Luis Alberto Montezuma 路易斯·阿尔贝托·蒙特祖玛
@montezumachavez.bsky.social
In a 137-page report, the Hessian Data Protection Commissioner (HBDI) concluded that a GDPR-compliant operation of M365 is now possible—provided that both Microsoft and the customer (the “controller”) fulfill their respective obligations. See www.linkedin.com/posts/luisal...
November 14, 2025 at 11:12 PM
In a 137-page report, the Hessian Data Protection Commissioner (HBDI) concluded that a GDPR-compliant operation of M365 is now possible—provided that both Microsoft and the customer (the “controller”) fulfill their respective obligations. See www.linkedin.com/posts/luisal...
While I am still reviewing the Digital Personal Data Protection Rules (DPDP Rules) 2025 (see lnkd.in/dGP429au, the Dutch DPA has released a report on AI systems for making risk assessments regarding criminal offences. See lnkd.in/dTiEEbtH
November 14, 2025 at 8:48 PM
While I am still reviewing the Digital Personal Data Protection Rules (DPDP Rules) 2025 (see lnkd.in/dGP429au, the Dutch DPA has released a report on AI systems for making risk assessments regarding criminal offences. See lnkd.in/dTiEEbtH
India has notified the final Digital Personal Data Protection (DPDP). See www.linkedin.com/posts/luisal...
November 14, 2025 at 10:54 AM
India has notified the final Digital Personal Data Protection (DPDP). See www.linkedin.com/posts/luisal...
SACRAMENTO — The California Privacy Protection Agency (CalPrivacy) announced at last week’s Board meeting that the California Office of Administrative Law has approved regulations to further implement the Delete Act. See www.linkedin.com/posts/luisal...
November 14, 2025 at 1:31 AM
SACRAMENTO — The California Privacy Protection Agency (CalPrivacy) announced at last week’s Board meeting that the California Office of Administrative Law has approved regulations to further implement the Delete Act. See www.linkedin.com/posts/luisal...
Argentina has committed to recognizing the United States as an adequate jurisdiction under Argentine law for the cross-border transfer of data, including personal data. See www.whitehouse.gov/briefings-st....
November 14, 2025 at 12:32 AM
Argentina has committed to recognizing the United States as an adequate jurisdiction under Argentine law for the cross-border transfer of data, including personal data. See www.whitehouse.gov/briefings-st....
The draft is in line with GDPR!
The National Institute of Information and Communication Technologies (INTIC) of Mozambique has released an updated draft of Mozambique's Data Protection Law. See www.linkedin.com/posts/luisal...
November 13, 2025 at 11:31 PM
The draft is in line with GDPR!
The National Institute of Information and Communication Technologies (INTIC) of Mozambique has released an updated draft of Mozambique's Data Protection Law. See www.linkedin.com/posts/luisal...
November 13, 2025 at 10:06 PM
The National Institute of Information and Communication Technologies (INTIC) of Mozambique has released an updated draft of Mozambique's Data Protection Law. See www.linkedin.com/posts/luisal...
Thailand intends to reform Personal Data Protection Act, B.E. 2562 (2019), aiming to bring the legislation into closer alignment with the GDPR. Consultation: law.go.th/listeningDet...
ระบบกลางทางกฎหมาย
ระบบกลางทางกฎหมาย
law.go.th
November 13, 2025 at 5:12 PM
Thailand intends to reform Personal Data Protection Act, B.E. 2562 (2019), aiming to bring the legislation into closer alignment with the GDPR. Consultation: law.go.th/listeningDet...
The Gambia's Personal Data Protection and Privacy Act has been assented to by the President of The Gambia.
a flag with red blue white and green stripes
ALT: a flag with red blue white and green stripes
media.tenor.com
November 13, 2025 at 2:29 PM
The Gambia's Personal Data Protection and Privacy Act has been assented to by the President of The Gambia.
The Court of Justice of the European Union decided that Article 6 of the GDPR shall not apply when data processing is conducted under Article 13 of the ePrivacy Directive. See curia.europa.eu/juris/docume...
