Gabriela Zanfir-Fortuna
@gzf.bsky.social
Data Protection Geek. Co-author of the big GDPR OUP Commentary🇷🇴🇪🇺🇺🇸 US-based, former Brussels bubbler. Writes about data protection law and policy, AI governance through a Global lens (& sometimes democracy) Strictly personal views.
www.pdpecho.com.
www.pdpecho.com.
Reposted by Gabriela Zanfir-Fortuna
“You can’t separate human intellectual or reasoning powers from other aspects of human embodied life such as our vulnerability, our dependence on one another, and the fact that we are mortal”
nymag.com/intelligence...
nymag.com/intelligence...
November 26, 2025 at 2:23 AM
“You can’t separate human intellectual or reasoning powers from other aspects of human embodied life such as our vulnerability, our dependence on one another, and the fact that we are mortal”
nymag.com/intelligence...
nymag.com/intelligence...
What has the world come to, AI is now also taking the jobs of criminals 🫢 No job is safe, folks 🤖
AI tools are already supercharging cyberattacks. Could chatbots enable a “golden age” for hackers? Matteo Wong reports:
Chatbots Are Becoming Really, Really Good Criminals
Cybersecurity was already a nightmare. Now comes AI.
bit.ly
November 25, 2025 at 9:08 PM
What has the world come to, AI is now also taking the jobs of criminals 🫢 No job is safe, folks 🤖
Reposted by Gabriela Zanfir-Fortuna
"By 2025, Brexit had reduced UK GDP by 6% to 8%, with the impact accumulating gradually over time. We estimate that investment was reduced by between 12% and 18%, employment by 3% to 4% and productivity by 3% to 4%"
Read the Stanford report:
siepr.stanford.edu/publications...
Read the Stanford report:
siepr.stanford.edu/publications...
The Economic Impact of Brexit
Other
siepr.stanford.edu
November 25, 2025 at 7:31 PM
"By 2025, Brexit had reduced UK GDP by 6% to 8%, with the impact accumulating gradually over time. We estimate that investment was reduced by between 12% and 18%, employment by 3% to 4% and productivity by 3% to 4%"
Read the Stanford report:
siepr.stanford.edu/publications...
Read the Stanford report:
siepr.stanford.edu/publications...
Name a film you’ve seen 6 times… At least.
November 25, 2025 at 7:25 PM
Name a film you’ve seen 6 times… At least.
Reposted by Gabriela Zanfir-Fortuna
Translating the CJEU judgment in Amazon vs EC on art.40 DSA: (1) giving vetted researchers data isn’t a disproportionate privacy intrusion; (2) compliance may be costly but you can bear it; (3) if you have a better way to study systemic risks, we haven’t heard it. curia.europa.eu/juris/docume...
November 25, 2025 at 9:20 AM
Translating the CJEU judgment in Amazon vs EC on art.40 DSA: (1) giving vetted researchers data isn’t a disproportionate privacy intrusion; (2) compliance may be costly but you can bear it; (3) if you have a better way to study systemic risks, we haven’t heard it. curia.europa.eu/juris/docume...
Reposted by Gabriela Zanfir-Fortuna
I'm very happy to have published a chapter in this excellent, open-access collection, "Being Human in the Digital World:"
www.cambridge.org/core/service...
Kudos to expert editors Beate Roessler and Valerie Steeves, as well as fellow authors Julie Cohen, David Lyon, Helen Nissenbaum, & more!
www.cambridge.org/core/service...
Kudos to expert editors Beate Roessler and Valerie Steeves, as well as fellow authors Julie Cohen, David Lyon, Helen Nissenbaum, & more!
www.cambridge.org
November 25, 2025 at 1:23 AM
I'm very happy to have published a chapter in this excellent, open-access collection, "Being Human in the Digital World:"
www.cambridge.org/core/service...
Kudos to expert editors Beate Roessler and Valerie Steeves, as well as fellow authors Julie Cohen, David Lyon, Helen Nissenbaum, & more!
www.cambridge.org/core/service...
Kudos to expert editors Beate Roessler and Valerie Steeves, as well as fellow authors Julie Cohen, David Lyon, Helen Nissenbaum, & more!
Check, check, check, check, and check 😱 Oh My God
Twitter accounts are based in Russia. BlueSky accounts are based in homes with, frankly, too many books, plants, obsolete cables, and pieces of rustic pottery, that could do with a bit of a tidying up, to be honest.
