Credits: European Commission

Digital Omnibus: Cookies, GDPR and AI Training - New European Privacy Rules

The Digital Omnibus Package introduces profound changes to GDPR and cookie rules: new consent exceptions, automated signals, and legitimate interest for AI training. Critical analysis of implications for privacy and fundamental rights.

20 November 2025 · 17 min · NicFab
Credits: European Commission

Digital Omnibus on AI: European Commission Proposes Simplifications to the AI Act

On November 19, 2025, the European Commission published the Digital Omnibus on AI, a proposal to amend the AI Act introducing significant simplifications: flexible timelines, centralized governance at the AI Office, extension of privileges to mid-caps, and new rules on sensitive data processing for bias mitigation.

19 November 2025 · 9 min · NicFab
Build your Prompt

Legal Prompting: The New Frontier of AI in the Legal Field

Guide to Legal Prompting techniques for legal professionals: from the anatomy of an effective prompt to advanced techniques (Chain-of-Thought, RAG), with a focus on GDPR compliance, hallucination risks, open source vs. cloud models, and best practices for law firms. Includes in-depth analysis of the limitations of RAG (Stanford Study 2025) and operational guidelines for the safe use of LLMs in the legal field.

6 November 2025 · 13 min · NicFab
European Parliament Study - Interplay between AI Act and EU Digital Legislative Framework

AI Act and EU Digital Legislation: A European Parliament Study Reveals Regulatory Complexity and Overlaps

A European Parliament study commissioned by the ITRE Committee analyzes the interactions between the AI Act and the EU digital legislative framework, highlighting regulatory overlaps, regulatory complexity and recommendations to ensure the competitiveness of the European AI industry.

30 October 2025 · 15 min · NicFab
EDPS Generative AI Guidelines - Version 2 - October 2025

EDPS Releases Revised Guidelines on Generative AI: Strengthening Data Protection in the Digital Era

In-depth analysis of the new EDPS guidelines (version 2) on the use of generative AI systems and compliance with Regulation (EU) 2018/1725. 16 key questions for EU institutions and bodies.

28 October 2025 · 15 min · NicFab
AI and Privacy Conference - Book Launch - Rome October 10, 2025

AI and Privacy: The Balance Between Innovation, Knowledge and Ethics in the Digital Age

Video of the conference held on October 10, 2025 in Rome for the presentation of the book ‘Artificial Intelligence, Privacy and Neural Networks: The Balance Between Innovation, Knowledge and Ethics in the Digital Age’.

11 October 2025 · 3 min · NicFab
DMA GDPR Guidelines Consultation

Public Consultation on Joint Guidelines on the Interplay between DMA and GDPR

Public consultation open until 4 December 2025 on guidelines regulating the interplay between Digital Markets Act and GDPR

9 October 2025 · 4 min · NicFab

Disclosure requirements on AI systems for Italian professionals: A Free Tool for Compliance with Italian Law 132/2025

Disclosure requirements on AI systems for Italian professionals: A Free Tool for Compliance with Italian Law 132/2025 From October 10, 2025, in Italy, a new regulatory obligation will come into force for all professionals who use artificial intelligence systems in the course of their work. Article 13 of Italian Law 132/2025 introduces a transparency requirement that requires professionals to inform clients about the use of AI in clear, simple, and comprehensive language. ...

3 October 2025 · 3 min · NicFab
Hush Line

Hush Line: The Open-Source Platform for Anonymous Whistleblowing

Hush Line: The Open-Source Platform for Anonymous Whistleblowing October 2025: European Cybersecurity Month October 1 marked the start of European Cybersecurity Month, an annual awareness campaign that offers practical guidance to EU citizens on how to stay safe online. The campaign is coordinated by the European Union Agency for Cybersecurity (ENISA) and the European Commission, with support from EU member states and hundreds of partners across Europe and beyond. This year’s theme is particularly relevant: combating phishing and social engineering. Currently, 60% of cyberattacks start with phishing, an attempt to steal information or gain access to systems through deceptive messages or fraudulent websites. The campaign’s motto, “Cybersecurity is a Shared Responsibility,” emphasizes a fundamental concept: cybersecurity is a collective responsibility. ...

2 October 2025 · 10 min · NicFab
Credits Adobe

Web Key Directory (WKD): Automatic E-mail Encryption with Your Domain Name

Web Key Directory: the technology that every email domain should adopt to ensure the authenticity and security of communications - TL;DR Why Encryption Is the Foundation of Digital Privacy Encryption is the technology that transforms readable information into incomprehensible code for anyone without the decryption key. It’s what protects banking transactions, government communications, and healthcare data. In the context of the European GDPR, strong encryption also enables the transfer of personal data outside the EU: when data is properly encrypted, individuals are no longer identifiable, simplifying regulatory compliance for international communications. Yet, paradoxically, the world’s most used communication technology – email – remains largely unencrypted, exposing billions of daily messages to potential interception. This article explores how the protocol Web Key Directory (WKD) finally solves this paradox, making email encryption simple and automatic: just as we now visit secure websites (HTTPS) without doing anything special, with WKD emails are also encrypted automatically without any user intervention. ...

27 September 2025 · 36 min · NicFab