NicFab Newsletter #04

Newsletter #04 - January 20, 2026

NicFab Newsletter Issue 4 | January 20, 2026 Privacy, Data Protection, AI, and Cybersecurity Welcome to issue 4 of the weekly newsletter dedicated to privacy, data protection, artificial intelligence, cybersecurity and ethics. Every Tuesday you will find a curated selection of the most relevant news from the previous week, with a focus on European regulatory developments, case law, enforcement and technological innovation. In this issue Italian Privacy Authority EDPS: TechSonar on Agentic AI European Commission European Parliament Council of the EU Court of Justice EU Digital Markets & Platform Regulation Artificial Intelligence Cybersecurity Tech & Innovation AI Act in Pills – Part 3 Upcoming Events Analytical Commentary ITALIAN DATA PROTECTION AUTHORITY Italian DPA: Board Member Guido Scorza Resigns The Italian Data Protection Authority (Garante per la protezione dei dati personali) announced the resignation of Guido Scorza from his position as a member of the Authority’s Board, effective January 17, 2026. Scorza’s departure represents a significant change in the composition of Italy’s privacy regulatory body. ...

20 January 2026 Â· 23 min Â· Nicola Fabiano
NicFab Newsletter #03

Newsletter #03 - January 13, 2026

NicFab Newsletter Issue 3 | January 13, 2026 Privacy, Data Protection, AI, and Cybersecurity This issue officially kicks off 2026 for the NicFab Newsletter, a year that promises to be particularly significant for the evolution of personal data protection and the Regulation of artificial intelligence. The publication resumes regularly after the holiday break, aiming to continue offering a critical and systemic analysis of the main regulatory, institutional, and technological developments. ...

13 January 2026 Â· 10 min Â· Nicola Fabiano
Illustration on WhatsApp metadata privacy

WhatsApp, metadata and privacy: when the problem is not the content but the context

In the final months of 2025 and early 2026, two independent studies highlighted significant vulnerabilities in WhatsApp’s metadata management. The University of Vienna and SBA Research demonstrated the ability to enumerate 3.5 billion accounts through the contact discovery mechanism, while Tal Be’ery (Zengo) showed how cryptographic key IDs allow inference of operating system, device type, and approximate session age. Meta has begun implementing fixes, but the privacy implications remain significant. This article analyzes the nature of metadata, WhatsApp-specific risks, and presents open source alternatives based on federated protocols such as XMPP and Matrix.

5 January 2026 Â· 17 min Â· NicFab
Illustration of European artificial intelligence regulation

Search Engines and Artificial Intelligence: Between Technological Transformation and Emerging Risks

2025 closes with two publications that, read together, provide a comprehensive picture of the ongoing transformations in the online search sector. EPRS analyzes the macro-systemic impact on the open web, while Gartner focuses on the security risks of agentic browsers. The convergence of these perspectives reveals a transformation affecting online search as critical infrastructure, with implications for the digital market, data protection, cybersecurity, and the European regulatory framework.

29 December 2025 Â· 12 min Â· NicFab
NicFab Newsletter #02

Newsletter #02 - December 23, 2025

NicFab Newsletter Issue 2 - December 23, 2025 Privacy, Data Protection, AI, Cybersecurity & Tech Law - Weekly Review Welcome to issue 2 of the weekly newsletter dedicated to privacy, data protection, artificial intelligence, cybersecurity, and ethics. Every Tuesday, you will find a carefully selected list of the most relevant news items from the previous week, with a focus on European regulatory developments, case law, enforcement, and technological innovation. FROM THE PREVIOUS WEEK (December 16, 2025 - December 21, 2025) 🇮🇹 ITALIAN DATA PROTECTION AUTHORITY Unsolicited marketing: Verisure Italia fined €400,000 The Italian Data Protection Authority has fined Verisure Italia S.r.l. for the unlawful processing of personal data for marketing purposes. The measure stems from a complaint by a former customer who continued to receive unwanted promotional text messages even after objecting to the processing, and from a report by a potential customer who, after requesting a quote, began receiving advertising calls, emails, and text messages despite exercising their right to object. ...

23 December 2025 Â· 17 min Â· Nicola Fabiano
NicFab Newsletter #01

Newsletter #01 - December 16, 2025

NicFab Newsletter Issue 1 - December 16, 2025 Privacy, Data Protection, AI, Cybersecurity & Tech Law - Weekly Review Welcome to the first issue of the weekly newsletter dedicated to privacy, data protection, artificial intelligence, cybersecurity, and ethics. Every Tuesday, you’ll find a curated selection of the most relevant news from the previous week, with a focus on European regulatory developments, case law, enforcement, and technological innovation. FROM THE PREVIOUS WEEK (December 8-14, 2025) FROM MY BLOG Cloud and AI Development Act: Europe Accelerates Digital Sovereignty with AI Gigafactories ...

16 December 2025 Â· 18 min Â· Nicola Fabiano
NicFab Newsletter #00

Newsletter #00 - December 9, 2025

📬 NicFab Newsletter Issue Zero - December 9, 2025 Privacy, Data Protection, AI, Cybersecurity & Tech Law - Weekly Review Welcome to the inaugural issue of the weekly newsletter dedicated to privacy, data protection, artificial intelligence, cybersecurity, and ethics. Every Tuesday, you’ll find a curated selection of the most relevant news from the previous week, with a focus on European regulatory developments, case law, enforcement, and technological innovation. 📰 FROM LAST WEEK (December 1-7, 2025) 🖊️ FROM MY BLOG Safer Internet Forum 2025 and the European Framework for Child Online Protection ...

9 December 2025 Â· 10 min Â· Nicola Fabiano
Illustration representing child online protection and the European digital framework for children's safety on the Internet

Safer Internet Forum 2025 and the Comprehensive EU Framework for Child Online Protection

On December 3, 2025, the European Commission announced the opening of Safer Internet Forum 2025, highlighting three fundamental pillars: DSA guidelines on protection of minors (July 14, 2025), age verification blueprint (July and October 2025), and first enforcement actions against platforms including Snapchat, YouTube, Apple App Store, and Google Play (October 2025). A comprehensive analysis of the European framework for child online safety.

4 December 2025 Â· 9 min Â· NicFab
European Digital Competence Framework DigComp 3.0

DigComp 3.0: European Digital Competence Framework - Fifth Edition

DigComp 3.0 introduces substantial updates to address AI competence, cybersecurity, digital wellbeing, and misinformation challenges. With over 500 new learning outcomes, the framework guides digital skill development across the EU for citizens, workers, and students.

27 November 2025 Â· 28 min Â· NicFab
Shubham on Unsplash

Privacy Enhancing Technologies (PETs): an evergreen category - part 2

PETs in the age of the Web3

27 July 2023 Â· 5 min Â· NicFab