Email Tracking Pixels and More: Key Updates from the Italian Garante
In April 2026, the Italian Data protection Authority (Garante per la protezione dei dati personali) adopted guidelines on the use of tracking pixels in email communications [...]
AI Features on Third-Party Platforms: What to Consider from a Data Protection Perspective
Many platforms that process personal data such as HR systems, case-management tools, CRM platforms, ticketing systems or compliance communication channels are making AI-powered features [...]
Access by Design Obligation Under the EU Data Act – The Deadline Is Now!
The industry is now well aware of the EU Data Act obligations. The Data Act (Regulation (EU) 2023/2854) became applicable in the EU member states one year ago with the goal to create a framework [...]
Where Are We With the Implementation of the EU Pay Transparency Directive?
In May 2023, the EU Pay Transparency Directive (Directive (EU) 2023/970) was adopted, with the purpose to implement a number of instruments to promote the transparency on the salaries, reducing [...]
The CNIL on AI and Data Subject Information: A Practical Guide for Organizations
The information obligation on the processing of personal data is a requirement that persists whenever a processing is performed. This does not exclude the processing of personal data for the purposes of AI models or system development. Those are the cases, [...]
The Italian Data Protection Authority Orders an Immediate Stop to Deepfake App Clothoff
The Italian Data Protection Authority (Garante) has taken urgent action against Clothoff, an AI-powered app capable of generating hyper-realistic “deep nude” images based on pictures of real people. On 3 October the regulator has issued an immediate order b [...]
Cookies are not always sweet in France
In the last three years, very high fines have been issued by the French data protection authority (Commission Nationale de l’Informatique et des Libertés or CNIL) to big companies for non-compliance in the area of cookies and tracking devices. Some [...]
The Data Act entered into force – what you need to know
On 12 September 2025, the Data Act (Regulation (EU) 2023/2854) became applicable in the EU member states. The Data Act creates a framework for fair access to and use of data across the EU and it is aimed at giving users more control over product-genera [...]