EDPB Anonymisation Guidelines and AI gdprgard.eu/blog-edpb-an...
EDPB Anonymisation Guidelines and AI | GDPRGard
The EDPB's draft anonymisation guidelines make “anonymous” depend on who holds the data, and demand re-checks as AI improves. What to do before 30 October.
gdprgard.eu
September 29, 2026 at 1:21 PM
EDPB Anonymisation Guidelines and AI gdprgard.eu/blog-edpb-an...
I had to set my work on this aside for a year on account of… things, including Russmedia. But the gap makes this AI-lenient tone all the more striking.
Also I believe EDPB (and the CJEU to be fair) are ignoring wording differences by Art 9 now and the 1995 DPA language in GC.
Also I believe EDPB (and the CJEU to be fair) are ignoring wording differences by Art 9 now and the 1995 DPA language in GC.
September 29, 2026 at 1:07 PM
I had to set my work on this aside for a year on account of… things, including Russmedia. But the gap makes this AI-lenient tone all the more striking.
Also I believe EDPB (and the CJEU to be fair) are ignoring wording differences by Art 9 now and the 1995 DPA language in GC.
Also I believe EDPB (and the CJEU to be fair) are ignoring wording differences by Art 9 now and the 1995 DPA language in GC.
Either way the drafters pretend Russmedia doesn't exist 😂
But the EDPB then also tries to extend GC and Others to AI training which l don't think I agree with. Russmedia aside, I think "exempting" intermediaries makes the most sense legally, everything else would probably require an exemption. 🤷♂️
But the EDPB then also tries to extend GC and Others to AI training which l don't think I agree with. Russmedia aside, I think "exempting" intermediaries makes the most sense legally, everything else would probably require an exemption. 🤷♂️
September 29, 2026 at 6:52 AM
Either way the drafters pretend Russmedia doesn't exist 😂
But the EDPB then also tries to extend GC and Others to AI training which l don't think I agree with. Russmedia aside, I think "exempting" intermediaries makes the most sense legally, everything else would probably require an exemption. 🤷♂️
But the EDPB then also tries to extend GC and Others to AI training which l don't think I agree with. Russmedia aside, I think "exempting" intermediaries makes the most sense legally, everything else would probably require an exemption. 🤷♂️
My favorite part so far in the EDPB scraping guidance is a list of scraped sources ending with "and personal websites
(‘blogs’)." That kind of thing used to happen because drafters were old. Now maybe it's because drafters are young.
@gateklons.eurosky.social
(‘blogs’)." That kind of thing used to happen because drafters were old. Now maybe it's because drafters are young.
@gateklons.eurosky.social
www.edpb.europa.eu
September 29, 2026 at 12:55 AM
My favorite part so far in the EDPB scraping guidance is a list of scraped sources ending with "and personal websites
(‘blogs’)." That kind of thing used to happen because drafters were old. Now maybe it's because drafters are young.
@gateklons.eurosky.social
(‘blogs’)." That kind of thing used to happen because drafters were old. Now maybe it's because drafters are young.
@gateklons.eurosky.social
2026 privacy and cyber updates: EDPB sets a 5-step GDPR fine test, ENISA flags DDoS and phishing trends, while NIST, DHS, and U.S. states push new AI and OT security rules. #Spain #GDPR #AIGovernance
Privacy & Cybersecurity #88
The article covers major 2026 developments in GDPR enforcement, AI governance, and cybersecurity guidance, including new EDPB fine rules, an ENISA threat landscape, NIST OT security updates, and new state and federal AI policy pushes in the U.S. It also highlights incidents and warnings from Spain’s AEPD, the UK NCSC, Maryland, and DHS OIG, showing growing concern over AI agents, cloud security, and operational resilience. #EDPB #ENISA #NIST #AEPD #NCSC #DHSOIG #GroupeCanal #CNIL #OpenAI #Anthropic #Meta #SCuBA
www.hendryadrian.com
September 28, 2026 at 12:15 AM
2026 privacy and cyber updates: EDPB sets a 5-step GDPR fine test, ENISA flags DDoS and phishing trends, while NIST, DHS, and U.S. states push new AI and OT security rules. #Spain #GDPR #AIGovernance
ICYMI: EDPB's Google search data letter clashes with its own guidance, lawyer says #EDPB #GoogleSearch #DataPrivacy #LegalNews #DigitalMarketing
EDPB's Google search data letter clashes with its own guidance, lawyer says
Dated May 5 and posted in September, the board's 33 comments call rivals' click data highly unique. Which fixes reached the July 16 order, and which did not?
