A data breach caused by an AI agent has now been notified for the first time to a European data protection authority, with the Spanish AEPD receiving the first notification of a personal data breach allegedly carried out using an AI agent.
16
02
16
13
08
The European Commission’s proposal to codify legitimate interest as a legal basis for AI training marks the most significant reform to the GDPR since its adoption. By explicitly recognizing legitimate interest as legal basis for AI training, the Commission aims to reconcile data protection with the realities of modern artificial intelligence.
04
30
15
24
21
The European Commission's GPAI guidelines under the AI Act are here—and they’re about to change how general-purpose AI models are developed, distributed, and regulated in the EU. If you work with large language models, generative AI systems, or provide AI tools to customers in the European Union, these guidelines define the rules you’ll need to follow from 2 August 2025.