Temi validati da ricerca, analisi delle minacce, diritto e giurisprudenza.
Regulation (EU) 2024/1689. Article 5 prohibits banned AI practices: social scoring by states or companies, biometric emotion recognition in the workplace and in schools, and…
From August 2025, transparency requirements apply to general-purpose AI models (GPAI such as ChatGPT/Claude) as well as Art. 50 AI Act: AI-generated images, audio, and text must…
The NIS-2-UmsuCG implements the EU directive into German law. Around 30,000 businesses (important and especially important entities) must take strict risk measures and report…
Under the NIS-2-UmsuCG, managing directors must personally oversee IT security measures and undergo regular training. They are personally liable to the company for damages in case…
EU regulation for products with digital elements. Makers of routers, smart TVs, cameras, and software must deliver security updates throughout the support lifecycle and ban…
The Digital Operational Resilience Act (DORA) obliges banks, insurers, and FinTechs to end-to-end ICT third-party risk management and regular threat-led penetration testing.
The European Commission's adequacy decision allows data transfers to certified US companies. Civil-rights groups such as NOYB (Max Schrems) are preparing challenges (Schrems III)…
No one may be subjected to a decision based solely on automated processing that produces significant legal effects (e.g. automated credit refusal, job rejection via AI filter)…
The authority (Garante) temporarily blocked ChatGPT and forced material changes: age verification, a right to object to AI training on user data, and transparency notices.
Reform of the Federal Data Protection Act to align with CJEU case law and strengthen the independence of company data protection officers.
Regulation on harmonized rules for fair data access. Consumers have the right to view data generated by their smart devices and pass it on to independent workshops or third-party…
Planned EU directive eases the burden of proof for consumers when faulty AI systems cause damage (e.g. accidents with autonomous drones or misdiagnoses).
Meta planned to use all public posts by European users since 2007 for AI models. After intervention by the Irish DPC and NOYB, Meta had to unlock an objection form and pause…
Under § 87 (1) No. 6 BetrVG, the works council has a mandatory co-determination right when introducing AI tools that can monitor employees' behavior or performance (e.g. activity…
Data protection authorities tighten controls against manipulated consent dialogs ('Accept all' bold in green, 'Reject' hidden in light gray). Art. 25 GDPR requires privacy by…