Luis Alberto Montezuma 路易斯·阿尔贝托·蒙特祖玛
@montezumachavez.bsky.social
CAC has proposed draft requirements for Large Online Platforms under the PIPL. The proposed regulation establishes the data portability right and requires organizations to respond to data portability requests within one month in a machine-readable format.
www.cac.gov.cn/2025-11/22/c...
www.cac.gov.cn/2025-11/22/c...
November 22, 2025 at 2:21 PM
CAC has proposed draft requirements for Large Online Platforms under the PIPL. The proposed regulation establishes the data portability right and requires organizations to respond to data portability requests within one month in a machine-readable format.
www.cac.gov.cn/2025-11/22/c...
www.cac.gov.cn/2025-11/22/c...
California Attorney General Rob Bonta today announced a settlement with Jam City, Inc. resolving allegations that the mobile app gaming company violated the California Consumer Privacy Act (CCPA) by failing to offer consumers methods to opt-out of the sale or sharing of their personal information.
November 21, 2025 at 11:59 PM
California Attorney General Rob Bonta today announced a settlement with Jam City, Inc. resolving allegations that the mobile app gaming company violated the California Consumer Privacy Act (CCPA) by failing to offer consumers methods to opt-out of the sale or sharing of their personal information.
The Digital Omnibus Proposal allows biometric data processing exceptions for identity verification, provided individuals solely control their data. This Norwegian DPA report will examine the legal challenges of "SALT" and biometric verification via Mobai's technology.
November 20, 2025 at 11:03 PM
The Digital Omnibus Proposal allows biometric data processing exceptions for identity verification, provided individuals solely control their data. This Norwegian DPA report will examine the legal challenges of "SALT" and biometric verification via Mobai's technology.
With new California Consumer Privacy Act (CCPA) regulations going into effect January 1, 2026, here are seven things businesses should know and prepare for.
November 20, 2025 at 8:43 PM
With new California Consumer Privacy Act (CCPA) regulations going into effect January 1, 2026, here are seven things businesses should know and prepare for.
If you believe in convergence between data protection and competition, this decision is for you: A Spanish court has ordered Meta to pay 479 million euros to Spanish digital media outlets for unfair competition practices and infringing GDPR. See www.linkedin.com/posts/luisal....
November 20, 2025 at 12:17 PM
If you believe in convergence between data protection and competition, this decision is for you: A Spanish court has ordered Meta to pay 479 million euros to Spanish digital media outlets for unfair competition practices and infringing GDPR. See www.linkedin.com/posts/luisal....
If you believe in convergence between data protection and competition, this decision is for you: A Spanish court has ordered Facebook owner Meta to pay 479 million euros to Spanish digital media outlets for unfair competition practices and infringing GDPR. www.poderjudicial.es/cgpj/es/Pode...
Meta, condenada a pagar 479 millones de euros a la prensa digital española por competencia desleal al infringir el Reglamento Europeo de Protección de Datos | CGPJ | Poder Judicial | Noticias Judicial...
Noticias Judiciales
www.poderjudicial.es
November 20, 2025 at 11:55 AM
If you believe in convergence between data protection and competition, this decision is for you: A Spanish court has ordered Facebook owner Meta to pay 479 million euros to Spanish digital media outlets for unfair competition practices and infringing GDPR. www.poderjudicial.es/cgpj/es/Pode...
Reposted by Luis Alberto Montezuma 路易斯·阿尔贝托·蒙特祖玛
❗ Researchers say they’ve found a universal “jailbreak” for top AI models, through poetry. A new study shows that rephrasing harmful prompts as short poems can bypass safety filters across all major models, raising questions over AI Act compliance.
www.mlex.com/mlex/article...
www.mlex.com/mlex/article...
AI models’ safety features can be circumvented with poetry, research finds | MLex | Specialist news and analysis on legal risk and regulation
A study found that poetic prompts can bypass safety features in leading AI models from OpenAI, Anthropic, Google and others, triggering instructions for building chemical weapons and malware. The rese...
www.mlex.com
November 20, 2025 at 10:54 AM
❗ Researchers say they’ve found a universal “jailbreak” for top AI models, through poetry. A new study shows that rephrasing harmful prompts as short poems can bypass safety filters across all major models, raising questions over AI Act compliance.
www.mlex.com/mlex/article...
www.mlex.com/mlex/article...
German lawmaker Christine Anderson of the Alternative for Germany party, part of the far-right Europe of Sovereign Nations group, warned the digital omnibus could end up boosting "the ability to track and profile people." – POLITICO www.politico.eu/article/ursu...
