“We didn’t want the data” – Court decision on sensitive data in AI chatbots
Anyone deploying an AI chatbot must expect users to enter health data, religious beliefs or details about their sex life. A judgement
ECJ: Free account can count as a ‘sale’ if linked to paid offers, allowing newsletter advertising without consent
In its judgment of 13 November 2025 (case C-654/23) the European Court of Justice ruled that, under certain conditions, businesses may send
Putting deletion policies into practice: Why a €300,000 fine does not need to be an isolated case
Having a deletion policy is one thing; its effective implementation in day-to-day business operations is quite another. A recent case from France
When the Freezer Heats Up
Two cyberattacks within a single week show how vulnerable everyday infrastructure has become. In both cases, the attackers may have gained access
NIS 2: The German BSI Is Now Taking Enforcement Action
The German Federal Office for Information Security (BSI) has announced an enforcement initiative to implement the German IT Security Act (BSIG), which
Norwegian Data Protection Authority issues fine against electronics retailer for misusing customer data for marketing purposes
The Norwegian Data Protection Authority Datatilsynet has imposed a fine of 1.78 million euros on an electronics retail chain operating primarily in
New: ePrivacy is the exclusive certification body of Trusted Euro Technology
Trusted Euro Technology (TET) has launched at DMEXCO, a new certification platform that, for the first time, makes digital sovereignty for Europe
Familiar voice, fake CEO: How to protect your business from deepfake fraud
Imagine your CEO calls the accounts department on a Friday afternoon. An acquisition is about to close, they say, and a deposit
AI as a Cyber Weapon: Our Masterclass at DMEXCO
Not a classic topic for a digital marketing trade show and yet highly relevant to every one of us: at dmexco, Kurt
Berlin Shows: Without NIS-2, You Are at High Risk
In August 2026, the Rhysida ransomware group infiltrated the Berlin state network via a phishing email. It used valid login credentials that