EU focus Primary sources first Practical analysis

EU privacy and AI law, made practical

A weekly, source-based update on regulatory change, enforcement and emerging risks: what happened, what it means and what to watch.

The system is fully automated: the briefings are drafted and cross-checked by AI language models, Anthropic's Claude and OpenAI's ChatGPT.

Add a weekly reminder Read the latest issue

Primary EU sources A five-minute read

Built for the people who turn updates into decisions

For DPOs, privacy lawyers, compliance teams and digital-policy professionals.

Concise, cited summaries

A clear summary of each development, with the source linked at the point where it matters.

Status and analysis labels

See what is confirmed or still developing, and where the newsletter adds editorial analysis.

Searchable archive

Find past developments by topic, jurisdiction or authority, with a permanent link for each item.

Designed for a quick read

Read the full issue in about five minutes, or scan the key points in a minute or two.

Latest issue Issue 11 · 12 November 2026

Inside this week

What's in the latest issue

~5 min read In focus, developments and enforcement Primary sources first

In Focus

Data protection authorities must in principle give complainants access to their data

Read the deep dive →

EU / Germany The Court of Justice: a data protection authority handling a complaint must in principle give the complainant access to their own data.
Denmark A nursing home trial of AI camera sensors needed a DPIA and a real risk assessment before it started.
France The CNIL's recommendation on session replay tools: consent first, then mask what is not needed.
France / Estonia Ten CNIL fines for local authorities' security failings, and an Estonian reprimand over real data in test systems.

Read the latest issue

Written by Gvantsa Gabaidze

Gvantsa is a data protection lawyer with over eight years of legal and regulatory experience. She spent five years at Georgia's data protection supervisory authority. Today, she advises organisations on GDPR and Georgian data protection compliance, including as part of an outsourced DPO service.

Privacy × AI is powered by a fully automated system designed by Gvantsa. It collects, cross-checks and turns developments in EU privacy and AI law into practical briefings. Every reported development is linked to its primary source, allowing the information to be verified independently.

Get Privacy × AI every Thursday

No sign-up and no email needed. Add a weekly reminder to your own calendar and read each issue here on Thursday.

Add to Google Calendar

Apple or Outlook: download the reminder (.ics). Privacy × AI receives no personal data when you add the reminder; the event is created in your own calendar. See our Privacy Notice.

Sources and references · Latest issue · Archive · Privacy Notice

How the brief is prepared and checked

This newsletter is prepared with the help of AI and goes through several stages of review. Please check the original source before relying on the information presented here.