Luis Alberto Montezuma 路易斯·阿尔贝托·蒙特祖玛
@montezumachavez.bsky.social
Paraguay’s Data Protection Law, 2025, has been assented by the President of Paraguay.
November 28, 2025 at 10:19 AM
Paraguay’s Data Protection Law, 2025, has been assented by the President of Paraguay.
A Canadian court has ordered OVHcloud to hand over customer data from Europe. See theregister.com/2025/11/27/c...
Have you been able to find the decision, Mr. @privacylawyer.ca?
Have you been able to find the decision, Mr. @privacylawyer.ca?
Canadian data order risks blowing a hole in EU sovereignty
: OVH stuck between a rock and a hard place as investigators demand access
theregister.com
November 27, 2025 at 10:28 PM
A Canadian court has ordered OVHcloud to hand over customer data from Europe. See theregister.com/2025/11/27/c...
Have you been able to find the decision, Mr. @privacylawyer.ca?
Have you been able to find the decision, Mr. @privacylawyer.ca?
The Belgian DPA fined a data broker for sharing personal data without consent. This is the first instance I've seen of a fine under Article 24(1) GDPR for failing to demonstrate consent. Interestingly, the DPA did not impose a sanction for Article 7 but did for Article 24(1).
November 27, 2025 at 7:21 PM
The Belgian DPA fined a data broker for sharing personal data without consent. This is the first instance I've seen of a fine under Article 24(1) GDPR for failing to demonstrate consent. Interestingly, the DPA did not impose a sanction for Article 7 but did for Article 24(1).
Here’s the version 2.0 unofficial Vietnam’s Draft PDPL Executive Decree: www.linkedin.com/posts/luisal....
November 27, 2025 at 3:35 PM
Here’s the version 2.0 unofficial Vietnam’s Draft PDPL Executive Decree: www.linkedin.com/posts/luisal....
Paraguay's Data Protection Law has finally been enrolled and forwarded to the President of Paraguay, who has the authority to either sign it into law or veto it. The Data Protection Law aligns with the principles of the GDPR. See www.linkedin.com/posts/luisal...
November 27, 2025 at 1:34 PM
Paraguay's Data Protection Law has finally been enrolled and forwarded to the President of Paraguay, who has the authority to either sign it into law or veto it. The Data Protection Law aligns with the principles of the GDPR. See www.linkedin.com/posts/luisal...
The Gambia's Data Protection and Privacy Act, 2025, has been assented to by the President of The Gambia. See www.linkedin.com/posts/luisal...
November 27, 2025 at 12:21 PM
The Gambia's Data Protection and Privacy Act, 2025, has been assented to by the President of The Gambia. See www.linkedin.com/posts/luisal...
Noyb filed a complaint against CONDASTE (publisher of the website vanityfair) for sharing cookies data without consent. One of the companies which which the data was shared is PUBMATIC. Here’s the decision from the CNIL: lnkd.in/dCEuXn78.
November 26, 2025 at 11:05 PM
Noyb filed a complaint against CONDASTE (publisher of the website vanityfair) for sharing cookies data without consent. One of the companies which which the data was shared is PUBMATIC. Here’s the decision from the CNIL: lnkd.in/dCEuXn78.
Spain's air traffic authority was fined for not meeting GDPR Article 35 standards in their DPIA, despite consulting the Spanish DPA under Article 36. In 2024, the ICO found Snap's "My AI" chatbot violated Articles 35 and 36 of the UK GDPR, prompting Snap to revise its DPIA.
November 26, 2025 at 10:25 PM
Spain's air traffic authority was fined for not meeting GDPR Article 35 standards in their DPIA, despite consulting the Spanish DPA under Article 36. In 2024, the ICO found Snap's "My AI" chatbot violated Articles 35 and 36 of the UK GDPR, prompting Snap to revise its DPIA.
“Today, EU member states' representatives agreed on the Council position on a regulation to prevent and combat child sexual abuse. [..] On the basis of today's agreement, the Council can start negotiations with the European Parliament.”
www.consilium.europa.eu/en/press/pre...
www.consilium.europa.eu/en/press/pre...
