Gateklons
@gateklons.bsky.social
1.3K followers 260 following 2.4K posts
EU digital policy nerd | data protection & privacy | competition | platform & media regulation | identity | cybersecurity Focus: consent-or-pay & (messaging) interoperability https://gateklons.substack.com/ 🐘 @[email protected] 🐦 @gateklons
Posts Media Videos Starter Packs
Pinned
gateklons.bsky.social
NEW BLOGPOST: what's being overlooked about Meta's (defeat in) challenging the #EDPB #consent-or-pay opinion (case #T-319/24)

open.substack.com/pub/gateklon...
Blogpost title: The overlooked implications of Meta's EDPB consent-or-pay opinion challenge

Blogpost subtitle: EDPB opinions, while not binding, are nonetheless procedurally significant and could still be reviewed, on the merits, by the CJEU directly in the future
Reposted by Gateklons
gateklons.bsky.social
This is the one legal fantasyland the DPAs and the entities they are supposed to regulate (that don't know any better but to just take guidelines at their word) should live in.
Reposted by Gateklons
njondet.bsky.social
"The company said: "... Given the lack of interest from the European Commission, lengthy process and costs on our side, Nextcloud decided to withdraw the complaint." The company is still pursuing the matter with the German Competition authority.
Reposted by Gateklons
freeourfeeds.com
Our European-focused work, under the brand of @eurosky.social is taking off. Our first in-person event happens in Berlin on November 19, to discuss and share opportunities for European open social #atrproto infrastructure operated in Europe. We're announcing our speakers here!
eurosky.social
We're very excited to that announce Heike Raab, Representative of the State of Rhineland-Palatinate to the Federal Government and for Europe and the Media, will be speaking at #EuroskyLive in Berlin this November.

#EuroskyLive #DigitalSovereignty #EuropeanTech
Reposted by Gateklons
jsrailton.bsky.social
NEW: cost to 'poison' an LLM and insert backdoors is relatively constant. Even as models grow.

Implication: security doesn't scale with LLMs.

Super interesting: Prior work had suggested that as model sizes grew, it would make them cost-prohibitive to poison. 1/
arxiv.org/pdf/2510.07192
Reposted by Gateklons
douwekorff.bsky.social
I just checked back to the original texts of Schrems II. In the English version the Court consistently uses "essential equivalence" (and never "substantial"). In the French version, it uses "essentiellement équivalent" in para. 104, but "substantiellement équivalente" elsewhere. A non-issue?
gateklons.bsky.social
the definition of personal data. (And their "interpretation" that only legal means of accessing personal data are relevant is even worse and pulled out of thin air.)

They've also misspoken regarding the "necessary" (mostly GDPR) standard and the "strictly necessary" (heightened ePD) standard.
gateklons.bsky.social
Given how CJEU sometimes ends up producing bad case law by smelling its own farts (other bad case law and turning words around), this seems crucial.

This is how we got the 🤮 result in EDPS v. SRB: refusing to read Recital 26 and previous case law accidentally adopting a relative approach to
gateklons.bsky.social
I highly doubt breaking E2EE will stand up in court. The actual close call fights might end up being about the scope of "targeting".
gateklons.bsky.social
And it goes without saying that without bright-line statutory rules, such powers are inevitably subject to scope creep. It's much harder for courts to impose those (see data retention case law).
gateklons.bsky.social
This, plus how "targeted" surveillance of (non-E2EE) providers would actually be. EP's much better position, celebrated by campaigners, is (intentionally) very iffy on this point and could be easily read (though perhaps not by CJEU) as justifying detection orders against entire online communities.
meredithmeredith.bsky.social
In particular, we must be wary of "new" proposals that allow scanning of "known content" while claiming to protect privacy by proscribing "indiscriminate" surveillance. We must also look out for those that mandate only scanning for “hashed images or videos.” 4/
gateklons.bsky.social
If politicians don't care about the erosion of fundamental rights, they might actually care about no longer being able to use Signal (especially since many are tech illiterate) which enjoys very widespread use among them. Withdrawal is a potent card that Signal should threaten to play more often.
kayjebelli.bsky.social
ChatControl will have seriously negative repercussions, and cause some services to pull the plug on Europe. Signal has said they would withdraw, because this state-mandated malware would expose users' private conversations and weaken encryption www.techradar.com/vpn/vpn-pri...
Reposted by Gateklons
montezumachavez.bsky.social
The EDPB and the Commission also address other provisions including those related to the distribution of third party apps and stores, data portability, data access requests and interoperability of messaging services.
montezumachavez.bsky.social
The Joint Guidelines on the Interplay between the Digital Markets Act and the GDPR were published for public comments. See www.edpb.europa.eu/system/files....
gateklons.bsky.social
Clearing my schedule for the rest of the day, apparently this is good news on the consent-or-pay front but I have not reviewed the guidelines themselves
montezumachavez.bsky.social
The Joint Guidelines on the Interplay between the Digital Markets Act and the GDPR were published for public comments. See www.edpb.europa.eu/system/files....
Reposted by Gateklons
techmeme.com
During a Mumbai trade visit, UK PM Keir Starmer hailed India's digital ID program, Aadhaar, as a "massive success" as the UK plans to introduce digital ID cards (Financial Times)

Main Link | Techmeme Permalink
Reposted by Gateklons
wavesblog.bsky.social
Europe really lagging behind...
techmeme.com
California Governor Gavin Newsom signs a bill that will require web browsers to add settings that allow residents to opt out of third-party data collection (Suzanne Smalley/The Record)

Main Link | Techmeme Permalink
Reposted by Gateklons
thisismissem.social
Some interesting work from GoToSocial from the ActivityPub world: Slurp is a tool that can export & import data from other places into a GTS account.

It now supports importing bluesky posts into GoToSocial:

github.com/VyrCossont/s...
GitHub - VyrCossont/slurp: tool for exporting data from and importing data to Fediverse instances
tool for exporting data from and importing data to Fediverse instances - VyrCossont/slurp
github.com