“We didn’t want the data” – Court decision on sensitive data in AI chatbots
Anyone deploying an AI chatbot must expect users to enter health data, religious beliefs or details about their sex life. A judgement
Month: October 2026
ECJ: Free account can count as a ‘sale’ if linked to paid offers, allowing newsletter advertising without consent
In its judgment of 13 November 2025 (case C-654/23) the European Court of Justice ruled that, under certain conditions, businesses may send
Putting deletion policies into practice: Why a €300,000 fine does not need to be an isolated case
Having a deletion policy is one thing; its effective implementation in day-to-day business operations is quite another. A recent case from France
When the Freezer Heats Up
Two cyberattacks within a single week show how vulnerable everyday infrastructure has become. In both cases, the attackers may have gained access
NIS 2: The German BSI Is Now Taking Enforcement Action
The German Federal Office for Information Security (BSI) has announced an enforcement initiative to implement the German IT Security Act (BSIG), which