November 13, 2025 at 9:35 AM
The Court of Justice of the European Union decided that Article 6 of the GDPR shall not apply when data processing is conducted under Article 13 of the ePrivacy Directive. See curia.europa.eu/juris/docume...
The Brazilian DPA announced it has issued measures on Facebook's processing of WhatsApp user personal data after changes to WhatsApp Terms of Service and Privacy Policy for Brazilian users. See anpd-super.mj.gov.br/sei/publicac...
SEI/ANPD - 0223192 - Despacho Decis�rio
anpd-super.mj.gov.br
November 12, 2025 at 7:48 PM
The Brazilian DPA announced it has issued measures on Facebook's processing of WhatsApp user personal data after changes to WhatsApp Terms of Service and Privacy Policy for Brazilian users. See anpd-super.mj.gov.br/sei/publicac...
Greens/EFA in the European Parliament have also sent a letter to EU Commissioner Henna Virkkunen, protesting against several aspects of the leaked digital omnibus and GDPR. See www.linkedin.com/posts/ralf-b...
November 12, 2025 at 5:51 PM
Greens/EFA in the European Parliament have also sent a letter to EU Commissioner Henna Virkkunen, protesting against several aspects of the leaked digital omnibus and GDPR. See www.linkedin.com/posts/ralf-b...
GDPR
November 12, 2025 at 5:41 PM
GDPR
The Rapporteur for the 4th "GDPR" Omnibus has published his Draft Report. See lnkd.in/ddF8wwdw.
November 12, 2025 at 3:59 PM
The Rapporteur for the 4th "GDPR" Omnibus has published his Draft Report. See lnkd.in/ddF8wwdw.
The German Supreme Court has confirmed the dismissal of an injunction action brought by a consumer association, which aimed to prohibit the transmission of so-called positive data to SCHUFA. Such sharing can be justified under Art. 6(1)(f) of GDPR. www.bundesgerichtshof.de/SharedDocs/P...
www.bundesgerichtshof.de
November 12, 2025 at 1:09 PM
The German Supreme Court has confirmed the dismissal of an injunction action brought by a consumer association, which aimed to prohibit the transmission of so-called positive data to SCHUFA. Such sharing can be justified under Art. 6(1)(f) of GDPR. www.bundesgerichtshof.de/SharedDocs/P...
Reposted by Luis Alberto Montezuma 路易斯·阿尔贝托·蒙特祖玛
The Commission is taking a “wait-and-see” approach on GPAI standards, with no request expected before mid-2026. By the time they’re ready, likely around 2030, the AI market may have moved on, or Brussels may have further changed its rules.
www.mlex.com/mlex/article...
www.mlex.com/mlex/article...
EU’s wait-and-see approach leaves standards for AI models up in the air | MLex | Specialist news and analysis on legal risk and regulation
The European Commission is delaying the launch of technical standards for the AI Act’s rules on general-purpose AI models, opting to first test the existing code of practice. The move could leave comp...
www.mlex.com
November 12, 2025 at 11:55 AM
The Commission is taking a “wait-and-see” approach on GPAI standards, with no request expected before mid-2026. By the time they’re ready, likely around 2030, the AI market may have moved on, or Brussels may have further changed its rules.
www.mlex.com/mlex/article...
www.mlex.com/mlex/article...
A court in Munich has ruled that OpenAI’s chatbot ChatGPT violated German copyright laws by using hits from top-selling musicians to train its language models in what creative industry advocates described as a landmark European ruling. www.linkedin.com/posts/luisal...
November 12, 2025 at 1:38 AM
A court in Munich has ruled that OpenAI’s chatbot ChatGPT violated German copyright laws by using hits from top-selling musicians to train its language models in what creative industry advocates described as a landmark European ruling. www.linkedin.com/posts/luisal...
The draft eliminates sensitive personal inferences as sensitive personal data. For instance, using Grind could imply that someone is gay, but under the new draft, this would no longer be considered sensitive personal data.
