industries and areas of life. We need to ensure these innovations are done ethically, safe[...]
: Brussels, 06 May - During its latest plenary, the European Data Protection Board (EDPB) adopted an opinion on the European Commission’s draft adequacy decision under the GDPR concerning the European Patent Organisation (EPO) . In addition, the Board adopted an opinion on the European Commission’s proposal to extend the validity of the UK adequacy decisions under the GDPR and the Law Enforcement Directive (LED) . Finally, the EDPB agreed to grant the status of observer to the Personal Data Protection Agency of Bosnia and Herzegovina. Adequate protection of personal data by the EPO At the European Commission’s request, the Board adopted an opinion on the Commission’s draft adequacy decision regarding the European Patent Organisation (EPO). Once formally adopted by the Commission, this will be the first adequacy decision concerning an international organisation and not a country or a region. An adequacy decision is a key-mechanism in EU data protection legislation which allows the European Commission to deter[...]
: Background information Date of final decision: 15 May 2025 National case Controller: SOLOCAL MARKETING SERVICES Legal Reference(s): Article 7 (Conditions for consent), Article 6 (Lawfulness of processing) Decision: administrative fine and an order to cease electronic commercial prospecting in the absence of valid consent, together with a penalty of 10 000 € per day overdue after a period of 9 months Key words: administrative fine, consent, unsolicited communication Summary of the Decision Origin of the case As the French Supervisory Authority (SA) made commercial prospecting a priority topic for investigations in 2022, it focused on the practices of professionals in the sector, particularly those who resell data, including the many intermediaries in this ecosystem known as data brokers. The French SA carried out investigations on SOLOCAL MARKETING SERVICES which got prospect data mainly from data brokers, publishers of game contests and product testing sites (these actors are the first links in the cha[...]
: Background information Date of final decision: 15 May 2025 National case Controller: SOLOCAL MARKETING SERVICES Legal Reference(s): Article 7 (Conditions for consent), Article 6 (Lawfulness of processing) Decision: administrative fine and an order to cease electronic commercial prospecting in the absence of valid consent, together with a penalty of €10 000 per day overdue after a period of 9 months Key words: administrative fine, consent, unsolicited communication Summary of the Decision Origin of the case As the French Supervisory Authority (SA) made commercial prospecting a priority topic for investigations in 2022, it focused on the practices of professionals in the sector, particularly those who resell data, including the many intermediaries in this ecosystem known as data brokers. The French SA carried out investigations on SOLOCAL MARKETING SERVICES which got prospect data mainly from data brokers, publishers of game contests and product testing sites (these actors are the first links in the chai[...]
: Brussels, 09 October - The European Data Protection Board (EDPB) and the European Commission endorsed joint guidelines on the interplay between the Digital Markets Act (DMA) and the General Data Protection Regulation (GDPR) . These are the first joint guidelines by the Board and the European Commission. In line with its 2024-2027 Strategy and the recent Helsinki Statement’s objectives to make GDPR compliance easier and strengthen consistency, the EDPB has cooperated with the European Commission, each within their respective mandates, to facilitate the coherent application of the DMA*and GDPR and to increase legal certainty for gatekeepers, business users, beneficiaries and individuals. EDPB Chair Anu Talus said: “These joint guidelines are the result of a fruitful cooperation between the EDPB and the European Commission. This is the first time that the EDPB and the European Commission prepare guidelines jointly. This approach maximises usefulness of the guidance by simplifying compliance for businesses and[...]
: The Federal Trade Commission’s initial findings from its surveillance pricing market study revealed that details like a person’s precise location or browser history can be frequently used to target individual consumers with different prices for the same goods and services. The staff perspective is based on an examination of documents obtained by FTC staff’s 6(b) orders sent to several companies in July aiming to better understand the shadowy market that third-party intermediaries use to set individualized prices for products and services based on consumers’ characteristics and behaviors, like location, demographics, browsing patterns and shopping history. Staff found that consumer behaviors ranging from mouse movements on a webpage to the type of products that consumers leave unpurchased in an online shopping cart can be tracked and used by retailers to tailor consumer pricing. “Initial staff findings show that retailers frequently use people’s personal information to set targeted, tailored prices for goods[...]
: Green Lights & Red Flags: FTC Rules of the Road for Business rocks on in Cleveland sgressin September 21, 2020 | 12:03PM Green Lights & Red Flags: FTC Rules of the Road for Business rocks on in Cleveland By Seena Gressin Natives and fans heartily agree that “Cleveland Rocks!” That’s why the Federal Trade Commission and its Ohio partners are ready to roll with the next installment of Green Lights & Red Flags: FTC Rules of the Road for Business , set to make its online debut on October 29, 2020, from Cleveland. The free business workshop focuses on current topics in truth-in-advertising law, social media marketing, data security, business-to-business fraud, and more. Who should attend the virtual event? Ohio business owners, marketing and advertising professionals, attorneys — anyone who needs to know how established consumer protection principles apply in today’s fast-paced marketplace. The Office of the Ohio Attorney General, Better Business Bureau Serving Greater Cleveland, and the Cuyahoga County Departme[...]
