Gabriela Zanfir-Fortuna

Last, the enforcement and supervisory landscape... is a beast. There are countries which have tasked different national authorities w the enforcement of a specific letter of para 1 of Article 5 AI Act❗Article 5 became enforceable in Aug, but the supervisory landscape is still very much blurry. END

The interplay of the prohibitions of the AI Act and the GDPR will need legal certainty - there are countless of GDPR enforcement cases around facial recognition technology in public spaces, for example. The good news is that the EDPB announced, soon, guidelines about the two acts' interplay.

3/x

We also identified some inconsistencies related to "in-house development of AI systems" between the European Commission Guidelines and the text of the AI Act, which might need further clarification.

2/x

This week, we launched a blog series exploring the "Red lines" drawn by the AI Act, a year after they became applicable.

Among our takeaways, we noted that the Act does not prohibit technology per se, but uses or practices of technology that pose unacceptable risk.1🧵

LINK: fpf.org/blog/red-lin...

My magazines this week 🫠

* But since I’m deep into these conversations at my job, at least they remind me the job is kind of relevant? 🤷‍♀️ 🧐

Agreed!

Amazing resource

Cc @gzf.bsky.social

India’s Global AI Pitch Masks A Troubling Reality At Home Without regulatory oversight and guardrails, AI in India will continue to function less as a public good and more as a tool of oppression, writes Tavishi.

Next week’s India AI Impact Summit is framed around “democratizing AI.” But as India expands AI-driven surveillance, predictive policing, and welfare automation, minorities and marginalized communities are bearing the costs, writes Tavishi.

IndiaAI IndiaAI Mission, an initiative by MeitY, is building a robust, inclusive AI ecosystem through democratized compute, high-quality data, talent, R&D, startup support, industry collaboration & ethical AI...

All events of the #AIImpactSummit in New Delhi will be live-streamed throughout next week and you can watch them here: m.youtube.com/@indiaai

India certainly wins at accessibility and inclusiveness. 👀

Is this what a touch of the Global Majority looks like on AI Governance? 🤞

Gabriela Zanfir-Fortuna: GDPR changes, AI Act hangover, Russmedia Listen now | The Digital Omnibus in its context, birth defects of the AI Act, South Korea, Russmedia

[EN] @gzf.bsky.social joined us last week to discuss proposed changes to the EU legal framework for #AI and digital services open.substack.com/pub/masterso... #GDPR #AIAct

Homeland Security Wants Social Media Sites to Expose Anti-ICE Accounts

This is how important the Chief Privacy Officer job is. www.nytimes.com/2026/02/13/t...

The Illusion of AGI, or What Language Models Can Do Without Thought It is not simple stubbornness that LLMs are not “intelligent,” much less a form of “general” intelligence, writes Eryk Salvaggio.

The most important question about AI isn't determining whether the machine thinks — it's whether interacting with it displaces the conditions under which we think, writes Eryk Salvaggio.

Casey - have you come across Joseph Weizenbaum’s Computer Power and Human Reason? He is the creator of the first chatbot, Eliza, at MIT in the 60s. He pulled the plug in horror after seeing the deep paychological impact of talking to the bot on his team 🙃

Casey - have you come across Joseph Weizenbaum’s Computer Power and Human Reason? He is the creator of the first chatbot, Eliza, at MIT in the 60s. He pulled the plug in horror after seeing the deep paychological impact of talking to the bot on his team 🙃

Thanks for the clarification!

La Commission européenne et la SFPIM perquisitionnées suite à une vente de biens immobiliers à l'État belge L'enquête porterait sur des irrégularités constatées dans la vente de bâtiments acquis par la Société fédérale de portefeuille et d'investissement...

The thing about Laura Codruta Kovesi is that she weeds out corruption like no one else I’ve ever seen in my life.

Her EPPO is also behind the Le Pen trial, the EEAS/College of Europe muddy case and now this:

www.lalibre.be/internationa...

