Eduardo Ustaran
banner
eustaran.bsky.social
Eduardo Ustaran
@eustaran.bsky.social
Privacy, data protection and digital regulation lawyer, pragmatic thinker and author
Respect 👇
November 6, 2025 at 1:57 PM
A UK debate that the EU has already had. In the absence of an outright prohibition as under the #AI Act, it will be interesting to see if under the UK #GDPR, the outcome is the same, but I suspect not.
www.bbc.co.uk/news/resourc...
The debate: Are facial recognition cameras in Sainsbury's a step too far? - BBC News
As Sainsbury's uses facial recognition cameras to crack down on shoplifting, four experts debate the technology's pros and cons.
www.bbc.co.uk
October 24, 2025 at 10:59 AM
Our team’s take on the UK Government's "third way" proposal for regulating #AI, and how to have your say on whether it gets the balance right between innovation and responsible AI practices.
www.hoganlovells.com/en/publicati...
AI Growth Lab: UK champions AI innovation with regulatory sandbox proposal
On 21 October 2025, the UK Government opened for consultation their proposal for a UK AI Growth Lab. The Government is seeking to rely on a sandbox-based model to ensure that laws continue to keep pac...
www.hoganlovells.com
October 24, 2025 at 9:29 AM
Big #AI regulatory proposal from the UK Government, but not in the way many people think of regulation.

This proposal is almost exclusively focused on facilitating responsible AI development through sandboxes, but with a twist…

www.gov.uk/government/c...
AI Growth Lab
www.gov.uk
October 22, 2025 at 9:13 AM
When life takes a hectic turn it’s time to follow my cat’s sage lifestyle advice…
October 22, 2025 at 9:03 AM
Very candid and helpful explanation by Kakao’s Head of Privacy at #GPA25 about the value of proactively engaging with regulators to educate on #AI innovation despite the fears of not getting the feedback you wish for.
This is a very mature approach which requires mutual trust.
September 17, 2025 at 2:47 AM
ICO’s John Edwards argues convincingly at #GPA25 that it is possible to anticipate today the privacy risks of tomorrow’s agentic #AI and we act accordingly applying the existing legal framework. He adds that tools like privacy impact assessments will be particularly useful in this context.
September 17, 2025 at 1:06 AM
“Privacy by design is essential to avoid bias and discrimination in #AI development”.
A critical reminder by EDPB Chair Ana Talus at #GPA25.
September 16, 2025 at 7:00 AM
Irish DPC’s Dale Sunderland makes it clear at #GPA25 that the right to object is not an afterthought but a necessity for the lawful use of personal data for #AI development.
September 16, 2025 at 6:55 AM
EDPB Chair Ana Talus focusing on two important aspects for the legality of #AI development at #GPA25:
1️⃣The role of Data Protection Impact Assessments as a precondition.
2️⃣The interaction between #GDPR and #AI Act to cover all the bases.
September 16, 2025 at 6:52 AM
Measures like pseudonimysation, anonymity, non-use of sensitive personal data highlighted by Irish DPC’s Dale Sunderland at #GPA25 not just as mechanisms for compliance but as #AI development optimisation.
September 16, 2025 at 6:45 AM
Professor ByoungPil Kim highlighting at #GPA25 how the Korean Personal Information Protection Commission emphasises the role of strong data subject rights to demonstrate legitimate interests as a legal basis for #AI development.
September 16, 2025 at 6:37 AM
“AI doesn’t happen in a vacuum, we have data protection law” succinctly says EDPB Chair Ana Talus at #GPA25, emphasising the role played by the #GDPR in setting the groundwork for lawful #AI development.
September 16, 2025 at 6:24 AM
ICO’s John Edwards explaining at #GPA25 how the UK is aiming to influence international standards dealing with data & #AI governance by adopting pragmatic interpretations of key data protection principles like purpose limitation and data minimisation.
September 16, 2025 at 1:27 AM
“In the era of #AI, the principles of the #GDPR must be respected to enable trust” according to CNIL’s President at #GPA25. A simple statement that summarises the crucial importance of data protection at this moment in time.
September 16, 2025 at 1:17 AM
Straight off the bat as they say, the Korean privacy commissioner tells us in his opening speech of #GPA25 that he aims for this event to be a forum for collaboration to enable progress while addressing the challenges of #AI.
September 16, 2025 at 12:32 AM
Just sharing this afternoon’s beautiful rainbow over London.
September 12, 2025 at 5:49 PM
Clear message from @vonderleyen.ec.europa.eu to those wondering whether Europe will soften its digital regulation stance:
“Whether on environmental or digital regulation.
We set our own standards.
We set our own regulations.
Europe will always decide for itself.”
ec.europa.eu/commission/p...
2025 State of the Union Address by President von der Leyen
President von der Leyen delivered the first State of the Union Address of the 2024-2029 Commission. \n
ec.europa.eu
September 10, 2025 at 8:07 PM
Fascinating court decision in Singapore on the limits of “deemed consent”. While this concept does not exist in #GDPR, the court’s take on purpose limitation & reasonableness wouldn’t be out of place in an analysis of the “legitimate interests” ground in Europe.
www.hoganlovells.com/en/publicati...
Singapore High Court clarifies scope of deemed consent and actionable loss under the PDPA
In a landmark decision, the Singapore High Court in Piper v. Singapore Kindness Movement has clarified the limits of deemed consent under the Personal Data Protection Act 2012 (the 'PDPA') and the req...
www.hoganlovells.com
September 10, 2025 at 9:42 AM
This is one the best @therestpolitics.bsky.social LEADING interviews (and the bar is high). Two key takeaways:
1️⃣The absolutely crucial importance of a rules-based world to remain optimistic about a prosperous future.
2️⃣The equally crucial need for unity in Europe in the widest possible sense.
September 5, 2025 at 1:54 PM
Not sure about the future, but today, this is possibly the most important thing that we should all understand about LLMs.
❌They are not human
❌They have no feelings
❌They have zero empathy
✅They are machines that speak like a very articulate human

@gergely.pragmaticengineer.com puts it very well👇
Amusing how 99% of people using LLMs forget how these things work:

They are advanced probability machines. They generate the next most likely token (word) based in the input and their training.

Under the hood, it’s a giant matrix multiplication that has eerily good output.
September 4, 2025 at 2:49 PM
Our team’s take on the robust and crucial validation by the CJEU of the @ec.europa.eu adequacy of the EU-U.S. Data Privacy Framework.
If you read one write up about this crucial decision, read this one.👇
www.hoganlovells.com/en/publicati...
www.hoganlovells.com
September 4, 2025 at 10:45 AM
Nipping it in the bud. Despite all the geopolitics, when it came to it, the CJEU kept its cool and confirmed that the EU-U.S. Data Privacy Framework is valid.
curia.europa.eu/jcms/upload/...
curia.europa.eu
September 3, 2025 at 8:06 AM
Perhaps the most important difference between 🇪🇺&🇺🇸 approaches to #AI public policy is that the EU is mainly about exercising caution and the US is about accelerating innovation.
As ever, could the most virtuous approach be a middle ground with the best of both and focused on sustainable development?
August 19, 2025 at 7:53 AM