November 11, 2025 at 10:45 PM
The draft eliminates sensitive personal inferences as sensitive personal data. For instance, using Grind could imply that someone is gay, but under the new draft, this would no longer be considered sensitive personal data.
S&D Group is speaking out with clarity and conviction against the content of the digital omnibus leak. @brandobenifei. www.linkedin.com/posts/anja-w...
November 11, 2025 at 7:22 PM
S&D Group is speaking out with clarity and conviction against the content of the digital omnibus leak. @brandobenifei. www.linkedin.com/posts/anja-w...
Reposted by Luis Alberto Montezuma 路易斯·阿尔贝托·蒙特祖玛
It's hard to explain just how bad the leaked "Digital Omnibus" is, but this short video does a good job of it.
Imagine if someone so thoroughly lacquered from snorting slop while praying to Sam Altman were asked to edit a privacy law.
Imagine if someone so thoroughly lacquered from snorting slop while praying to Sam Altman were asked to edit a privacy law.
November 11, 2025 at 5:18 PM
It's hard to explain just how bad the leaked "Digital Omnibus" is, but this short video does a good job of it.
Imagine if someone so thoroughly lacquered from snorting slop while praying to Sam Altman were asked to edit a privacy law.
Imagine if someone so thoroughly lacquered from snorting slop while praying to Sam Altman were asked to edit a privacy law.
AGENDA Twenty-seventh meeting of the Committee established under Article 93 of the GDPR
November 11, 2025 at 4:54 PM
AGENDA Twenty-seventh meeting of the Committee established under Article 93 of the GDPR
EDPS just published its Guidance for Risk Management of Artificial Intelligence systems. Read the full guidance document here lnkd.in/dEwVBZVB
November 11, 2025 at 3:31 PM
EDPS just published its Guidance for Risk Management of Artificial Intelligence systems. Read the full guidance document here lnkd.in/dEwVBZVB
The GDPR Reform intends to introduce the "relative" approach to personal data from C-413/23 P EDPS v SRB, possibly extending or codifying its broader aspects. Douwe Korff analyzed GDPR concepts in relation to the CJEU judgment in EDPS v SRB.
November 11, 2025 at 2:23 PM
The GDPR Reform intends to introduce the "relative" approach to personal data from C-413/23 P EDPS v SRB, possibly extending or codifying its broader aspects. Douwe Korff analyzed GDPR concepts in relation to the CJEU judgment in EDPS v SRB.
The Court of Justice decided to grant Meta leave to intervene in Cases Bindl/European Commission in support of the form of order sought by the European Commission. This includes reviewing Meta's SCCs.
Please read Thomas Bindl's thoughts here: www.linkedin.com/feed/update/....
Please read Thomas Bindl's thoughts here: www.linkedin.com/feed/update/....
November 10, 2025 at 4:23 PM
The Court of Justice decided to grant Meta leave to intervene in Cases Bindl/European Commission in support of the form of order sought by the European Commission. This includes reviewing Meta's SCCs.
Please read Thomas Bindl's thoughts here: www.linkedin.com/feed/update/....
Please read Thomas Bindl's thoughts here: www.linkedin.com/feed/update/....
The Commission is set to introduce the Digital Omnibus on November 19.
Here's version 2.0 of the analysis of the draft amendments on the GDPR and ePrivacy in the “Digital Omnibus” Overview by Max Schrems here: lnkd.in/dnt_e2v7.
Here's version 2.0 of the analysis of the draft amendments on the GDPR and ePrivacy in the “Digital Omnibus” Overview by Max Schrems here: lnkd.in/dnt_e2v7.
November 10, 2025 at 8:17 AM
The Commission is set to introduce the Digital Omnibus on November 19.
Here's version 2.0 of the analysis of the draft amendments on the GDPR and ePrivacy in the “Digital Omnibus” Overview by Max Schrems here: lnkd.in/dnt_e2v7.
Here's version 2.0 of the analysis of the draft amendments on the GDPR and ePrivacy in the “Digital Omnibus” Overview by Max Schrems here: lnkd.in/dnt_e2v7.