Esta americana quere agradecer a Marimar, Maria la Del Barrio, Corazon Salvaje, Cafe con Aroma de Mujer y todas las telenovelas which ella watched en Rumania cuando era una nena y thanks to which ella ahora comprende so much Espanol 💃 Gracias, gracias, gracias ☺️

There seem to be millions of people who believe that if they ask an AI chatbot to "brainstorm" about a topic and then ask it to write a "first draft," it will still be a human-made work if they edit it.

I'm sorry, but it won't.

One of those things, I believe, is how art reflects in us as beholders. How it makes us feel.

Go to your local museum. Enjoy this small (big?) human indulgence.

If you’re in/around Detroit, DIA’s Anishinaabe Art exhibition is still on until April 5. 2/2

I've been thinking a lot lately about being human, about what is unique in the way we absorb the world and we are in the world, which is beyond computability. 1/2

Detroit Institute of Arts, Contemporary Anishinaabe Art exhibition (Norval Morriseau, “Bear, Fish, Bird - Interdependence”)

This feels less like a privacy perfect storm and more like an infrastructure reckoning. Once AI workloads and cross-border data flows collide with GDPR reform, control of compute and models becomes the real pressure point. Data localization isn’t just regulatory anymore—it’s strategic.

I’ve had many conversations with my fellow AI reporters about what moats we might have against the advancement of AI automation. Chief among them are developing relationships with human sources, reporting on scenes in person, and getting scoops that people wouldn’t entrust an AI with. But the things I love most about AI reporting are having an excuse to read really long computer science papers and then writing about them. I worry that if AI becomes a great writer and research assistant, AI journalism will mostly become about networking.

Last week @ellamarkianos.bsky.social pitched me on the idea of trying to replace herself with a bot. Ella is irreplaceable, but her piece on building "Claudella" is sharp, funny and moving www.platformer.news/journalism-j...

FPF Retrospective: U.S. Privacy Enforcement in 2025 The U.S. privacy law landscape continues to mature as new laws go into effect, cure periods expire, and regulators interpret the law through enforcement actions and guidance. State attorneys general a...

The U.S. privacy landscape has transitioned from a period of legislative expansion to one of regulatory maturation. Our latest retrospective highlights four key trends in privacy law enforcement in 2025. Read more. fpf.org/blog/fpf-ret...

A narrow road through the redwoods

breathe

... increased data sharing within complex AI agent models / tools and - for a lack of better word - "social medialisation" of chatbots with detailed profiles of users, using this for ads and the related pressure to keep users online for longer.

Only managed to read this now. Great piece. I particularly like the description of how rapidly the EU policy on re-opening GDPR changed. On LLMs, I always thought that models contain personal data. I think the big issues going forward will indeed be personalisation (increasing context windows), ...

Fascinating blog article that highlights how quickly EU data protection policy changed in 2025, how the rapid AI developments create data protection challenges, and how geopolitics plays into all of it.

Thank you very much for reading it and sharing, Norman!

2026: A Year at the Crossroads for Global Data Protection and Privacy Three forces are reshaping global data protection in 2026: GDPR’s reopening, rapid AI development, and expanding digital regulation amid geopolitics.

“AI models” as the new “data”? Maybe 👀 Here’s an overview of why I think Data Protection is at an inflection point.
Bonus: everything in the text comes from a complicated human mind, from iteration to writing. 🫣 Very rare thing these days.

#Privacy #GlobalPrivacy #AIModels

fpf.org/blog/2026-a-...

6 Privacy Tips for the Generative AI Era Data Privacy Day, or Data Protection Day in Europe, is recognized annually on January 28 to mark the anniversary of Convention 108, the first binding international treaty to protect personal data. The...

Happy #DataPrivacyDay! This year, we’re celebrating this important day in data protection history by highlighting some key privacy tips for how to keep your personal data safe when interacting with generative AI. We partnered with Snap Inc. to create a privacy-themed Lens. fpf.org/blog/6-priva...