European Union: Data Protection

Few questions in data protection law carry as much practical weight as this one: when does data stop being personal data? The answer determines whether the GDPR applies at all and with it, whether individuals hold rights of access; whether data can be shared with third parties or transferred outside the EU without GDPR safeguards; and what is permissible in AI development. In short, the boundary between personal data and non-personal data is the watershed of data protection law.

Il Garante Privacy ha stabilito con provvedimento del 4 marzo 2026 che le attività di digital forensics nelle indagini interne aziendali costituiscono trattamento di dati personali soggetto alla normativa privacy.

Italy's Data Protection Authority has issued a warning regarding an AI-powered plug-in system designed to analyze work-related stress through sentiment analysis of employee messages. The ruling addresses whether employers can access information about employees' emotional well-being and psychological stress, even when the stated purpose is preventive healthcare. This decision establishes important boundaries for workplace monitoring technologies that collect sensitive psychological data about workers.

L’idée selon laquelle la protection des données personnelles serait une simple formalité juridique dont les prestataires informatiques pourraient faire fi dans le cadre de leurs travaux doit définitivement être abandonnée.

Bienvenido al último número de nuestro update de derecho digital y TMT, donde encontrarás algunas de las principales novedades más destacadas del sector a nivel internacional, europeo y español.

La Cour de justice de l’Union européenne a rendu, le 4 septembre 2025, un arrêt de principe dans l’affaire EDPS c. SRB (C-413/23 P) dont la portée dépasse largement le contentieux bancaire à l’origine du litige. Cinq enseignements structurants s’en dégagent.

The European Union's One Europe, One Market Roadmap sets out a comprehensive legislative and policy agenda for 2026-2027, targeting regulatory simplification...

Foreign direct investment screening rules in Belgium and the EU create uncertainty for investors, particularly in technology deals. This analysis examines when asset transfers involving intellectual property...

The European Union has reached a provisional political agreement on amendments to the AI Act, introducing targeted changes aimed at reducing administrative burden while maintaining the regulatory framework's core architecture. The agreement extends compliance timelines for high-risk AI systems, strengthens governance through enhanced EU AI Office powers, and introduces new prohibited practices related to AI-generated content.