David Erdos
banner
daviderdos.bsky.social
David Erdos
@daviderdos.bsky.social
Trinity Hall Fellow, Professor of Law & Open Society & CIPIL Co-Director Cambridge University. Interested in #dataprotection #GDPR information law, legal history & public and private international law. Viewpoints personal & RT≠endorsement
Reposted by David Erdos
The Commission will introduce the Digital Omnibus on November 19, simplifying of the implementation of AI Act.

Here's the text shared by netzpolitik.org:
lnkd.in/dCTW36pS.
November 7, 2025 at 11:01 PM
Reposted by David Erdos
Fantastic lecture by @ukandeu.bsky.social Prof @anandmenon.bsky.social for the annual @eulegalstudies.bsky.social Mackenzie Stuart Lecture @cambridgelaw.bsky.social, chaired by Prof @cbarnard.bsky.social reflecting on the 2015 general election and inequality in the run up to the Brexit.
November 3, 2025 at 5:45 PM
Disappointing to see that the UK ICO has declined to submit any evidence to the Commons Defence Committee Inquiry into the circumstances behind, and consequences of, the #Afghan #spreadsheet #databreach, the most serious ever in UK public sector history: committees.parliament.uk/work/9327/af...
Afghan Data Breach and Resettlement Schemes - Committees - UK Parliament
This inquiry will examine the circumstances behind and the consequences of a major data breach in February 2022 from the Ministry of Defence. The breach involved the personal data of thousands of Afghan applicants for resettlement to the UK and their families, potentially putting these people at risk of reprisals. The inquiry aims to understand how this breach could have been allowed to happen, and, once it had happened, whether successive Governments took well-informed and sensible decisions under cover of an unprecedented super-injunction. The inquiry will also examine the Government’s wider arrangements for the resettlement of eligible Afghans in the UK. While lived experience can inform the Committee's work, please be aware that the Committee does not consider or assist with individual cases.
committees.parliament.uk
October 31, 2025 at 10:17 AM
Reposted by David Erdos
October 30, 2025 at 3:51 PM
Reposted by David Erdos
1984: We're behind schedule.

Couple sues because NYPD aims cameras into their bedroom and living room, perhaps due to their history of activism.

I hope they win but the precedents are mixed.
www.law360.com/cybersecurit...
NYC Sued Over 'Voyeuristic' Police Surveillance System - Law360
A Brooklyn couple has filed a federal lawsuit alleging New York City uses a "voyeuristic" police surveillance system on all visitors and residents, which includes two police cameras that are aimed at ...
www.law360.com
October 30, 2025 at 12:39 PM
Beyond #Afghan #databreach, the UK ICO faces increased scrutiny due to need to renew #dataprotection #adequacy. The European DP Board is urging much greater scrutiny of the robustness of its complaints handling & effectiveness of UK #GDPR sanctions and remedies: www.edpb.europa.eu/system/files...
October 30, 2025 at 12:20 PM
Reposted by David Erdos
Happy to announce that I'm giving a CIPIL seminar in Cambridge on Nov 20th, "Faithful or Traitor? The Right of Explanation in a Generative AI World", and it's attendance on zoom as well as in person but registration needed : see www.cipil.law.cam.ac.uk/press/events...
CIPIL Evening Seminar: 'Faithful or Traitor? The Right of Explanation
Speaker: Professor Lilian Edwards, Prof of Law, Innovation & Society, Newcastle Law School Biography: Lilian Edwards is a leading academic in the field of Internet law.
www.cipil.law.cam.ac.uk
October 27, 2025 at 3:06 PM
Reposted by David Erdos
I shall be responding to this. It’s important. 👇
The UK Information Commissioner's Office is currently consulting (until this Friday) on its plans to change its response to #dataprotection including UK #GDPR complaints. Please do respond via ico.org.uk/about-the-ic...
ICO consultation on draft changes to how we handle data protection complaints
ico.org.uk
October 29, 2025 at 10:44 AM
The ICO claim #UKGDPR complaints are arising "as people become more aware of their #dataprotection rights" & now propose to refuse investigation of many of these. In fact, complaints have been stable since #GDPR & but with ↓↓ regulatory action by ICO have ↑ since 2023: inforrm.org/2025/10/28/c...
October 29, 2025 at 10:21 AM
New blog on UK Information Commissioner's plan to reject investigation ‍of many #DataProtection complaints, an💡inconsistent with its obligation to inform all complainants of an investigation outcome & liable to fuel further disregard for the UK #GDPR especially among SMEs: inforrm.org/2025/10/28/c...
Cause for Complaint: Assessing the ICO’s Proposed New Approach to Data Protection Complaints – David Erdos
The Information Commissioner’s Office (ICO)’s data protection complaint handling performance is currently in very clear crisis.  Despite its pledge to assess and respond to 80% of such complaints w…
inforrm.org
October 28, 2025 at 10:48 AM
Great to see open-access volume on #dataprotection and #humanitarian action now out marking decade of @icrc.org & @unhcr.org frameworks🎉https://lnkd.in/eTTyttpw My chapter is on 1990 UN Guidelines role in promoting regulation alongside autonomy & derogations for humanitarian IOs.
October 27, 2025 at 12:10 PM
Reposted by David Erdos
⚠️ Grindr has violated the #GDPR for sharing users’ personal data for advertising purposes, according to the #Norwegian Court of Appeal. This decision sends a strong signal to the commercial surveillance industry. Read more about the decision below ⬇️
October 23, 2025 at 8:16 AM
Good to see highlighting of ICO failure to investigate grave #Afghan #databreach or even keep decision record. Similar earlier breach is binding reason for action not reverse. UK #GPDR requires "dissuasive" steps but this is lacking bsky.app/profile/chio...
ukconstitutionallaw.org/2025/09/03/d...
October 21, 2025 at 4:29 PM
#Australia, #Canada & #UK's joint action today brings #Commonwealth State recognition of #Palestine to 80%. It must now accept its special urgent responsibilities, set up a support Fund & revive Palestine's 1997 membership application: www.tandfonline.com/doi/full/10.... bsky.app/profile/leah...
⚠️ Prime Ministers of the UK, Canada, and Australia announce their countries’ recognition of the State of Palestine:
September 21, 2025 at 2:25 PM
In midst of #Gaza horror &⬆️Recognition of #Palestine by Members (up to 80% by end Sept & 🤞more soon) it's good to see Stuart Mole, former Head of it's Secretary-General's Office, call for Palestine #Commonwealth membership pathway (paused since 1997) www.commonwealthroundtable.co.uk/general/poli...
September 8, 2025 at 8:58 AM
Reposted by David Erdos
📰 "The Austrian data protection authority has ordered YouTube to give users access to their personal data, enforcing data access rules contained in the EU's General Data Protection Regulation (GDPR)."