ppc.land
September 27, 2026 at 3:27 PM
ICYMI: EDPB's Google search data letter clashes with its own guidance, lawyer says #EDPB #GoogleSearch #DataPrivacy #LegalNews #DigitalMarketing
ICYMI: EDPB's Google search data letter clashes with its own guidance, lawyer says #EDPB #GoogleSearch #DataPrivacy #LegalNews #DigitalMarketing
EDPB's Google search data letter clashes with its own guidance, lawyer says
Dated May 5 and posted in September, the board's 33 comments call rivals' click data highly unique. Which fixes reached the July 16 order, and which did not?
ppc.land
September 27, 2026 at 3:27 PM
ICYMI: EDPB's Google search data letter clashes with its own guidance, lawyer says #EDPB #GoogleSearch #DataPrivacy #LegalNews #DigitalMarketing
rules are getting rewritten for ai training right now too, the omnibus has been stuck in committee since november and even edpb and edps sent a joint opinion on it in february. encryption at least doesnt need a vote to survive
September 27, 2026 at 12:25 PM
rules are getting rewritten for ai training right now too, the omnibus has been stuck in committee since november and even edpb and edps sent a joint opinion on it in february. encryption at least doesnt need a vote to survive
EDPB's Google search data letter clashes with its own guidance, lawyer says #EDPB #GoogleSearch #DataPrivacy #LegalGuidance #DigitalMarketing
EDPB's Google search data letter clashes with its own guidance, lawyer says
Dated May 5 and posted in September, the board's 33 comments call rivals' click data highly unique. Which fixes reached the July 16 order, and which did not?
ppc.land
September 26, 2026 at 3:26 PM
EDPB's Google search data letter clashes with its own guidance, lawyer says #EDPB #GoogleSearch #DataPrivacy #LegalGuidance #DigitalMarketing
EDPB's Google search data letter clashes with its own guidance, lawyer says #EDPB #GoogleSearch #DataPrivacy #LegalGuidance #DigitalMarketing
EDPB's Google search data letter clashes with its own guidance, lawyer says
Dated May 5 and posted in September, the board's 33 comments call rivals' click data highly unique. Which fixes reached the July 16 order, and which did not?
ppc.land
September 26, 2026 at 3:26 PM
EDPB's Google search data letter clashes with its own guidance, lawyer says #EDPB #GoogleSearch #DataPrivacy #LegalGuidance #DigitalMarketing
EDPB's New GDPR Fining Methodology gdprgard.eu/blog-edpb-fi...
EDPB's New GDPR Fining Methodology | GDPRGard
The EDPB adopted a harmonised five-step test for GDPR fines on 21 Sept 2026. Here's what changed, and what it means for SMBs across the EU.
gdprgard.eu
September 25, 2026 at 8:15 PM
EDPB's New GDPR Fining Methodology gdprgard.eu/blog-edpb-fi...
Het Nederlandse kabinet ziet geen heil in een expliciet verbod op camerabrillen waarmee gebruikers stiekem mensen kunnen filmen. Bestaande regels bieden al privacybescherming en de regering wacht een rapport af van de Europese privacytoezichthouder EDPB. De Tweede Kamer wil wel een verbod.
Tweede Kamer wil camerabrillen breder verbieden, kabinet ziet geen noodzaak
ebx.sh
September 24, 2026 at 8:33 PM
Het Nederlandse kabinet ziet geen heil in een expliciet verbod op camerabrillen waarmee gebruikers stiekem mensen kunnen filmen. Bestaande regels bieden al privacybescherming en de regering wacht een rapport af van de Europese privacytoezichthouder EDPB. De Tweede Kamer wil wel een verbod.
Het Nederlandse kabinet ziet geen heil in een expliciet verbod op camerabrillen waarmee gebruikers stiekem mensen kunnen filmen. Bestaande regels bieden al privacybescherming en de regering wacht een rapport af van de Europese privacytoezichthouder EDPB. De Tweede Kamer wil wel een verbod.
