Wow, if @EU_Commission #GDPR modification proposal passes, AI will be able to train on sensitive data! "The development of certain AI systems and AI models may involve the collection of large amounts of data, including personal data and special categories thereof. In order not to disproportionately hinder the development and operation of AI derogating from the prohibition on processing special categories of personal data under Article 9(2) of Regulation (EU) 2016/679 should be allowed."
It will also put a stop to TROLLING and misusing #GDPR by certain individuals: "the right of access, which is from the outset favourable to data subjects, should not be abused or exploited by them for purposes other than the protection of their data. For example, such an abuse of the right of access would arise where the data subject intends to cause the controller to refuse an access request, in order to subsequently demand the payment of compensation, potentially under the threat of bringing a claim for damages. Other examples of abuse include situations where data subjects make excessive use of the right of access with the only intent of causing damage or harm to the controller"
They actually CHANGE the definition of personal data! in #GDPR
"Information relating to a natural person is not necessarily personal data for every other person or entity, merely because another entity can identify that natural person. Information shall not be personal for a given entity where that entity cannot identify the natural person to whom the information relates, taking into account the means reasonably likely to be used by that entity. Such information does not become personal for that entity merely because a subsequent recipient has means reasonably likely to be used to identify the natural person to whom the information relates" -- it is very helpful in some cases, but may introduce loopholes.
Nov 7, 2025 · 9:50 AM UTC
Cookie-consent is killed. Except for news sites/media. DO NOT TRACK IS BACK. (wired.com/story/a-second-lif…). "1. The data subject shall be able to [give consent or] refuse a request for consent and exercise the right to object pursuant to Article 21(2) through automated and machine-
readable means.
2. Controllers shall ensure that their online interfaces are able to interpret the automated and machine-readable indications of data subjects’ [acceptance or] refusal or acceptance to a request for consent and the exercise of the right to object as referred to in paragraph 1 and respect those indications. This obligation shall apply [6 months] following the publication of the harmonised standards pursuant to paragraph 4.
3. The obligation pursuant to paragraph 2 shall not apply to controllers that are media
service providers when providing a media service."
Data Governance Act (Regulation (EU) 2022/868) is repealed (i.e. killed). Probably good. I hope that someone still got promoted for passing this one ;) This one is also killed: Regulation (EU) 2019/1150 of the European Parliament and of the Council of 20 June 2019 on promoting fairness and transparency for business users of online intermediation services, as well as this one: Regulation (EU) 2018/1807 of the European Parliament and of the Council of 14 November 2018 on a framework for the free flow of non-personal data in the European Union