: This article belongs to the debate » Thinking Machines, Thinking Lawyers14 October 2026The (Currently) Uneven Intelligence of AI in Comparative Constitutional Law From Years of Research to a Single Prompt? Artificial intelligence (AI) has the potential to accelerate and improve the quality of research. This potential has inspired numerous projects exploring how AI could help scholarship on constitutional law. For example, there is research using AI to interpret constitutions,1) apply constitutional principles,2) and predict court rulings.3) Even the question of whether AI could improve the process of constitution-making has been studied.4) AI’s potential is particularly significant for comparative constitutional research. Systematically comparing legal systems requires locating sources from different jurisdictions, which are often difficult to access and only available in local languages. The creation of comparative legal datasets has thus involved considerable personnel, time, and financial resources. AI ca[...]
: Introduction There are several ways of conceiving heritage conservation. For the purpose of this paper, we need to start from the premise that what we call “heritage” is a dynamic, evolving reality, and that a historic district such as “Old Québec” can undergo structuring transformations rooted in a process of heritage conservation. In Old Québec, the process of conservation —also referred to “patrimonialization”—has not received the attention it deserves. This paper aims to shed light on the process of functional requalification has undergone by Old Québec since the 1950s, within the broader context of its transformation into a historic district. It is based on discourse analysis (Berthold, 2013), supported by a diversifie body of documentation, including primary sources, such as archival documents, press reviews, geospatial and land-use data, and official reports. It is complemented by a body of scholarly literature devoted to Old Québec since the 1970s. First, we explain the sociohistorical process that l[...]
: Key Drivers Behind the Rising Demand for Virtual CISOs Wednesday, April 22,2026 Businesses are navigating the challenges of a digital-first environment, which is driving an increased demand for expert-driven cybersecurity solutions. The virtual chief information security officer (vCISO) has become essential for organizations seeking to enhance their cybersecurity resilience while managing costs effectively. Effective security leadership is more crucial than ever, particularly in light of the evolving threat landscape, which includes ransomware attacks and data breaches. Addressing Cybersecurity Challenges Organizations face a significant escalation in cyberattacks as hackers continually evolve their tactics. This dynamic landscape makes it challenging for businesses to maintain effective defenses. A vCISO plays a pivotal role by providing specialized guidance in threat intelligence, risk management, and incident response. By working with a vCISO, companies can proactively identify vulnerabilities and impleme[...]
: <p>This paper reports on an experiment which connects document design with document theory. Document design is about what documents should do. We use the example of document graphs and of Cosma, a visualization program created during the HyperOtlet research programme, to show how theory can inform design decisions and help conceptualize results. This paper is currently under peer review.</p> <hr/> <section id="document-design-or-information-design" class="level1"> <h1>Document design or information design?</h1> <p><span class="citation" data-cites="findeli2015">Findeli (2015)</span> defines design as diagnostic and prescriptive, an example of “projective” epistemology: designers view the world as a project to realize, rather than an object to know. This definition of design implies that document design is less about what documents <em>are</em> and more about what they <em>should do</em>. This aligns with the evolution of document theory from an ontic view of documents to a functional one, which was pioneered[...]
: Brussels, 20 January - The European Data Protection Board (EDPB) has adopted a report on the implementation of the right of access by controllers . The report summarises the outcome of a series of coordinated national actions carried out in 2024 under the Coordinated Enforcement Framework (CEF). It lists the issues that were observed for some controllers, along with a series of recommendations to help them implement the right of access. A central element is controllers’ awareness of the EDPB Guidelines 01/2022 on data subjects rights – Right of access and whether these guidelines were followed in practice. EDPB Deputy Chair Zdravko Vukíc said: “The CEF is a valuable initiative that helps strengthen the cooperation among Data Protection Authorities (DPAs): by tackling selected topics in a coordinated fashion, they achieve greater efficiency and more consistency. How controllers implement the right of access lies at the heart of data protection and it is one of the most frequently exercised data subject rights[...]
: Practice Fusion case suggests 6 health privacy pointers lfair June 8, 2016 | 9:01AM Practice Fusion case suggests 6 health privacy pointers By Lesley Fair Combine two of the most talked-about consumer protection topics – health privacy and consumer-generated online content – and what do you get? A proposed FTC settlement with Practice Fusion, the largest cloud-based electronic health records company in the country, and six compliance tips for others in the industry. One of San Francisco-based Practice Fusion’s primary products is an electronic records system for outpatient providers. In 2009, the company launched “Patient Fusion,” an online portal where patients whose providers were already using Practice Fusion could view or download their health information or transmit it to another provider. Patient Fusion also let patients send and receive secure messages from their providers. Fast forward several years and the company decided to expand Patient Fusion to include a public directory where current and prosp[...]
: FTC challenges Online Trading Academy’s money-making claims lfair February 12, 2020 | 4:35PM FTC challenges Online Trading Academy’s money-making claims By Lesley Fair Ads for health products often target Boomer Consumers, but those aren’t the only claims pitched to people looking toward retirement. An FTC action alleges a company called Online Trading Academy has taken in more than $370 million by gearing its deceptive representations to that demographic. In addition, the complaint alleges violations of the Consumer Review Fairness Act. According to the FTC, the California-based operation, related companies, and three individual defendants advertise a “patented strategy” that consumers can apply “to any asset class including stocks, options, futures and currencies” to rake in big money. They claim their “training programs” – with price tags as high as $50,000 – will teach consumers how to “invest like the pros on Wall Street.” ”No matter your experience and goals,” people were told the defendants’ “proven” [...]