Tweede Kamer wil camerabrillen breder verbieden, kabinet ziet geen noodzaak
ebx.sh
September 24, 2026 at 6:57 PM
Het Nederlandse kabinet ziet geen heil in een expliciet verbod op camerabrillen waarmee gebruikers stiekem mensen kunnen filmen. Bestaande regels bieden al privacybescherming en de regering wacht een rapport af van de Europese privacytoezichthouder EDPB. De Tweede Kamer wil wel een verbod.
Es legal?
El EDPB exige consentimiento previo para usar píxeles y ceder IDs persistentes, y se debe dar información clara en todo caso
¿A ti te han informado?
Base legal? Ceder el título de un chat sobre salud a la industria publicitaria difícilmente es «necesario para el cumplimiento del contrato»
El EDPB exige consentimiento previo para usar píxeles y ceder IDs persistentes, y se debe dar información clara en todo caso
¿A ti te han informado?
Base legal? Ceder el título de un chat sobre salud a la industria publicitaria difícilmente es «necesario para el cumplimiento del contrato»
September 24, 2026 at 10:32 AM
Es legal?
El EDPB exige consentimiento previo para usar píxeles y ceder IDs persistentes, y se debe dar información clara en todo caso
¿A ti te han informado?
Base legal? Ceder el título de un chat sobre salud a la industria publicitaria difícilmente es «necesario para el cumplimiento del contrato»
El EDPB exige consentimiento previo para usar píxeles y ceder IDs persistentes, y se debe dar información clara en todo caso
¿A ti te han informado?
Base legal? Ceder el título de un chat sobre salud a la industria publicitaria difícilmente es «necesario para el cumplimiento del contrato»
If a user chooses recommendations without profiling, very large platforms should keep that choice across sessions and stop collecting data for future recommendation profiles, the EDPB says.
Age checks must also collect only necessary and proportionate data.
The guidelines are final.
#GDPR #DSA
Age checks must also collect only necessary and proportionate data.
The guidelines are final.
#GDPR #DSA
September 24, 2026 at 9:00 AM
If a user chooses recommendations without profiling, very large platforms should keep that choice across sessions and stop collecting data for future recommendation profiles, the EDPB says.
Age checks must also collect only necessary and proportionate data.
The guidelines are final.
#GDPR #DSA
Age checks must also collect only necessary and proportionate data.
The guidelines are final.
#GDPR #DSA
🇪🇺 EDPB finalized guidance on applying the DSA and GDPR together:
🔒 Privacy-preserving age assurance
📣 Minimal complaint data
🎯 User choice for profile-based recommendations
⚖️ Balanced content moderation
Learn more: https://bit.ly/4h4DYKk
🔒 Privacy-preserving age assurance
📣 Minimal complaint data
🎯 User choice for profile-based recommendations
⚖️ Balanced content moderation
Learn more: https://bit.ly/4h4DYKk
DataGuidance
Essential Privacy and Regulatory Research at Your Fingertips. Find everything you need to stay up-to-date on evolving privacy & security regulations around the world
bit.ly
September 23, 2026 at 5:48 PM
🇪🇺 EDPB finalized guidance on applying the DSA and GDPR together:
🔒 Privacy-preserving age assurance
📣 Minimal complaint data
🎯 User choice for profile-based recommendations
⚖️ Balanced content moderation
Learn more: https://bit.ly/4h4DYKk
🔒 Privacy-preserving age assurance
📣 Minimal complaint data
🎯 User choice for profile-based recommendations
⚖️ Balanced content moderation
Learn more: https://bit.ly/4h4DYKk
The Swedish DPA has requested an opinion from the European Data Protection Board (EDPB) regarding the processing of criminal personal data under Article 10 of the GDPR.
www.imy.se/nyheter/imy-...
www.imy.se/nyheter/imy-...
Integritetsskyddsmyndigheten | IMY
Vi arbetar för att skydda alla dina personuppgifter, till exempel om hälsa och ekonomi, så att de hanteras korrekt och inte hamnar i orätta händer.
www.imy.se
September 23, 2026 at 12:03 PM
The Swedish DPA has requested an opinion from the European Data Protection Board (EDPB) regarding the processing of criminal personal data under Article 10 of the GDPR.
www.imy.se/nyheter/imy-...
www.imy.se/nyheter/imy-...
Not every GDPR breach should automatically lead to a fine, the EDPB says.
Its draft guidance proposes a five-step test: minor infringements may justify a reprimand, while non-minor breaches create a strong presumption in favour of a fine.
