EDPS Guidelines on controllers, processors and joint controllers

On 7 November 2019 the European Data Protection Supervisor published their guidelines on the concepts of controller, processor and joint controllership. While the EDPS is the supervising authority for EUI (European Union Institutions), whose data protection activities fall under Regulation 2018/1725 and not the GDPR, the document is of importance… Continue reading

EU Strategy on Artificial Intelligence

The European Commission published on April 25 2018 a Communication outlining the strategy of the EU for Artificial Intelligence. This post looks at the document, its structure and main points. While the first two chapters deal with a general introduction an AI scenarios and Europe’s competitive posture in the international… Continue reading

e-Privacy XXI – Lucca 2017

e-Privacy is a biannual conference organised in Italy on the themes of privacy, security and surveillance. On June 23 2017 I prented at e-Privacy XXI a talk that is part of an ongoing research on cyber sovereignty and the role of nation states in Internet governance and cyber conflict. In his “Declaration… Continue reading

Connected Cars: a Very Bad Idea

This post sums up the content of a talk I presentedshuld have presented at DFA Open Day 2016 on critical aspects of permanently connected cars for safety, security, privacy and data protection. The megatrend towards cloud computing seems unstoppable, without regards for safety and security risks. This is of course the negation… Continue reading

Cyber Conference 2016 at Chatham House

Chatham House (the Royal Institute of International Affairs) hosted its annual Cyber Conference this week in London. It must be said that the main threads of the discussion were not new in the field of cyber policy in general, and cyber security in particular. The raise of digital sovereignty was… Continue reading

Cyberspace does not exist

Ever since William Gibson presented us with the word in his acclaimed science fiction novel “Neuromancer”, cyberspace evokes images of a virtual, immaterial world made up of bit and bytes, without borders and existing on a somewhat ethereal dimension above and beyond our physical everyday world (and its laws). More… Continue reading

The European Court Strikes One for Privacy

Early this year the European Court of Justice declared the 2006 EU Date Retention Directive invalid. This is a very important turning point in the ongoing tug-of-war between privacy rights and security concerns, possibly a reversal of the tide that has been mounting since the beginning of the century. The… Continue reading

The (cyber) cop mentality

Last week (14-15 October 2014) I was in Brussels taking part in the ISSE 2014 information security conference, where I had also the opportunity to present a paper on the European Court of Justice’s repealing of the Data Retention Directive. Among the keynote speakers was Troels Ørting, head of EC3,… Continue reading