Gabriela Zanfir-Fortuna
banner
gzf.bsky.social
Gabriela Zanfir-Fortuna
@gzf.bsky.social
Data Protection Geek. Co-author of the big GDPR OUP Commentary🇷🇴🇪🇺🇺🇸 US-based, former Brussels bubbler. Writes about data protection law and policy, AI governance through a Global lens (& sometimes democracy) Strictly personal views.
www.pdpecho.com.
Case study for assessing “means reasonably likely to be used” to identify an individual 🤓 This is also for anyone who tells you your cat chip series is not your personal data too 🤠

www.youtube.com/shorts/UcIxF...
We found this Russian spy -- using her cat #catlady #rusia #funny #truestory
YouTube video by The Christo Files
www.youtube.com
December 8, 2025 at 11:08 PM
I spent the weekend re-reading the two #SRB judgments and organized my thoughts in a long summary (yes, paradox). Since it might be used to upend the whole data protection system, I think it is imperative to do a minutious study of the Court's findings in SRB 1/x

pdpecho.com/2025/12/08/a...
A deep dive into the consequential SRB judgment(s): Between personal, impersonal, anonymous and pseudonymized data
The CJEU gave two consequential judgments on the definition of “personal data” and its relationship with de-identification, one in first instance by the General Court (Case T-557/20, SRB I, 26 Apri…
pdpecho.com
December 8, 2025 at 2:46 PM
Reposted by Gabriela Zanfir-Fortuna
As Sweden prepares to spend more on defence, it looks set to open the fiscal taps and issue a flood of new bonds. Stockholm is becoming a bond trader’s paradise as a result
Stockholm is Europe’s new capital of capital
And with Sweden embarking on a borrowing spree, it is a bond trader’s paradise
econ.st
December 7, 2025 at 6:00 AM
In September, American tech regulator, the FTC, sanctioned a foreign company for not complying with American digital law when providing services to Americans:

www.ftc.gov/news-events/...
FTC Takes Action Against Robot Toy Maker for Allowing Collection of Children’s Data without Parental Consent
The Federal Trade Commission is taking action against robot toy maker Apitor Technology over allegations that its app enabled a third party in China to collect geolocation information from children
www.ftc.gov
December 6, 2025 at 10:22 PM
Excellent Saturday morning long read to enjoy with your ☕️ The hollowness of AI speech permeating all written word will end up driving me insane, I know it.
Gift link:
www.nytimes.com/2025/12/03/m...
Why Does A.I. Write Like … That?
www.nytimes.com
December 6, 2025 at 3:07 PM
Hold your horses 🐴 The CJEU itself clarifies that having to comply as an online platform with the #GDPR to prevent unlawful processing of sensitive data *is not* an obligation of general monitoring.
It’s right there in the judgment, spelled out, at para 132.

#Russmedia
December 5, 2025 at 9:17 PM
#Russmedia is the gift that keeps on giving. First time the Court states this re: accuracy:
"every reasonable step must be taken to ensure that personal data that are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay."
CC: AI developers 👀
December 5, 2025 at 6:07 PM
Reposted by Gabriela Zanfir-Fortuna
I can't use reply to this post, which may be some setting by the original post from @mmasnick.bsky.social
I generally like his writing, not always agree, but he is such great source for the field. In this case, I do hope that people also read other commentary.
So if Russmedia starts prescreening for PII and in the process they see but fail to remove obvious counterfeit Prada bags, they still have a safe harbor under Art 7 when Prada sues? Super good question. @hutko.bsky.social? @jvh.bsky.social? @gateklons.bsky.social?
December 5, 2025 at 5:40 PM
Reposted by Gabriela Zanfir-Fortuna
Don't let anyone tell you that the Commission's DSA enforcement against X is about speech or censorship.

That would, indeed, be interesting. But this is just the EU enforcing some normal, boring laws that would get bipartisan support in the U.S. (I bet similar bills *have* had that support.) 1/
December 5, 2025 at 2:58 PM
Reposted by Gabriela Zanfir-Fortuna
Today’s 120 million euro fine against X under the Digital Services Act (DSA) will be spun as a decision against “free speech.” It’s not. (1/7) #digitalservicesact #dsa #dsa ec.europa.eu/commission/p...
Commission fines X €120 million under the Digital Services Act
Today, the Commission has issued a fine of €120 million to X for breaching its transparency obligations under the Digital Services Act (DSA).
ec.europa.eu
December 5, 2025 at 11:34 AM
The first DSA fine landed - 120 million euro for X is - dare I say - dwarfed by the Irish DPC's 1,3 billion GDPR fine of Meta or Luxembourg DPA's 781 million fine of Amazon. It also comes 2 years after the DSA became applicable. The notion that the Commission is a better, more eficient enforcer 1/2
December 5, 2025 at 2:26 PM
There is a press release, but I don't find the full decision of the first DSA fine 🥲 I guess a deep dive will have to wait.