Consultation closes 13 November.
#GDPR #DataProtection
Its draft guidance proposes a five-step test: minor infringements may justify a reprimand, while non-minor breaches create a strong presumption in favour of a fine.
Consultation closes 13 November.
#GDPR #DataProtection
September 23, 2026 at 9:00 AM
Not every GDPR breach should automatically lead to a fine, the EDPB says.
Its draft guidance proposes a five-step test: minor infringements may justify a reprimand, while non-minor breaches create a strong presumption in favour of a fine.
Consultation closes 13 November.
#GDPR #DataProtection
Its draft guidance proposes a five-step test: minor infringements may justify a reprimand, while non-minor breaches create a strong presumption in favour of a fine.
Consultation closes 13 November.
#GDPR #DataProtection
"a culpable infringement constitutes a condition for such a fine to be imposed" : EDPB have decided that violations by negligence cannot be subject to an administrative fine.
This is not what GDPR art. 83.2.b says.
So, let’s all controllers be negligent. Apparently, they’ll only get a reprimand.
This is not what GDPR art. 83.2.b says.
So, let’s all controllers be negligent. Apparently, they’ll only get a reprimand.
September 23, 2026 at 8:40 AM
"a culpable infringement constitutes a condition for such a fine to be imposed" : EDPB have decided that violations by negligence cannot be subject to an administrative fine.
This is not what GDPR art. 83.2.b says.
So, let’s all controllers be negligent. Apparently, they’ll only get a reprimand.
This is not what GDPR art. 83.2.b says.
So, let’s all controllers be negligent. Apparently, they’ll only get a reprimand.
The EDPB guidelines on DSA/GDPR interplay matter more than they sound. Two major EU frameworks governing the same platforms, potentially pulling in different directions.
September 23, 2026 at 8:39 AM
The EDPB guidelines on DSA/GDPR interplay matter more than they sound. Two major EU frameworks governing the same platforms, potentially pulling in different directions.
#EDPB sets five-step test for GDPR fines and finalises #DSA #data rules – INSIGHT EU MONITORING ieu-monitoring.com/editorial/ed...
EDPB sets five-step test for GDPR fines and finalises DSA data rules – INSIGHT EU MONITORING
EU and global regulatory and policy monitoring, fact-checking, legal documents, policy positions, business, finance, digital transformation, security, sustainability.
ieu-monitoring.com
September 23, 2026 at 8:10 AM
#EDPB sets five-step test for GDPR fines and finalises #DSA #data rules – INSIGHT EU MONITORING ieu-monitoring.com/editorial/ed...
🇪🇺 EDPB finalized guidance on how the DSA and GDPR interact when intermediary services process personal data.
The guidelines follow public consultation and will be published after linguistic review.
Read now: https://bit.ly/4h5jPnr
The guidelines follow public consultation and will be published after linguistic review.
Read now: https://bit.ly/4h5jPnr
DataGuidance
Essential Privacy and Regulatory Research at Your Fingertips. Find everything you need to stay up-to-date on evolving privacy & security regulations around the world
bit.ly
September 22, 2026 at 6:52 PM
🇪🇺 EDPB finalized guidance on how the DSA and GDPR interact when intermediary services process personal data.
The guidelines follow public consultation and will be published after linguistic review.
Read now: https://bit.ly/4h5jPnr
The guidelines follow public consultation and will be published after linguistic review.
Read now: https://bit.ly/4h5jPnr
📋 EDPB Guidelines 04/2026 outline a five-step method for GDPR fines, covering intent, negligence, minor infringements, and fine effectiveness.
Public consultation closes Nov. 13, 2026.
Check it out: https://bit.ly/3V6XqgV
Public consultation closes Nov. 13, 2026.
Check it out: https://bit.ly/3V6XqgV
DataGuidance
Essential Privacy and Regulatory Research at Your Fingertips. Find everything you need to stay up-to-date on evolving privacy & security regulations around the world
bit.ly
September 22, 2026 at 5:48 PM
📋 EDPB Guidelines 04/2026 outline a five-step method for GDPR fines, covering intent, negligence, minor infringements, and fine effectiveness.
Public consultation closes Nov. 13, 2026.
Check it out: https://bit.ly/3V6XqgV
Public consultation closes Nov. 13, 2026.
Check it out: https://bit.ly/3V6XqgV