The French Constitutional Council just found that the social media ban for under 15s connecting from France does not meet the constitutional requirements in terms of fundamental right preservation. www.conseil-constitutionnel.fr/decision/202...
Décision n° 2026-911 DC du 14 août 2026
Loi visant à protéger les mineurs des risques auxquels les expose l’utilisation des réseaux sociaux
conseil-constitutionnel.fr
Were SB-923 and SB-435 released from its suspense file by the CA Assembly Appropriations Committee?
CalPrivacy announced a decision requiring an additional data broker to pay a $52,400 fine. The decision also requires Cybba to post metrics about privacy rights on its website, and access the Agency’s Delete Request and Opt-Out Platform (DROP).
The Federal Commissioner for Data Protection and Freedom of Information issued a report on cookie banners. The report recommends using the Digital Omnibus to anchor binding, machine-readable data protection preferences and consent management services. www.bfdi.bund.de/SharedDocs/P...
Even if we do not always agree with the EDPB’s guidelines or opinions, their effort and the help they provide us should be acknowledged. This is coming from the perspective of a Colombian guy.
What does "residual and incidental processing of sensitive personal data" under the Digital Omnibus mean? Any thoughts?
Brazil’s DPA has ordered Discord to suspend its live streaming functionality in Brazil within three business days, and the ban will remain in place until the company demonstrates that it has adopted measures to protect children and adolescents. See lnkd.in/etNirbZZ.
On August 11, 2026, the Colorado Attorney General’s Office filed the Automated Decision-Making Technology & Conversational Artificial Intelligence Service rules (the “ADMT and Chatbot Safety Rules”) with the Secretary of State. coag.gov/ai/
The CalPrivacy has issued a decision requiring LocateSmarter to pay $116,490 and change its practices after it failed to register as a data broker and unlawfully required Californians to provide Social Security numbers to exercise their rights. privacy.ca.gov/wp-content/u...
The French DPA has issued guidance on identifying and managing conflicts of interest tied to the DPO role. www.cnil.fr/fr/dpo-ident...
Délégué à la protection des données : identifier et gérer les conflits d’intérêts liés à la fonction de DPO
Vérifier la compatibilité des missions tierces confiées au DPO Le DPO peut exercer, en plus de celles prévues à l’article 39 du RGPD, d’autres fonctions au sein de l’organisme qui le désigne (DPO à te...
cnil.fr
The Cyberspace Administration of China welcomes comments on the "Regulations on the Protection of Personal Information of Large Personal Information Processors [also known as Data Controllers"].
Just for fun I keep a little list of words that I come across that I find interesting and that I haven't seen before that moment. What's your favorite weird word? Maybe you got something for me to add! aramzs.xyz/lists/words/
Words
Microblog and feed from Aram Zucker-Scharff.
aramzs.xyz
The Polish DPA issued draft guidelines to help with GDPR-compliant AI processing. A separate guidance note covers GDPR and AI Act obligations for all covered entities. The Polish DPA’s tool on GDPR and the AI Act followed the Dutch DPA for generative AI. www.linkedin.com/posts/luisal...
Cappuccino + market square 😍
The Impact Assessment for Human Rights in the Use of Algorithms (IAMA) received an update. This tool helps organizations assess how algorithms might affect human rights. The updated version aligns with the AI Act. What makes conducting IAMA important for automated decisions?
Luis Alberto Montezuma 路易斯·阿尔贝托·蒙特祖玛@montezumachavez.bsky.social · last wk.Does the algorithm lead to an unjustified distinction on the basis of nationality, race and/or ethnic origin? Here's the decision from the District Court of The Hague: uitspraken.rechtspraak.nl/details?id=E...
Does the algorithm lead to an unjustified distinction on the basis of nationality, race and/or ethnic origin? Here's the decision from the District Court of The Hague: uitspraken.rechtspraak.nl/details?id=E...
😮 A judge just mandated Meta to pay $567 million, and change up the way its platforms work for underage users in New Mexico. www.kob.com/wp-content/u...
The discussion around the definition and scope of personal data, as well as the use of biometric data for fraud purposes, AI, deepfakes, and the use of facial recognition technology (FRT), is taking place in the EU, but also in Latin America, Africa, and Asia Pacific.
Good Morning Earth Globe Rotation
ALT: Good Morning Earth Globe Rotation
static.klipy.com
Today, the Polish DPA issued a set of draft guidelines to help ensure AI data processing complies with the GDPR and AI Act. See lnkd.in/eFkz7wB4. The resources are open for public comment through 30 Sept.
Maybe it's because it's summer and you already have plans. The discussion around the use of facial recognition technology (FRT), is taking place in the EU, but also in Latin America. The Brazilian DPA has ordered a municipality to stop using FRT for collecting children's data.
Day one of the August 6-7, 2026, meeting of the CPPA Board has begun.
As we wait for any developments in Bolivia, Namibia, Sierre Leone, Mozambique, and Liberia, Open Development Cambodia Organization has published a new 2026 version of Cambodia’s Draft Law on Personal Data Protection. www.linkedin.com/posts/luisal...
The discussion around the definition of personal data, as well as the use of biometric data, is taking place in the EU, but also in Latin America, Africa, and Asia. In its latest decision, the Colombian DPA confirmed the ban it imposed on WorldCoin’s processing of iris data.
CalPrivacy's Audits Division's first request for technical input, focused on emerging technology, inference, and identifiability. privacy.ca.gov/2026/08/calp...
he decision of the Upper Tribunal is to dismiss the appeal filed by TikTok. See www.bailii.org/uk/cases/UKU...
We keep privacy in mind every day.
In its last decision, the Administrative Court of Berlin held that the legitimate interests to be disclosed under Art. 13 (1) d) GDPR go beyond a transparency obligation. If they are omitted or not adequately disclosed, the controller cannot invoke Art. 6 (1)(f) GDPR. @carlopiltz.bsky.social