November 24, 2025 at 2:16 AM
Check, check, check, check, and check 😱 Oh My God
Reposted by Gabriela Zanfir-Fortuna
Impossible how good reading is. You mean I just point my face at the paper for a bit and it does a whole update on my brain?
November 23, 2025 at 1:52 PM
Impossible how good reading is. You mean I just point my face at the paper for a bit and it does a whole update on my brain?
Reposted by Gabriela Zanfir-Fortuna
"India’s Ministry of Electronics and Information Technology earlier this month released governance guidelines for artificial intelligence, marking the first major regulatory document that has emerged in the country — if one can call it that."
India’s New AI Governance Plan is Much Ado About Nothing | TechPolicy.Press
India has finally released a regulatory document on AI governance, if you can consider it that, Amber Sinha writes.
www.techpolicy.press
November 22, 2025 at 1:58 PM
"India’s Ministry of Electronics and Information Technology earlier this month released governance guidelines for artificial intelligence, marking the first major regulatory document that has emerged in the country — if one can call it that."
Soooo the AI Act defines GPAI models, a key object of regulation of the Act, through reference to AI models (GPAI models are AI models that this & that), BUT it doesn’t define AI models anywhere 🤔 Poor lawmaking. It does define “subject” and “law enforcement” though, among its 68 definitions 🤪
a man in a leather jacket is standing in front of a building and making a funny face .
ALT: a man in a leather jacket is standing in front of a building and making a funny face .
media.tenor.com
November 23, 2025 at 2:16 AM
Soooo the AI Act defines GPAI models, a key object of regulation of the Act, through reference to AI models (GPAI models are AI models that this & that), BUT it doesn’t define AI models anywhere 🤔 Poor lawmaking. It does define “subject” and “law enforcement” though, among its 68 definitions 🤪
Reposted by Gabriela Zanfir-Fortuna
For any students out there looking to get experience in #privacy #dataprotection #techpolicy, FPF is now accepting applications for Summer 2026 interns!
Details here: fpf.org/us-policy-in...
Details here: fpf.org/us-policy-in...
U.S. Policy Internships (Spring, Summer, and Fall) - Future of Privacy Forum
The Future of Privacy Forum (“FPF”) is a non-profit organization that serves as a catalyst for privacy leadership and scholarship, advancing principled data practices in support of emerging technologi...
fpf.org
November 21, 2025 at 8:35 PM
For any students out there looking to get experience in #privacy #dataprotection #techpolicy, FPF is now accepting applications for Summer 2026 interns!
Details here: fpf.org/us-policy-in...
Details here: fpf.org/us-policy-in...
Reposted by Gabriela Zanfir-Fortuna
More evidence that the Trump/Witkoff “peace plan” for Ukraine came straight from the Russians - it uses Russian syntax.
www.theguardian.com/world/live/2...
www.theguardian.com/world/live/2...
November 21, 2025 at 3:58 PM
More evidence that the Trump/Witkoff “peace plan” for Ukraine came straight from the Russians - it uses Russian syntax.
www.theguardian.com/world/live/2...
www.theguardian.com/world/live/2...
Reposted by Gabriela Zanfir-Fortuna
While, as teachers, we are facing increasing use of #LLMs by students to cheat in assignments, too many of our institutions (and colleagues) are cynically adopting #AI to cheat students out of a genuine education... #universities #AcademicSky
www.theguardian.com/education/20...
www.theguardian.com/education/20...
‘We could have asked ChatGPT’: students fight back over course taught by AI
Staffordshire students say signs material was AI-generated included suspicious file names and rogue voiceover accent
www.theguardian.com
November 21, 2025 at 11:38 AM
While, as teachers, we are facing increasing use of #LLMs by students to cheat in assignments, too many of our institutions (and colleagues) are cynically adopting #AI to cheat students out of a genuine education... #universities #AcademicSky
www.theguardian.com/education/20...
www.theguardian.com/education/20...
Who would have thought poetry will be the ultimate nemesis for AI? 😳
❗ Researchers say they’ve found a universal “jailbreak” for top AI models, through poetry. A new study shows that rephrasing harmful prompts as short poems can bypass safety filters across all major models, raising questions over AI Act compliance.
www.mlex.com/mlex/article...
www.mlex.com/mlex/article...