ec.europa.eu/commission/p...
Commission fines X €120 million under the Digital Services Act
Today, the Commission has issued a fine of €120 million to X for breaching its transparency obligations under the Digital Services Act (DSA).
ec.europa.eu
December 5, 2025 at 2:20 PM
Reposted by Gabriela Zanfir-Fortuna
@gzf.bsky.social from the @futureofprivacy.bsky.social
talks about Europe's role as worldwide leader when it comes to privacy and data protection...and how that role might change as a result of the EU Commission's Digital Omnibus proposal. @monopolyreport.bsky.social podcast at tinyurl.com/5fshds3w
December 4, 2025 at 1:23 PM
So I just started reading Russmedia, the newest GDPR CJEU judgment (published this week), which sent folks in intermediary liability and online safety spinning by acknowledging that online platforms are in fact controllers under the GDPR. Facts of the case: happened in 2018! Just like SRB.‼️
December 4, 2025 at 6:16 AM
& here is the full episode of the Monopoly Report podcast, in conversation with @achapell.bsky.social, dispelling some of the GDPR Omnibus proposal! I had such a great time talking to Alan, I hope you all enjoy!
#GDPR #GDPROmnibus #Privacy #AdTech

www.monopolyreportpod.com/episode-57-t...
Episode 57: The EU Digital Omnibus with Dr. Gabriela Zanfir-Fortuna
The Digital Omnibus proposal seeks to upend the EU data protection rules. In part 1 of our coverage, Alan Chapell chats with Dr Gabriela Zanfir-Fortuna of the Futur…
www.monopolyreportpod.com
December 4, 2025 at 4:27 AM
I’ll take it 😇 🤪
December 4, 2025 at 1:33 AM
Reposted by Gabriela Zanfir-Fortuna
Here's a preview of my @monopolyreport.bsky.social interview with @gzf.bsky.social where my guest shares a thoughtful answer to the question: What's your privacy origin story. Full interview drops on Dec 3 at www.monopolyreportpod.com
December 2, 2025 at 10:18 PM
🚨 Job alert! FPF is hiring for a Project Researcher in Privacy and AI Governance, ideally in our Singapore office (Tokyo is also an option), for a 6 months contract. Fluency in Japanese is a must for this role.
fpf.org/project-rese...
Project Researcher, Privacy and AI Governance
FPF is seeking a part-time consultant to support a project on privacy and AI governance in the Asia-Pacific (APAC) region, with a specific focus on Japan. The main goal of the project is to gather, sy...
fpf.org
December 2, 2025 at 10:15 PM
All hail Laura Codruta Kovesi, the most bada** anti-corruption prosecutor 🙌 (and chief of the EPPO)

www.politico.eu/article/belg...
EU’s Mogherini and Sannino in custody in fraud probe
European prosecutor says it has “strong suspicions” competition rules were breached in awarding contract to run training academy for diplomats.
www.politico.eu
December 2, 2025 at 2:23 PM
one of the best titles of the year: Make Money, Not War

www.wsj.com/world/russia...
Make Money Not War: Trump’s Real Plan for Peace in Ukraine
The Kremlin pitched the White House on peace through business. To Europe’s dismay, the president and his envoy are on board.
www.wsj.com
December 2, 2025 at 4:14 AM
Hello all! Today we celebrate the National Day of Romania 🇷🇴 My invitation today is that when you're doing that next Eurotrip, don't stop most eastward in Prague or Vienna, be adventurous, go further East and be charmed by this beautiful country (travel tips below): 1/x
December 1, 2025 at 11:20 PM
The facts of the case in SRB took place in 2018 👀 So about the same time the GDPR became applicable, with its broad personal data definition and swanky global influence, a small grenade was being built to be thrown at it with the first rewriting attempt 🫢
December 1, 2025 at 5:38 AM
Reposted by Gabriela Zanfir-Fortuna
“What if we are experiencing and cognising the world with every single cell in our entire body, not just the maestro brain? All our humble bodily cells participate in the making of our experiences and cognitive processes, and not just the ‘noble’ neurons in the brain.”
aeon.co/essays/why-y...
Why you need your whole body – from head to toes – to think | Aeon Essays
Contemplating the world requires a body, and a body requires an immune system: the rungs of life create the stuff of thought
aeon.co
November 30, 2025 at 5:25 PM
My favorite Romanian bookstore, Carturesti, is also not shipping to the US any longer 😭 I’ve put 4 volumes in the cart, so eager to get them before Christmas, only to be disappointed at check out. 😮‍💨
November 29, 2025 at 5:29 PM
😱 I cannot order Rituals anymore in the US because of the tariffs, what a travesty 😱
November 29, 2025 at 3:41 AM