The EDPB has published a harmonised DPIA template, now open for public consultation until 9 June 2026. The template introduces a clear methodological distinction between risks inherent in the processing design and risks arising from non-default events. An analysis of its structure and implications for practitioners.
AI agents under the AI Act: when customisation, integration or rebranding triggers reclassification from deployer to provider under Article 25. Decision table, compliance checklist and first 5 actions.
The Council adopted its general approach on 13 March 2026, and IMCO and LIBE approved their joint report on 18 March. A comparative analysis of the two negotiating mandates: convergence on fixed deadlines and a ban on sexual deepfakes, divergence on the transitional period for AI marking and the scope of the AI Office.
Comparative analysis of the IMCO-LIBE Draft Report PE782.530 (rapporteurs Kokalari and McNamara) against the Commission’s proposal COM(2025) 836: fixed deadlines replacing discretionary mechanisms, AI literacy obligation maintained on providers and deployers, strict necessity standard for sensitive data processing, presumption of conformity with the Cyber Resilience Act, and data protection authorities’ involvement in regulatory sandboxes.
On November 19, 2025, the European Commission published the Digital Omnibus on AI, a proposal to amend the AI Act introducing significant simplifications: flexible timelines, centralized governance at the AI Office, extension of privileges to mid-caps, and new rules on sensitive data processing for bias mitigation.
Guide to Legal Prompting techniques for legal professionals: from the anatomy of an effective prompt to advanced techniques (Chain-of-Thought, RAG), with a focus on GDPR compliance, hallucination risks, open source vs. cloud models, and best practices for law firms. Includes in-depth analysis of the limitations of RAG (Stanford Study 2025) and operational guidelines for the safe use of LLMs in the legal field.