International Association of Privacy ProfessionalsOpinion

Thought for the week: Web scraping for generative AI is subject to the GDPR

Organizations using scraped data for AI training should prepare for heightened expectations around data minimization, ...
JD Supra

Part 2: PIPL and GDPR Compliance Obligations on Cross-Border Transfers of Personal Information

As explained in our previous blog post, in addition to the requirements for adopting a cross-border transfer mechanism, China’s Personal Information Protection Law (PIPL) and the European Union’s ...
Dark Reading

My Cybersecurity Predictions for 2018, Part 2: GDPR Hype Is Hype

Cybersecurity predictions rely on hype -- and GDPR is full of it. Despite occasionally finding a decent one, I generally don't like the batches of annual InfoSec predictions that infiltrate the ...
TechCrunch

Meta hit with ~$275M GDPR penalty for Facebook data-scraping breach

Facebook’s parent, Meta, has been hit with another hefty penalty for breaching European data protection law. The €265 million (~$275 million) fine was announced today by the Irish Data Protection ...
JD Supra

ICO Issues Guidance on Recognized Legitimate Interest

On 23 March 2026, the UK Information Commissioner's Office (the "ICO") published its final guidance on the new "recognised legitimate interest" ...