Thought Leadership
Dispute Over GDPR Reform
The EU’s planned GDPR changes for AI are drawing sharp criticism from privacy organization noyb, which is threatening legal action.
Accountability Under Pressure
Since September 11, companies have been subject to the 24-hour reporting requirement for IT security vulnerabilities and cyber incidents. While the deadline has been known for some time, there is still heated debate over how practical such a short reporting window really is.
Location Data Practices
A years-long investigation into Google’s handling of location data has resulted in a major fine. The company says it has since addressed the issues identified by regulators. However, users also need to take action themselves.
Compliance Under Pressure
NIS2, the EU AI Act, data protection rules and other digital regulations: Companies are not short on rules. What is often missing is the structure needed to manage them effectively.
Data Disclosure
Since August 18, 2026, the EU’s E-Evidence Regulation (2023/1543) has been fully applicable following a three-year transition period. The rules allow law enforcement authorities to request electronic evidence directly from service providers in other EU countries.
EU AI Act
Starting August 2, 2026, Article 50 of the EU AI Act will apply. Chatbots must identify themselves, while deepfakes require technical labeling. Violations can result in substantial fines.
Shaping The Digital Future
On June 29, the U.S. Supreme Court ruled in Trump v. Slaughter that the independence of the Federal Trade Commission (FTC) is unconstitutional.
Anne Frank Manuscripts
The European Court of Justice has ruled that VPNs are legitimate technical tools. VPN providers cannot automatically be held liable when users rely on their services to bypass geographic restrictions.
A Compliance Window, Not a Pause
Brussels grants more time, but the requirements remain unchanged. On June 16, 2026, the European Parliament adopted amendments to the EU AI Act. The changes extend the deadline for strict obligations affecting high-risk AI systems under Annex III by 16 months, moving the compliance date from August 2, 2026,
EU–US Data Privacy Framework
The US Supreme Court has ended the independent oversight of the US Federal Trade Commission (FTC). For privacy organization Noyb, this means the legal basis of the EU–US Data Privacy Framework is no longer valid.
Most Read Articles
28. September 2026
27. September 2026
13. September 2026
11. September 2026
10. September 2026