PrivacySignal
GDPR / Intl

EDPB discusses focuses in draft anonymization, AI web scraping guidelines

IAPP · · International · GDPR & International

The European Data Protection Board is developing draft guidelines that address both anonymization standards and the use of AI web scraping, signaling a move to clarify how these practices align with EU data protection rules. The guidelines are still in draft form and reflect the EDPB's current enforcement and policy priorities.

Why this matters: Two issues in one set of guidelines, and both matter a lot. Anonymization rules determine whether companies can use your data freely or not — get the standard wrong and 'anonymous' data is just personal data with a fig leaf. Web scraping for AI training is how most large models were built, often without asking anyone. If the EDPB sets real limits here, it affects every AI company pulling data from the open web. These are not abstract rules. They decide whose data gets used, for what, and whether anyone is accountable for it.

Who should care: Lawyers · Privacy officers · AI governance · General readers · Policy

This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.

Analysis

All analysis →

Weekly Editorial Analysis from Experts and Editors

Related stories

GDPR / Intl
noyb (None of Your Business) · · EU

Open Letter: Civil society coalition urges EU to kill the cookie banner!

A coalition of 19 civil society groups, businesses, and academics has published an open letter urging EU institutions to support legally binding automated privacy signals as part of the Digital Omnibus package — a mechanism that would let people set privacy preferences once instead of clicking through cookie banners repeatedly. The tracking industry is opposing the proposal.

Who should care: Lawyers · Privacy officers · AI governance · Cybersecurity · General readers · Policy

#gdpr#surveillance#privacy Read original →
GDPR / Intl
The Guardian — Privacy · · International

Online bookies accused of UK privacy breaches with use of cookie banners

A study found that 86% of licensed UK gambling websites appear to be violating GDPR by nudging users toward accepting tracking, and in many cases harvesting data before any consent is given. The research accuses the industry of widespread non-compliance and what it describes as systematic data surveillance of customers.

Who should care: Lawyers · Privacy officers · AI governance · Compliance · Cybersecurity · General readers · Policy

#gdpr#regulation#surveillance#privacy Read original →
GDPR / Intl
W WilmerHale · · International

Washington Attorney General Publishes First Data Privacy Report

Washington's Attorney General has released the office's first report focused on data privacy, marking a new phase of public accountability for how the state enforces privacy protections.

Who should care: Lawyers · Privacy officers · Compliance · General readers · Policy

#state-privacy#privacy Read original →
GDPR / Intl
noyb (None of Your Business) · · EU

Supreme Court: CRIF illegally collected data of millions in Austria. Way clear for class action!

Austria's Supreme Court has ruled that credit reference agency CRIF violated GDPR's purpose limitation principle by collecting personal data from address publishers without a lawful basis. The decision, secured before a full hearing, strengthens a parallel class action brought by privacy group noyb on behalf of millions of affected Austrians.

Who should care: Lawyers · Privacy officers · AI governance

GDPR / Intl
BBC — Tech · · International

Reform of all social media should come with Meta changes, UN says

The United Nations has called for broad social media reform to accompany any changes made to Meta's platforms, framing child safety and platform accountability as an industry-wide issue. Separately, California's attorney general is pressing TikTok and YouTube to adopt teen safety measures.

Who should care: Lawyers · Privacy officers · Compliance

#state-privacy Read original →