Child sexual abuse: Council reaches position on law protecting children from online abuse - Consilium
The Council agreed its negotiating mandate on a draft law preventing and combating child sexual abuse online.
www.consilium.europa.eu
November 26, 2025 at 10:20 PM
@calprivacy.bsky.social sent a letter to Congress opposing two federal efforts to block state authority to regulate artificial intelligence.
A copy of the letter is available here: cppa.ca.gov/announcement....
A copy of the letter is available here: cppa.ca.gov/announcement....
California Privacy Protection Agency (CPPA)
cppa.ca.gov
November 25, 2025 at 8:45 PM
@calprivacy.bsky.social sent a letter to Congress opposing two federal efforts to block state authority to regulate artificial intelligence.
A copy of the letter is available here: cppa.ca.gov/announcement....
A copy of the letter is available here: cppa.ca.gov/announcement....
Despite consulting the Spanish DPA as required by Article 36 GDPR, the country's air traffic manager received a hefty fine because their Data Protection Impact Assessment for airport facial recognition failed to comply with GDPR standards. See www.linkedin.com/posts/luisal...
November 25, 2025 at 3:31 PM
Despite consulting the Spanish DPA as required by Article 36 GDPR, the country's air traffic manager received a hefty fine because their Data Protection Impact Assessment for airport facial recognition failed to comply with GDPR standards. See www.linkedin.com/posts/luisal...
The House Committee on Constitution released a report on Bill 274/2025, which updates Law 1581 of 2012 to align Colombia's data protection framework with the EU GDPR. The amended bill moves to the House Floor for consideration.
November 25, 2025 at 1:08 PM
The House Committee on Constitution released a report on Bill 274/2025, which updates Law 1581 of 2012 to align Colombia's data protection framework with the EU GDPR. The amended bill moves to the House Floor for consideration.
Request for a preliminary ruling from the Supreme Court of Austria– Verein für Konsumenteninformation v Universal Versand GmbH
Case C-568/25
Subject-matter: Automated Decision-Making (ADM)
Case C-568/25
Subject-matter: Automated Decision-Making (ADM)
November 25, 2025 at 12:29 PM
Request for a preliminary ruling from the Supreme Court of Austria– Verein für Konsumenteninformation v Universal Versand GmbH
Case C-568/25
Subject-matter: Automated Decision-Making (ADM)
Case C-568/25
Subject-matter: Automated Decision-Making (ADM)
Under the proposed Digital Omnibus, processing of personal data via AI systems will not require consent, whereas email marketing will continue to need it.
November 24, 2025 at 9:51 PM
Under the proposed Digital Omnibus, processing of personal data via AI systems will not require consent, whereas email marketing will continue to need it.
Happy 2026!
The EU Commission has launched a call for feedback on the Digital Omnibus, at lnkd.in/dZvgEQWr.
Digital Omnibus Regulation Proposal: lnkd.in/dzAdAUaS.
Digital Omnibus on AI Regulation Proposal: lnkd.in/dSxvAnjs.
The EU Commission has launched a call for feedback on the Digital Omnibus, at lnkd.in/dZvgEQWr.
Digital Omnibus Regulation Proposal: lnkd.in/dzAdAUaS.
Digital Omnibus on AI Regulation Proposal: lnkd.in/dSxvAnjs.
November 24, 2025 at 9:29 PM
Happy 2026!
The EU Commission has launched a call for feedback on the Digital Omnibus, at lnkd.in/dZvgEQWr.
Digital Omnibus Regulation Proposal: lnkd.in/dzAdAUaS.
Digital Omnibus on AI Regulation Proposal: lnkd.in/dSxvAnjs.
The EU Commission has launched a call for feedback on the Digital Omnibus, at lnkd.in/dZvgEQWr.
Digital Omnibus Regulation Proposal: lnkd.in/dzAdAUaS.
Digital Omnibus on AI Regulation Proposal: lnkd.in/dSxvAnjs.
