In recent weeks, the so-called Digital Omnibus has been at the centre of the European debate, amid undeniable needs for simplification and equally undeniable risks of oversimplification. One thing is certain: the reform proposal marks a radical change in the European Union’s approach to the digital sphere. As the European Commission itself writes, “The Data […]
Category Archives: Privacy & identity
AI and Processing of Personal Data: the Ruling of the Cologne Court of Appeal
On 23 May 2025, the Cologne Court of Appeal ruled on the lawfulness of using personal data published on social media platforms for the purpose of training an AI system. In this context, the German judge, in light of national and European Union law, reached conclusions that could be relevant for future disputes on the […]
Trade Secrets and Privacy: The CJEU Ruling
In the ever-evolving landscape of privacy law, the European Court of Justice’s (CJEU) ruling of February 27, 2025, clarifies the balance between the right to access personal data and the protection of trade secrets. The judges in Luxembourg addressed a delicate and increasingly relevant issue: to what extent can a data controller invoke trade secrets […]
Generative AI: 5 Million Euro Fine for Company Managing Replika Chatbot
With order No. 10130115, issued on April 10, 2025, the Italian Data Protection Authority (Garante privacy) has fined the company operating the “Replika” chatbot and initiated a further investigation to verify the correct processing of personal data by the AI system underlying the service. How the Replika Chatbot Works Replika is a chatbot developed and […]