Luis Alberto Montezuma 路易斯·阿尔贝托·蒙特祖玛
@montezumachavez.bsky.social
Happy 2026!
The EU Commission has launched a call for feedback on the Digital Omnibus, at lnkd.in/dZvgEQWr.
Digital Omnibus Regulation Proposal: lnkd.in/dzAdAUaS.
Digital Omnibus on AI Regulation Proposal: lnkd.in/dSxvAnjs.
The EU Commission has launched a call for feedback on the Digital Omnibus, at lnkd.in/dZvgEQWr.
Digital Omnibus Regulation Proposal: lnkd.in/dzAdAUaS.
Digital Omnibus on AI Regulation Proposal: lnkd.in/dSxvAnjs.
November 24, 2025 at 9:29 PM
Happy 2026!
The EU Commission has launched a call for feedback on the Digital Omnibus, at lnkd.in/dZvgEQWr.
Digital Omnibus Regulation Proposal: lnkd.in/dzAdAUaS.
Digital Omnibus on AI Regulation Proposal: lnkd.in/dSxvAnjs.
The EU Commission has launched a call for feedback on the Digital Omnibus, at lnkd.in/dZvgEQWr.
Digital Omnibus Regulation Proposal: lnkd.in/dzAdAUaS.
Digital Omnibus on AI Regulation Proposal: lnkd.in/dSxvAnjs.
Google has filed an appeal against the European Commission's decision on adtech and data-related practices (See ec.europa.eu/commission/p...). The decision is not yet available.
November 24, 2025 at 1:02 PM
Google has filed an appeal against the European Commission's decision on adtech and data-related practices (See ec.europa.eu/commission/p...). The decision is not yet available.
Data collection mechanisms for AI
training
training
November 23, 2025 at 10:54 PM
Data collection mechanisms for AI
training
training
If you believe in convergence between data protection and competition, the Italian Competition Authority closed its investigation launched in July 2024 into Google’s request for consent to “linking” user activity across its services. lnkd.in/dyK-sgeB
November 23, 2025 at 10:16 PM
If you believe in convergence between data protection and competition, the Italian Competition Authority closed its investigation launched in July 2024 into Google’s request for consent to “linking” user activity across its services. lnkd.in/dyK-sgeB
Consent is usually required for most uses, including BA and TA purposes. However, the proposed Digital Omnibus permits processing of personal data in AI systems based on "legitimate interests," unless Article 5(2) DMA applies.
November 23, 2025 at 7:35 PM
Consent is usually required for most uses, including BA and TA purposes. However, the proposed Digital Omnibus permits processing of personal data in AI systems based on "legitimate interests," unless Article 5(2) DMA applies.
From 2018 to 2023, Meta used data for TA without consent, violating GDPR. A Spanish court ruled this gave Meta an unfair advantage, citing EDPB and DPC decisions. While TA requires consent, the Digital Omnibus may permit AI use under "LI," except as restricted by Article 5(2).
November 23, 2025 at 6:14 PM
From 2018 to 2023, Meta used data for TA without consent, violating GDPR. A Spanish court ruled this gave Meta an unfair advantage, citing EDPB and DPC decisions. While TA requires consent, the Digital Omnibus may permit AI use under "LI," except as restricted by Article 5(2).
CAC has proposed draft requirements for Large Online Platforms under the PIPL. The proposed regulation establishes the data portability right and requires organizations to respond to data portability requests within one month in a machine-readable format.
www.cac.gov.cn/2025-11/22/c...
www.cac.gov.cn/2025-11/22/c...
November 22, 2025 at 2:21 PM
CAC has proposed draft requirements for Large Online Platforms under the PIPL. The proposed regulation establishes the data portability right and requires organizations to respond to data portability requests within one month in a machine-readable format.
www.cac.gov.cn/2025-11/22/c...
www.cac.gov.cn/2025-11/22/c...
