EDPS Guidelines on controllers, processors and joint controllers

On 7 November 2019 the European Data Protection Supervisor published their guidelines on the concepts of controller, processor and joint controllership. While the EDPS is the supervising authority for EUI (European Union Institutions), whose data protection activities fall under Regulation 2018/1725 and not the GDPR, the document is of importance… Continue reading

EU Strategy on Artificial Intelligence

The European Commission published on April 25 2018 a Communication outlining the strategy of the EU for Artificial Intelligence. This post looks at the document, its structure and main points. While the first two chapters deal with a general introduction an AI scenarios and Europe’s competitive posture in the international… Continue reading

CEN-CENELEC Workshop on Safety & Security

The CEN-CENELEC workshop on Functional Safety & Cybersecurity last March 16 brought together industry actors and European standardization development organizations. The engagement generated was successful and will be an integral part of the future standardization roadmap for cybersecurity. I was invited to give a keynote speech on the perspective of… Continue reading

Connected Cars: a Very Bad Idea

This post sums up the content of a talk I presentedshuld have presented at DFA Open Day 2016 on critical aspects of permanently connected cars for safety, security, privacy and data protection. The megatrend towards cloud computing seems unstoppable, without regards for safety and security risks. This is of course the negation… Continue reading

Cyber Conference 2016 at Chatham House

Chatham House (the Royal Institute of International Affairs) hosted its annual Cyber Conference this week in London. It must be said that the main threads of the discussion were not new in the field of cyber policy in general, and cyber security in particular. The raise of digital sovereignty was… Continue reading

The (cyber) cop mentality

Last week (14-15 October 2014) I was in Brussels taking part in the ISSE 2014 information security conference, where I had also the opportunity to present a paper on the European Court of Justice’s repealing of the Data Retention Directive. Among the keynote speakers was Troels Ørting, head of EC3,… Continue reading