Eduardo Ustaran

When the sunrise is really the moonset.

AI Skills for Life and Work: summary report

If this initiative is able to help us all properly understand what AI can and cannot do, it will be a truly successful one.
www.gov.uk/government/p...

One of the ways in which the UK is expected to specifically regulate #AI is in relation to live facial recognition for law enforcement purposes. Not a bad idea given the level of privacy intrusiveness, but very unlikely to become a “prohibited AI practice” as in the EU.

Will ChatGPT Ads Change OpenAI? + Amanda Askell Explains Claude's New Constitution

The conversation by @kevinroose.com and @caseynewton.bsky.social with Amanda Askell about how to train an #AI LLM to adopt the right values is so thought provoking at so many levels. This has to be one of the most consequential debates of our time.
open.spotify.com/episode/4xFz...

Those developing or seeking to deploy high-risk #AI systems now need to decide whether to spend the next 6 months preparing for compliance or to take the view that implementation will be delayed and stay put for now. Not an easy decision but at least a middle ground approach would be prudent.

This is very telling and may lead to split the section of the #AI Act Omnibus dealing with timings from the section dealing with material changes, as otherwise it may not pass on time before the high-risk AI systems obligations kick in this Summer.👇

Anyone doing the #BigGardenBirdWatch this weekend? I hope this little rascal doesn’t sabotage my efforts…

QFC, DIFC and ADGM advance regional data protection cooperation through mutual adequacy recognition The Qatar Financial Centre (QFC), Dubai International Financial Centre (DIFC), and Abu Dhabi Global Market (ADGM) have taken a significant step forward in regional regulatory cooperation by mutually r...

In a world where tensions and disagreements appear to be on the increase, this is welcome news that shows how international collaboration on data protection matters leads to practical benefits for businesses and individuals.
www.hoganlovells.com/en/publicati...

Processor BCR gets an upgrade: Inside the EDPB’s new draft recommendations The European Data Protection Board (EDPB)has adopted its draftRecommendations 1/2026 on Binding Corporate Rules for Processors (BCR-P)(“Recommendations”). The draft Recommendations aim to update and r...

Our take on the new draft requirements for Processor BCR. The EDPB has certainly raised the bar, but with everything going on in the world right now, the “holy grail” of lawful data flows is about to become even more important and sought after.
www.hoganlovells.com/en/publicati...

Kudos to @infocommission.bsky.social for its impressive report on agentic #AI its data protection implications for several reasons:
1️⃣Super-comprehensive insights of agentic AI.
2️⃣Thorough & realistic legal analysis.
3️⃣Positive mindset about embedding data protection into AI.
ico.org.uk/about-the-ic...

Happy New Year to you too. One that already needs an extra dose of optimism and kindness.

The Data Chronicles: 2025 wrapped and 2026 predictions In our annual “Look Back, Look Forward” edition of The Data Chronicles, Scott Loughlin and Eduardo Ustaran, co-leads of Hogan Lovells' Global Data, Privacy and Cybersecurity practice, reflect on the m...

If you are considering your strategic priorities for this year, our last Data Chronicles podcast of 2025, in which we discuss what’s going to be big in 2026 may be a good way to start. Happy New Year!
www.hoganlovells.com/en/publicati...

2025 wrapped and 2026 predictions

Spotify does it… Strava does it… LinkedIn does it… So here is our 2025 wrapped for you.
Our traditional chit chat about what’s been big in privacy, cyber and digital regulation this year and what to look out for in 2026. 🎉
open.spotify.com/episode/5KNy...

There is a lot to unpack in this piece about the rapidly evolving nature of #AI and our interaction with it, but for me the most telling thing is the scale of our need for emotional support. Not surprising but still telling and something to think about.

This agentic #AI webinar is a great example of digital regulation in practice. In this respect, the UK should be seen as a role model of how different regulators can collaborate among themselves and engage with businesses to alert them to their responsibilities.
www.drcf.org.uk/news-and-eve...

Nothing beats optimism backed by scientific evidence.
If the unhealthy geopolitical noise around us ever makes you think that the world is going backwards, don’t despair. Many efforts are still going in the right direction and good things are happening.

My concept of “common sense” is essentially the ability to distinguish between right and wrong, or good and bad, or indeed love and hate, not based on a probabilistic rationalisation but on an intrinsic human trait.

Having now read this fascinating article, I fully recognise its logic and appreciate the crucial importance of its conclusion, but machine-consciousness still seems to be the result of mathematical formulas which could be numerically right but in conflict with common sense.

Thanks. From my perspective, consciousness is inherently human in the sense that a machine is simply replicating human-like traits using mathematics, but I will read this piece with great interest.

This year our traditional pre-Christmas Active Outing took us alongside the Thames from Richmond to Hammersmith.

Populism and polarisation are hardly new…

A wonderful read to get you in the Christmas spirit with a smile. 👇

Call me a data protection nerd but the real question is not whether you are happy with your ‘listening age’, but whether this wonderful conversation starter that Spotify has come up with is compliant with Art. 5(1)(d) GDPR… 🤔

I can imagine.
They are all beautiful.
And then there is the violin concerto to top it off.

You absolutely need to get to concerto No. 5 and your life will change forever. Any recording will do but if you have to choose one, try the one by Rudolf Serkin and the Bavarian Radio Symphony Orchestra.

Children’s online privacy in mobile games under spotlight We are today announcing that we will be scrutinising how popular mobile games played by children in the UK protect their online privacy.

To evidence this, the Information Commissioner's Office is launching a review of the data practices of 10 popular mobile games played by children in the UK.

ico.org.uk/about-the-ic...

If you are already thinking about the year ahead and what the top concerns of #privacy regulators will be, the intersection between #AI, #biometrics and children data is a good place to start.

This is fact checking at its best.
This is actually a milestone in the fight against disinformation because when facts are on your side, not even the most populist of populists can fool you.
This is the evidence that will kill this unnecessary debate for good: Die Hard is a Christmas movie.💪🏼🎄

Polarisation in digital simplification “Polarisation eliminates the possibility of a middle ground, pushing every single person and organisation to take sides”, compellingly explains Moisés Naím in The Revenge of Power. This phenomenon, wh...

The cacophony surrounding the Digital Omnibus makes it difficult to assess its real impact, but may the @ec.europa.eu actually be setting the next global baseline for #privacy, #cybersecurity and #AI regulation?
www.linkedin.com/pulse/polari...

The UK’s proposed Cyber Security and Resilience Bill On 12 November 2025 the UK Government introduced its highly anticipated Cyber Security and Resilience (Network and Information Systems) Bill (the “Bill”) to Parliament. The Bill is the first major ove...

Meanwhile in the UK…
A very British version of NIS2 coming our way with a lighter touch than the EU one (until you get to the potential sanctions for non compliance that is).
www.hoganlovells.com/en/publicati...