Von der Leyen drifts right with new digital deregulation plans
Privacy reforms face opposition from center and left groups but is welcomed by the right.
www.politico.eu
November 20, 2025 at 12:48 AM
German lawmaker Christine Anderson of the Alternative for Germany party, part of the far-right Europe of Sovereign Nations group, warned the digital omnibus could end up boosting "the ability to track and profile people." – POLITICO www.politico.eu/article/ursu...
The COE has published non-binding Model Contractual Terms for data access and use and Standard Contractual Clauses for cloud computing contracts. See digital-strategy.ec.europa.eu/en/library/d...
November 19, 2025 at 1:44 PM
The COE has published non-binding Model Contractual Terms for data access and use and Standard Contractual Clauses for cloud computing contracts. See digital-strategy.ec.europa.eu/en/library/d...
The proposal states that personal data can be processed for AI models under legitimate interest, unless laws like Article 5(2) of the DMA specifically require consent, such as for designated gatekeepers.
November 19, 2025 at 1:19 PM
The proposal states that personal data can be processed for AI models under legitimate interest, unless laws like Article 5(2) of the DMA specifically require consent, such as for designated gatekeepers.
It's Digital Omnibus and AI Act Reform Day!
The COM proposals on the Digital Omnibus are the starting point of the legislative process and not its final result. See digital-strategy.ec.europa.eu/en/library/d...
The COM proposals on the Digital Omnibus are the starting point of the legislative process and not its final result. See digital-strategy.ec.europa.eu/en/library/d...
November 19, 2025 at 1:06 PM
It's Digital Omnibus and AI Act Reform Day!
The COM proposals on the Digital Omnibus are the starting point of the legislative process and not its final result. See digital-strategy.ec.europa.eu/en/library/d...
The COM proposals on the Digital Omnibus are the starting point of the legislative process and not its final result. See digital-strategy.ec.europa.eu/en/library/d...
Reposted by Luis Alberto Montezuma 路易斯·阿尔贝托·蒙特祖玛
BREAKING: The Commission’s digital omnibus on AI proposes delaying the AI Act’s high-risk rules under Annex III to Dec 2027 and Annex I to Aug 2028. But the Commission could anticipate the deadline, giving a six-month or 12-month notice, respectively.
digital-strategy.ec.europa.eu/en/library/d...
digital-strategy.ec.europa.eu/en/library/d...
Digital Omnibus on AI Regulation Proposal
The Commission is proposing targeted simplification measures to ensure timely, smooth, and proportionate implementation of certain of the AI Act’s provisions.
digital-strategy.ec.europa.eu
November 19, 2025 at 12:50 PM
BREAKING: The Commission’s digital omnibus on AI proposes delaying the AI Act’s high-risk rules under Annex III to Dec 2027 and Annex I to Aug 2028. But the Commission could anticipate the deadline, giving a six-month or 12-month notice, respectively.
digital-strategy.ec.europa.eu/en/library/d...
digital-strategy.ec.europa.eu/en/library/d...
It's Digital Omnibus and GDPR reform Day!
The COM proposals on the Digital Omnibus are the starting point of the legislative process and not its final result. digital-strategy.ec.europa.eu/en/library/d...
The COM proposals on the Digital Omnibus are the starting point of the legislative process and not its final result. digital-strategy.ec.europa.eu/en/library/d...
November 19, 2025 at 12:52 PM
It's Digital Omnibus and GDPR reform Day!
The COM proposals on the Digital Omnibus are the starting point of the legislative process and not its final result. digital-strategy.ec.europa.eu/en/library/d...
The COM proposals on the Digital Omnibus are the starting point of the legislative process and not its final result. digital-strategy.ec.europa.eu/en/library/d...
The legislature's last day for 2025 is November 19.
November 18, 2025 at 10:16 PM
The legislature's last day for 2025 is November 19.
Interesting!
November 17, 2025 at 10:11 PM
Interesting!
Reposted by Luis Alberto Montezuma 路易斯·阿尔贝托·蒙特祖玛
🚨 The Commission will propose a pause of up to 15 months for the EU AI Act’s high-risk regime, with the exact length to be confirmed on Wednesday. The pause is bundled into the AI omnibus, putting pressure on MEPs and countries to adopt it before August.
www.mlex.com/mlex/artific...
www.mlex.com/mlex/artific...
EU AI Act’s high-risk regime faces lengthy pause, with tight approval schedule | MLex | Specialist news and analysis on legal risk and regulation
The European Commission will propose a postponement of the entry into application of the AI Act's requirements on high-risk AI systems, with a final decision on the exact length — likely to be between...
www.mlex.com
November 17, 2025 at 4:10 PM
🚨 The Commission will propose a pause of up to 15 months for the EU AI Act’s high-risk regime, with the exact length to be confirmed on Wednesday. The pause is bundled into the AI omnibus, putting pressure on MEPs and countries to adopt it before August.
www.mlex.com/mlex/artific...
www.mlex.com/mlex/artific...
