The CJEU’s decision in EDPS v. SRB provides crucial guidance on the pseudonymization of personal data, confirming that identifiability depends on the perspective of the controller or recipient.
In the age of AI, companies must treat privacy not just as a compliance matter but as a reputational safeguard, since unclear policies now pose a serious reputational risk capable of damaging user trust and brand value and lead to potential regulatory challenges.
The upcoming "Schrems III case" on 3 September 2025 could invalidate the EU–US Data Privacy Framework (DPF), once again disrupting data transfers between the European Union and the United States and forcing businesses to fall back on alternative solutions such as the Standard Contractual Clauses and Transfer Impact Assessments creating a potential panic moment for many businesses.
It has become increasingly clear that the intersection of artificial intelligence (AI) and governance is pivotal for organizations looking to leverage the power of AI while mitigating associated risks.
The new Italian online gambling license regime not only reshapes the market but also creates a unique opportunity for licensed operators to acquire, through an ADM-facilitated procedure, the player databases of competitors that did not apply for renewal and must cease operations by 12 November 2025.
The entry into force of the Media Freedom Act (better known as the Digital Freedom Act) and its synergy with the Digital Services Act (DSA) marks a turning point for online content regulation in the EU, introducing new rights for media service providers (MSPs) and new obligations for very large online platforms (VLOPs).
The long-awaited reform of the online gambling license regime in New Zealand is finally taking shape, and it promises to completely reshape the country’s digital gaming landscape.
The relationship between AI, personal data, and the GDPR is under intense scrutiny — and an upcoming judgment from the Court of Justice of the European Union (CJEU) could redefine how businesses approach compliance with substantial positive or negative effects, depending on the outcome.
The recent ECJ judgment in Case C-65/23 (MK v K GmbH) delivers a clear and far-reaching message for employers across the EU: a works agreement cannot serve as a valid legal basis under the GDPR.
In a significant legislative step, the Senate’s Finance Commission has unanimously endorsed a bill that aims to regulate online betting platforms in Chile, putting an end to the legal grey zone that has long surrounded this growing sector.