Data Protection & Cybersecurity Archives | GamingTechLaw by Giulio Coraggio

How AI Governance, Privacy, and Innovation Intersect: A Conversation with Emerald De Leeuw-Goggin

AI governance is no longer an abstract concept—it has become a core business necessity. In the latest episode of our podcast Legal Leaders Insights, I had the privilege of speaking with Emerald De Leeuw-Goggin, Global Head of AI Governance & Privacy at Logitech, about how companies can balance innovation with compliance in one of the fastest-evolving areas of law and technology.

06

EU–U.S. Data Privacy Transfer Framework (DPF) Survives First Challenge: What the General Court Decided

The EU–U.S. Data Privacy Transfer Framework (DPF) has survived its first legal attack, as the EU General Court dismissed a French MEP’s challenge seeking annulment of the adequacy decision enabling transatlantic personal data transfers.

04

ByMarianna Riedo 0Comments

Pseudonymization of Personal Data: CJEU Decision Shapes Direct Marketing and AI Training

The CJEU’s decision in EDPS v. SRB provides crucial guidance on the pseudonymization of personal data, confirming that identifiability depends on the perspective of the controller or recipient.

04

ByDorina Simaku 0Comments

AI, Privacy and Reputational Risk: Why Transparency in Policies Is No Longer Optional

In the age of AI, companies must treat privacy not just as a compliance matter but as a reputational safeguard, since unclear policies now pose a serious reputational risk capable of damaging user trust and brand value and lead to potential regulatory challenges.

30

Will Schrems III Trigger Another Panic Moment for EU–US Data Transfers?

The upcoming "Schrems III case" on 3 September 2025 could invalidate the EU–US Data Privacy Framework (DPF), once again disrupting data transfers between the European Union and the United States and forcing businesses to fall back on alternative solutions such as the Standard Contractual Clauses and Transfer Impact Assessments creating a potential panic moment for many businesses.

15

Why the definition of “Personal Data” Could Make or Break AI Compliance

The relationship between AI, personal data, and the GDPR is under intense scrutiny — and an upcoming judgment from the Court of Justice of the European Union (CJEU) could redefine how businesses approach compliance with substantial positive or negative effects, depending on the outcome.

07

Works Agreements Are Not a Legal Basis Under GDPR According to the ECJ

The recent ECJ judgment in Case C-65/23 (MK v K GmbH) delivers a clear and far-reaching message for employers across the EU: a works agreement cannot serve as a valid legal basis under the GDPR.

05

ByRebecca Rossi 0Comments

Influencer rules change in Italy with new AGCOM guidelines

Influencer rules have officially changed in Italy —and if you’re a brand, agency, or digital talent with serious reach, you need to pay attention to the AGCOM guidelines on the matter.

29

Jul 2025