Avoiding Privacy & Data Protection Breaches when Emailing Multiple Recipients

Dr W Kuan Hon and Dr Eoin Woods highlight the ongoing data protection issues caused by not using BCC and suggest some technical solutions. Introduction Sending bulk emails with recipients listed in the TO or CC fields rather than using Blind Carbon Copy (BCC) is a commonly occurring data security incident, with over 2,000 such…

Read More… from Avoiding Privacy & Data Protection Breaches when Emailing Multiple Recipients

Safe AI: How to Interact with AI and Agents Without Breaching the Law

Olga Sevriuk rounds up some recent cases that highlight the legal risks of sharing sensitive client data with public AI chatbots and agents and the lessons that can be learned. The evolving landscape of AI safety Nowadays the AI adoption often outpaces the development of regulatory and governance frameworks. As a result, AI increasingly influences…

Read More… from Safe AI: How to Interact with AI and Agents Without Breaching the Law

European Commission investigates Snapchat’s compliance with DSA

The European Commission is investigating if Snapchat is ensuring a high level of safety, privacy and security for children online in compliance with the Digital Services Act (DSA). It suspects that Snapchat is breaching the DSA by exposing minors to grooming attempts and recruitment for criminal purposes, as well as to information about sale of…

Read More… from European Commission investigates Snapchat’s compliance with DSA

Cracking the Anonymisation Test: Early Lessons following EDPS v SRB

Sophie Stalla-Bourdillon looks at the controversial CJEU decision in EDPS v SRB and how other courts are interpreting anonymisation in its wake. The judgment of the Court of Justice of the European Union (CJEU) in EDPS v SRB has become a pivotal reference point in recent debates on the definition of personal data and the…

Read More… from Cracking the Anonymisation Test: Early Lessons following EDPS v SRB

Regulators warn tech platforms that age assurance must actually work

The ICO and Ofcom have warned the major platforms that minimum‑age policies must be properly enforced using robust, effective age assurance mechanisms. They have written to large tech companies setting out clear expectations, and signaling that enforcement action will follow where platforms do not comply. What has Ofcom said? Ofcom is calling on user‑to‑user and…

Read More… from Regulators warn tech platforms that age assurance must actually work