Reposted by Luis Alberto Montezuma 路易斯·阿尔贝托·蒙特祖玛
The EU Parliament's JURI committee will vote next week on whether to challenge the Commission’s decision to withdraw the AI Liability Directive before the EU Court of Justice - in a move that could replicate the path followed on the SEP proposal.
www.mlex.com/mlex/article...
www.mlex.com/mlex/article...
EU parliamentary committee to vote on AI liability withdrawal challenge next week | MLex | Specialist news and analysis on legal risk and regulation
EU lawmakers on the Parliament’s Legal Affairs Committee will vote next week on whether to challenge the European Commission’s withdrawal of the AI Liability Directive. The decision, which mirrors a s...
www.mlex.com
November 24, 2025 at 5:37 PM
The EU Parliament's JURI committee will vote next week on whether to challenge the Commission’s decision to withdraw the AI Liability Directive before the EU Court of Justice - in a move that could replicate the path followed on the SEP proposal.
www.mlex.com/mlex/article...
www.mlex.com/mlex/article...
Google has filed an appeal against the European Commission's decision on adtech and data-related practices (See ec.europa.eu/commission/p...). The decision is not yet available.
November 24, 2025 at 1:02 PM
Google has filed an appeal against the European Commission's decision on adtech and data-related practices (See ec.europa.eu/commission/p...). The decision is not yet available.
Data collection mechanisms for AI
training
training
November 23, 2025 at 10:54 PM
Data collection mechanisms for AI
training
training
If you believe in convergence between data protection and competition, the Italian Competition Authority closed its investigation launched in July 2024 into Google’s request for consent to “linking” user activity across its services. lnkd.in/dyK-sgeB
November 23, 2025 at 10:16 PM
If you believe in convergence between data protection and competition, the Italian Competition Authority closed its investigation launched in July 2024 into Google’s request for consent to “linking” user activity across its services. lnkd.in/dyK-sgeB
Consent is usually required for most uses, including BA and TA purposes. However, the proposed Digital Omnibus permits processing of personal data in AI systems based on "legitimate interests," unless Article 5(2) DMA applies.
November 23, 2025 at 7:35 PM
Consent is usually required for most uses, including BA and TA purposes. However, the proposed Digital Omnibus permits processing of personal data in AI systems based on "legitimate interests," unless Article 5(2) DMA applies.
From 2018 to 2023, Meta used data for TA without consent, violating GDPR. A Spanish court ruled this gave Meta an unfair advantage, citing EDPB and DPC decisions. While TA requires consent, the Digital Omnibus may permit AI use under "LI," except as restricted by Article 5(2).
November 23, 2025 at 6:14 PM
From 2018 to 2023, Meta used data for TA without consent, violating GDPR. A Spanish court ruled this gave Meta an unfair advantage, citing EDPB and DPC decisions. While TA requires consent, the Digital Omnibus may permit AI use under "LI," except as restricted by Article 5(2).
CAC has proposed draft requirements for Large Online Platforms under the PIPL. The proposed regulation establishes the data portability right and requires organizations to respond to data portability requests within one month in a machine-readable format.
www.cac.gov.cn/2025-11/22/c...
www.cac.gov.cn/2025-11/22/c...
November 22, 2025 at 2:21 PM
CAC has proposed draft requirements for Large Online Platforms under the PIPL. The proposed regulation establishes the data portability right and requires organizations to respond to data portability requests within one month in a machine-readable format.
www.cac.gov.cn/2025-11/22/c...
www.cac.gov.cn/2025-11/22/c...
California Attorney General Rob Bonta today announced a settlement with Jam City, Inc. resolving allegations that the mobile app gaming company violated the California Consumer Privacy Act (CCPA) by failing to offer consumers methods to opt-out of the sale or sharing of their personal information.
November 21, 2025 at 11:59 PM
California Attorney General Rob Bonta today announced a settlement with Jam City, Inc. resolving allegations that the mobile app gaming company violated the California Consumer Privacy Act (CCPA) by failing to offer consumers methods to opt-out of the sale or sharing of their personal information.