www.euractiv.com/section/tech...
Austria's privacy watchdog tells YouTube to give users access to their data - Euractiv
But the decision by the Austrian authority comes more than five years after privacy group Noyb filed the data access complaint
www.euractiv.com
September 2, 2025 at 8:42 AM
New Blog: In wake of #Afghan #databreach which put 100K at grave UK #GDPR risk ICO didn't obtain a full timely notification, engaged in no investigation or enforcement & recorded no decisions. The super-injunction protected its position so can't justify this ukconstitutionallaw.org/2025/09/03/d...
David Erdos: How Exposed? The Information Commissioner’s Office and the Afghan Spreadsheet Data Breach
On 17 August 2023 the Ministry of Defence (MoD) put the Information Commissioner’s Office (ICO) on broad notice about the devastating failure of data protection that is now generally known as the A…
ukconstitutionallaw.org
September 3, 2025 at 8:29 AM
Invoking "economic growth" & the vaguest of claims about #AdTech the UK Information Commissioner plans to explicitly “enable” non-compliant business models. Even partial Responses (by 7 Sept 25) pushing back on this erosion of rights & democratic processes would be good! ico.org.uk/about-the-ic...
September 1, 2025 at 12:57 PM
Invoking "economic growth" & the vaguest of claims about #AdTech the UK Information Commissioner plans to explicitly “enable” non-complaint business models. Even partial Responses (by 7 Sept 25) pushing back on this erosion of rights & democratic processes encouraged. ico.org.uk/about-the-ic...
September 1, 2025 at 10:17 AM
New Working Paper: Pleased to post first comprehensive historical and comparative #law & #policy analysis of #Commonwealth #citizenship from end of WWII to present, also looking at its possible future faciliating short-term mobility especially for #business purposes: papers.ssrn.com/sol3/papers....
July 30, 2025 at 9:22 AM
Good to see coverage of ICO's UK #GDPR & #ePrivacy track-record including (slightly sensationalised) analysis of decisionmarketing.co.uk/top-story/la... of my blog piece ukconstitutionallaw.org/2025/07/22/d... Momentum is building for parliamentary scrutiny: committees.parliament.uk/publications...
July 25, 2025 at 10:18 AM
The ICO's failure to enforce UK #GDPR is at odds not just with #EU comparators like #Germany, #Spain & #Italy but with UK #regulation protecting people. Eg #dataprotection complaints are c. 70% those of #food hygiene yet formal action is at c. 0.3% level. See ukconstitutionallaw.org/2025/07/22/d...
July 23, 2025 at 9:33 AM
Reposted by David Erdos
Very timely piece by @daviderdos.bsky.social highlighting, against the background of the absence of any formal regulatory action in respect of the Afghan data breach, the ICO's 'doubling down' on 'its hyper-selective and hyper-discretionary approach' to enforcement.
July 22, 2025 at 8:19 AM
Reposted by David Erdos
Here @daviderdos.bsky.social reflects upon the ICO's lack of enforcement of data protection rules, but his main thrust, on the hollowness of the UK's regulatory agencies, extends across public life (especially with no EU Commission oversight post-Brexit):

ukconstitutionallaw.org/2025/07/22/d...
David Erdos: The UK Information Commissioner’s Annual Report 2024/25: Surveying a Systematic Trend Away from Adequate Enforcement
The Information Commissioner’s Office (ICO) Annual Report for 2024/25 released last week sadly provides evidence of a severe and serious weakening of information rights regulation compared to the s…
ukconstitutionallaw.org
July 22, 2025 at 11:20 AM