The Irish High Court has ruled, in the proceedings between TikTok and DPC, that there should be a stay on the latter’s enforcement action which would have stopped transfers of personal data to China, pending the determination of the substantive appeal. See lnkd.in/dR-xAHmz
November 17, 2025 at 3:18 PM
The Irish High Court has ruled, in the proceedings between TikTok and DPC, that there should be a stay on the latter’s enforcement action which would have stopped transfers of personal data to China, pending the determination of the substantive appeal. See lnkd.in/dR-xAHmz
How much is your data worth? Understanding personal data monetization
The CNIL commissioned a survey on the perception of the French towards the use of their personal data and consent to online advertising.
www.cnil.fr/fr/monetisat...
The CNIL commissioned a survey on the perception of the French towards the use of their personal data and consent to online advertising.
www.cnil.fr/fr/monetisat...
November 17, 2025 at 10:41 AM
How much is your data worth? Understanding personal data monetization
The CNIL commissioned a survey on the perception of the French towards the use of their personal data and consent to online advertising.
www.cnil.fr/fr/monetisat...
The CNIL commissioned a survey on the perception of the French towards the use of their personal data and consent to online advertising.
www.cnil.fr/fr/monetisat...
Council adopts rules clarifying the cross-border enforcement of GDPR. The regulation will enter into force 20 days after its publication in the Official Journal of the EU. It will become applicable 15 months after its entry into force. See www.consilium.europa.eu/en/press/pre...
Council adopts new EU law to speed-up handling of cross-border data protection complaints
The Council adopts a new law to improve cooperation between national data protection authorities when enforcing the GDPR.
www.consilium.europa.eu
November 17, 2025 at 9:56 AM
Council adopts rules clarifying the cross-border enforcement of GDPR. The regulation will enter into force 20 days after its publication in the Official Journal of the EU. It will become applicable 15 months after its entry into force. See www.consilium.europa.eu/en/press/pre...
Hessian Data Protection Authority (HBDI) sets parameters for processors' reuse of personal data for purposes as a data controller in the Microsoft report.
Full report: lnkd.in/dC_fquPn.
Full report: lnkd.in/dC_fquPn.
November 16, 2025 at 11:19 PM
Hessian Data Protection Authority (HBDI) sets parameters for processors' reuse of personal data for purposes as a data controller in the Microsoft report.
Full report: lnkd.in/dC_fquPn.
Full report: lnkd.in/dC_fquPn.
Today, the government of Bangladesh published Bangladesh's Personal Data Protection Ordinance, 2025 online (bdlaws.minlaw.gov.bd/act-1574.html). After the introduction of the Ordinance, the Government shall, by notification in the Official Gazette, publish a reliable English text.
ব্যক্তিগত উপাত্ত সুরক্ষা অধ্যাদেশ, ২০২৫
অধ্যাদেশ
bdlaws.minlaw.gov.bd
November 16, 2025 at 8:57 PM
Today, the government of Bangladesh published Bangladesh's Personal Data Protection Ordinance, 2025 online (bdlaws.minlaw.gov.bd/act-1574.html). After the introduction of the Ordinance, the Government shall, by notification in the Official Gazette, publish a reliable English text.
As the European Commission reviews the GDPR, could this lead countries following its GDPR standards to implement stricter data protection laws?
November 16, 2025 at 6:22 PM
As the European Commission reviews the GDPR, could this lead countries following its GDPR standards to implement stricter data protection laws?
The Enforcement Decree of Korea's AI Act is presently open for public consultation. See www.linkedin.com/posts/luisal...
When an AI system processes personal data, the AI Business Operator must ensure compliance with Korea's Personal Information Protection Act.
When an AI system processes personal data, the AI Business Operator must ensure compliance with Korea's Personal Information Protection Act.
November 16, 2025 at 3:09 PM
The Enforcement Decree of Korea's AI Act is presently open for public consultation. See www.linkedin.com/posts/luisal...
When an AI system processes personal data, the AI Business Operator must ensure compliance with Korea's Personal Information Protection Act.
When an AI system processes personal data, the AI Business Operator must ensure compliance with Korea's Personal Information Protection Act.
In a 137-page report, the Hessian Data Protection Commissioner (HBDI) concluded that a GDPR-compliant operation of M365 is now possible—provided that both Microsoft and the customer (the “controller”) fulfill their respective obligations. See www.linkedin.com/posts/luisal...
November 14, 2025 at 11:12 PM
In a 137-page report, the Hessian Data Protection Commissioner (HBDI) concluded that a GDPR-compliant operation of M365 is now possible—provided that both Microsoft and the customer (the “controller”) fulfill their respective obligations. See www.linkedin.com/posts/luisal...