Expertise

Building a GPAI? You might be the provider

Is your model a General-purpose AI model? And are you the Provider? Find out here.

General-Purpose AI Code of Practice: what you need to know

A few days after finding out there will be no pause in the AI Act, the long-awaited Code of practice on General-Purpose ...

What the DUAA means for your organisation

The Data (Use and Access) Act of 2025 received royal assent on June 19, 2025 (DUAA). As it reforms the UK data protectio...

How to get started with AI Governance

As AI systems become embedded across business operations, the question isn’t whether they require governance, but how to...

No Pause for the EU AI Act

The “Stop the Clock” on the EU AI Act's initiative, rejected by the European Commission according to their spokesperson.

DastraNews: What happened in Privacy & AI in June 2025?

Privacy & AI insights from the Dastra hub: actionable updates for pros who work daily in the field.

Privacy Champions Management Guide

Discover our new Guide on the management of Privacy Champions!

DastraNews: What happened in April 2025?

Privacy insights from the Dastra hub — actionable updates for everyday privacy pros.

Data Privacy Framework (DPF): the third fruitless attempt?

Adopted in 2023, the Data Privacy Framework (DPF) was intended to turn the page on the failures of Safe Harbor and Priva...

AI Act & GDPR

The European Regulation on AI (or AI Act) was recently published in the Official Journal of the European Union. Who is a...

Purely Commercial Interest and the GDPR: A Legitimate Interest? Yes, But…

While consent is often seen as the go-to legal basis for processing personal data in a commercial context, the Court of ...

Subprocessing under the GDPR: Key Implications of the EDPB’s October 2024 Opinion

Faced with increasingly complex subcontracting chains, the position taken by the EDPS clarifies a fundamental point of t...