3 articles
Training data
What goes into the model: scraped corpora, customer data, fine-tuning sets, and the rights that follow.
GDPR + AI
A customer asks 'what does your AI know about me?' How to answer an Article 15 request when you ship LLM features
GDPR Article 15 for AI stacks after CEF 2024 and CJEU C-203/22. The copy, the explanation, the sub-processor list, and the one-month clock.
11 min read
GDPR + AI
Right to erasure when your AI used the data: what's actually deletable in 2026
GDPR Article 17 applied to AI stacks after the EDPB's February 2026 CEF report. Three deletability tiers, what unlearning cannot do yet, and a response template.
11 min read
AI Privacy
Do you need a DPIA for your AI feature? A practical check
The trigger question is settled. The harder question is which assessment, and when. EDPB Opinion 28/2024, CNIL July 2025, and the Article 27(4) FRIA carry-over.
12 min read