California Attorney General Rob Bonta today announced a settlement with Jam City, Inc. resolving allegations that the mobile app gaming company violated the California Consumer Privacy Act (CCPA) by failing to offer consumers methods to opt-out of the sale or sharing of their personal information.
November 21, 2025 at 11:59 PM
California Attorney General Rob Bonta today announced a settlement with Jam City, Inc. resolving allegations that the mobile app gaming company violated the California Consumer Privacy Act (CCPA) by failing to offer consumers methods to opt-out of the sale or sharing of their personal information.
The Digital Omnibus Proposal allows biometric data processing exceptions for identity verification, provided individuals solely control their data. This Norwegian DPA report will examine the legal challenges of "SALT" and biometric verification via Mobai's technology.
November 20, 2025 at 11:03 PM
The Digital Omnibus Proposal allows biometric data processing exceptions for identity verification, provided individuals solely control their data. This Norwegian DPA report will examine the legal challenges of "SALT" and biometric verification via Mobai's technology.
With new California Consumer Privacy Act (CCPA) regulations going into effect January 1, 2026, here are seven things businesses should know and prepare for.
November 20, 2025 at 8:43 PM
With new California Consumer Privacy Act (CCPA) regulations going into effect January 1, 2026, here are seven things businesses should know and prepare for.
If you believe in convergence between data protection and competition, this decision is for you: A Spanish court has ordered Meta to pay 479 million euros to Spanish digital media outlets for unfair competition practices and infringing GDPR. See www.linkedin.com/posts/luisal....
November 20, 2025 at 12:17 PM
If you believe in convergence between data protection and competition, this decision is for you: A Spanish court has ordered Meta to pay 479 million euros to Spanish digital media outlets for unfair competition practices and infringing GDPR. See www.linkedin.com/posts/luisal....
The COE has published non-binding Model Contractual Terms for data access and use and Standard Contractual Clauses for cloud computing contracts. See digital-strategy.ec.europa.eu/en/library/d...
November 19, 2025 at 1:44 PM
The COE has published non-binding Model Contractual Terms for data access and use and Standard Contractual Clauses for cloud computing contracts. See digital-strategy.ec.europa.eu/en/library/d...
The proposal states that personal data can be processed for AI models under legitimate interest, unless laws like Article 5(2) of the DMA specifically require consent, such as for designated gatekeepers.
November 19, 2025 at 1:19 PM
The proposal states that personal data can be processed for AI models under legitimate interest, unless laws like Article 5(2) of the DMA specifically require consent, such as for designated gatekeepers.
It's Digital Omnibus and AI Act Reform Day!
The COM proposals on the Digital Omnibus are the starting point of the legislative process and not its final result. See digital-strategy.ec.europa.eu/en/library/d...
The COM proposals on the Digital Omnibus are the starting point of the legislative process and not its final result. See digital-strategy.ec.europa.eu/en/library/d...
November 19, 2025 at 1:06 PM
It's Digital Omnibus and AI Act Reform Day!
The COM proposals on the Digital Omnibus are the starting point of the legislative process and not its final result. See digital-strategy.ec.europa.eu/en/library/d...
The COM proposals on the Digital Omnibus are the starting point of the legislative process and not its final result. See digital-strategy.ec.europa.eu/en/library/d...
It's Digital Omnibus and GDPR reform Day!
The COM proposals on the Digital Omnibus are the starting point of the legislative process and not its final result. digital-strategy.ec.europa.eu/en/library/d...
The COM proposals on the Digital Omnibus are the starting point of the legislative process and not its final result. digital-strategy.ec.europa.eu/en/library/d...
November 19, 2025 at 12:52 PM
It's Digital Omnibus and GDPR reform Day!
The COM proposals on the Digital Omnibus are the starting point of the legislative process and not its final result. digital-strategy.ec.europa.eu/en/library/d...
The COM proposals on the Digital Omnibus are the starting point of the legislative process and not its final result. digital-strategy.ec.europa.eu/en/library/d...
The legislature's last day for 2025 is November 19.
