“Important Data” Under Chinese Law: Definition, Identification, and Compliance Obligations
What is "important data" under Chinese Law, how can companies identify it and which compliance obligations are required? Learn more.
International Data Protection
Is Your “Anonymous” Data Actually Anonymous? Understanding the EDPB Guidelines on Anonymization
Is Your “Anonymous” Data Actually Anonymous? In this article we break down the EDPB Guidelines on Anonymization and what organisations really need to know.
Lusha Fined 2 Million Euros: Important Lessons About Data Enrichment
The Italian Data Protection Authority (Garante) has fined Lusha Systems, a US-based data broker, 2 million euros. The case provides interesting compliance lessons for any company evaluating [...]
Egypt’s Personal Data Protection Law – Before You Process, You Need a Licence
The Arab Republic of Egypt enacted a comprehensive data protection law in 2020. For five years, its practical impact remained [...]
Microsoft Copilot: Flex Routing – Your Data Is Leaving the EU. By Default.
In April 2026, Microsoft introduced a new feature for Microsoft 365 Copilot: "Flex Routing". The name sounds harmless. The data protection implications are not. What Is Flex Routing? Flex Routing allows Microsoft to reroute Copilot AI requests to data centres [...]
China's New Draft Rules for Small Personal Information Controllers
On 3 April 2026 China's Cyberspace Administration (CAC) published a draft regulation titled the Provisions on Simplified Measures for Personal Information Protection by Small Personal Information Controllers (Draft for Comment) (the "Draft"). The Draft is o [...]
The Italian DPA's Fine Against Intesa Sanpaolo: Lessons for Access Management and Data Breach Handling
On 26 March 2026, the Italian data protection authority (Garante per la protezione dei dati personali, "Garante") fined Intesa Sanpaolo S.p.A. €31,800,000. This is one of the largest fines the Garante has ever imposed, and it carries clear lessons for a [...]
China's Face Recognition Regulation: What the New Rules Mean for Businesses
On 1 June 2025, China's Cyberspace Administration (CAC) brought into force the Measures for the Security Management of Face Recognition Technology Applications (the "Measures"). This landmark regulation is the first piece of dedicated legislation in Chin [...]