Symmetry in Your Cookie Banner
My son is at the beginning stages of learning geometry. He sits and recreates the missing half of shapes, carefully drawing each line to mirror the ones on the opposite side [...]
privacy notes – Welcome to Our Blog!
Data Protection. AI. Cybersecurity. Compliance. Expert insights that turn complexity into clarity.
While regulations shift and threats evolve, the gap between legal obligation and practical action grows wider every day. The FIRST PRIVACY experts break down demanding topics – with sharp analysis, actionable guidance, and a clear view of what actually matters for your organisation.
The “Doping Pillory” Before the CJEU: When May Banned Athletes Be Named Online?
In Austria, doping bans are published online – along with the athlete’s name, sport, duration of the ban and the reasons for it. Transparency or digital pillory? The CJEU has clarified the matter [...]
Publicly Available Does Not Mean Free To Use: Enriching Your Sales Database Under the GDPR
A few clicks can turn a name and company into a detailed sales contact, complete with job title, email address, and telephone number. Enrichment tools make this easy, but [...]
What China’s Latest Enforcement Cases Say About PIPL in Practice
On September 15, 2026, the Cyberspace Administration of China (CAC) published ten typical enforcement cases in the areas of cybersecurity, data security, personal information protection and artificial intelligence [...]
Email Tracking Pixels and More: Key Updates from the Italian Garante
In April 2026, the Italian Data protection Authority (Garante per la protezione dei dati personali) adopted guidelines on the use of tracking pixels in email communications [...]
From Recording to Analysing: When AI Changes the Purpose of CCTV
A camera watches a warehouse loading bay. Initially, it records footage so that incidents can be investigated. A software upgrade adds alerts when pedestrians approach moving forklifts. Another [...]
A GDPR-Compliant Privacy Policy Is Not Necessarily a Good Privacy Policy
Identity of the controller. Purposes. Legal basis. Recipients. Retention period. Data subject rights. Every data protection practicioner can recite the Article 13 checklist in their sleep [...]
AI CV Screening: Is “A Human Makes the Final Decision” Enough?
On 23 September 2026, the Spanish Data Protection Authority (AEPD) published a warning to a company that was planning to use an AI tool to screen and score job applications. The authority acted [...]