November 18, 2025 at 10:16 PM
The legislature's last day for 2025 is November 19.
Interesting!
November 17, 2025 at 10:11 PM
Interesting!
The Irish High Court has ruled, in the proceedings between TikTok and DPC, that there should be a stay on the latter’s enforcement action which would have stopped transfers of personal data to China, pending the determination of the substantive appeal. See lnkd.in/dR-xAHmz
November 17, 2025 at 3:18 PM
The Irish High Court has ruled, in the proceedings between TikTok and DPC, that there should be a stay on the latter’s enforcement action which would have stopped transfers of personal data to China, pending the determination of the substantive appeal. See lnkd.in/dR-xAHmz
How much is your data worth? Understanding personal data monetization
The CNIL commissioned a survey on the perception of the French towards the use of their personal data and consent to online advertising.
www.cnil.fr/fr/monetisat...
The CNIL commissioned a survey on the perception of the French towards the use of their personal data and consent to online advertising.
www.cnil.fr/fr/monetisat...
November 17, 2025 at 10:41 AM
How much is your data worth? Understanding personal data monetization
The CNIL commissioned a survey on the perception of the French towards the use of their personal data and consent to online advertising.
www.cnil.fr/fr/monetisat...
The CNIL commissioned a survey on the perception of the French towards the use of their personal data and consent to online advertising.
www.cnil.fr/fr/monetisat...
Hessian Data Protection Authority (HBDI) sets parameters for processors' reuse of personal data for purposes as a data controller in the Microsoft report.
Full report: lnkd.in/dC_fquPn.
Full report: lnkd.in/dC_fquPn.
November 16, 2025 at 11:19 PM
Hessian Data Protection Authority (HBDI) sets parameters for processors' reuse of personal data for purposes as a data controller in the Microsoft report.
Full report: lnkd.in/dC_fquPn.
Full report: lnkd.in/dC_fquPn.
As the European Commission reviews the GDPR, could this lead countries following its GDPR standards to implement stricter data protection laws?
November 16, 2025 at 6:22 PM
As the European Commission reviews the GDPR, could this lead countries following its GDPR standards to implement stricter data protection laws?
The Enforcement Decree of Korea's AI Act is presently open for public consultation. See www.linkedin.com/posts/luisal...
When an AI system processes personal data, the AI Business Operator must ensure compliance with Korea's Personal Information Protection Act.
When an AI system processes personal data, the AI Business Operator must ensure compliance with Korea's Personal Information Protection Act.
November 16, 2025 at 3:09 PM
The Enforcement Decree of Korea's AI Act is presently open for public consultation. See www.linkedin.com/posts/luisal...
When an AI system processes personal data, the AI Business Operator must ensure compliance with Korea's Personal Information Protection Act.
When an AI system processes personal data, the AI Business Operator must ensure compliance with Korea's Personal Information Protection Act.
In a 137-page report, the Hessian Data Protection Commissioner (HBDI) concluded that a GDPR-compliant operation of M365 is now possible—provided that both Microsoft and the customer (the “controller”) fulfill their respective obligations. See www.linkedin.com/posts/luisal...
November 14, 2025 at 11:12 PM
In a 137-page report, the Hessian Data Protection Commissioner (HBDI) concluded that a GDPR-compliant operation of M365 is now possible—provided that both Microsoft and the customer (the “controller”) fulfill their respective obligations. See www.linkedin.com/posts/luisal...
While I am still reviewing the Digital Personal Data Protection Rules (DPDP Rules) 2025 (see lnkd.in/dGP429au, the Dutch DPA has released a report on AI systems for making risk assessments regarding criminal offences. See lnkd.in/dTiEEbtH
November 14, 2025 at 8:48 PM
While I am still reviewing the Digital Personal Data Protection Rules (DPDP Rules) 2025 (see lnkd.in/dGP429au, the Dutch DPA has released a report on AI systems for making risk assessments regarding criminal offences. See lnkd.in/dTiEEbtH