AI models’ safety features can be circumvented with poetry, research finds | MLex | Specialist news and analysis on legal risk and regulation
A study found that poetic prompts can bypass safety features in leading AI models from OpenAI, Anthropic, Google and others, triggering instructions for building chemical weapons and malware. The rese...
www.mlex.com
November 20, 2025 at 8:47 PM
Who would have thought poetry will be the ultimate nemesis for AI? 😳
🤔 Impossible not to note the Commission’s desired power grab as GDPR regulator: approving pseudonymization & reidentification metrics; DPIA templates & harmonized lists for what requires & not a DPIA; data breach notification template & high risk contexts that require notifications
#GDPR #Omnibus
#GDPR #Omnibus
November 20, 2025 at 6:37 AM
Reposted by Gabriela Zanfir-Fortuna
On Wednesday, the Trump administration circulated a six-page draft executive order titled “Eliminating State Law Obstruction of National AI Policy.” It would create an “AI Litigation Task Force” led by the Attorney General to challenge state AI laws, among other provisions.
White House Circulates Draft Executive Order Targeting State AI Laws | TechPolicy.Press
The draft order, titled "Eliminating State Law Obstruction of National AI Policy," followed a Truth Social post by President Donald Trump.
www.techpolicy.press
November 20, 2025 at 3:03 AM
On Wednesday, the Trump administration circulated a six-page draft executive order titled “Eliminating State Law Obstruction of National AI Policy.” It would create an “AI Litigation Task Force” led by the Attorney General to challenge state AI laws, among other provisions.
Held today a “first reactions” LinkedIn live with two of the most respected data protection experts in Europe, Paul Breitbarth and Sophie Stalla-Bourdillon. Geeking out for one hour on what we see as the most significant amendments in #GDPR #Omnibus Watch here:
www.linkedin.com/posts/the-fu...
www.linkedin.com/posts/the-fu...
Our VP of Global Privacy, Dr. Gabriela Zanfir-Fortuna, and her guests go live for a fast, first-reaction breakdown of the Digital Omnibus package, and what it could mean for the future of GDPR… | Futu...
Our VP of Global Privacy, Dr. Gabriela Zanfir-Fortuna, and her guests go live for a fast, first-reaction breakdown of the Digital Omnibus package, and what it could mean for the future of GDPR, ePriva...
www.linkedin.com
November 20, 2025 at 1:23 AM
Held today a “first reactions” LinkedIn live with two of the most respected data protection experts in Europe, Paul Breitbarth and Sophie Stalla-Bourdillon. Geeking out for one hour on what we see as the most significant amendments in #GDPR #Omnibus Watch here:
www.linkedin.com/posts/the-fu...
www.linkedin.com/posts/the-fu...
Reposted by Gabriela Zanfir-Fortuna
If passed, the EU Omnibus covering data and AI will be the most extraordinary reversal of digital rights in a generation.
Read our response to the official text of the EU Digital Omnibus Regulation Proposal⬇️
www.adalovelaceinstitute.org/news/our-res...
Read our response to the official text of the EU Digital Omnibus Regulation Proposal⬇️
www.adalovelaceinstitute.org/news/our-res...
Our response to the official text of the EU Digital Omnibus Regulation Proposal
If passed, the Omnibus will be the most extraordinary reversal of digital rights in a generation
www.adalovelaceinstitute.org
November 19, 2025 at 5:18 PM
If passed, the EU Omnibus covering data and AI will be the most extraordinary reversal of digital rights in a generation.
Read our response to the official text of the EU Digital Omnibus Regulation Proposal⬇️
www.adalovelaceinstitute.org/news/our-res...
Read our response to the official text of the EU Digital Omnibus Regulation Proposal⬇️
www.adalovelaceinstitute.org/news/our-res...
Finally, the definition of an “AI system” under the AI Act will matter 😅 Because, remember, the vast majority of AI systems are not covered by any obligations of the AI Act, as COM guidance also makes obvious. But sensitive data could be used for any AI systems, per the #GDPROmnibus
November 19, 2025 at 9:30 PM
Finally, the definition of an “AI system” under the AI Act will matter 😅 Because, remember, the vast majority of AI systems are not covered by any obligations of the AI Act, as COM guidance also makes obvious. But sensitive data could be used for any AI systems, per the #GDPROmnibus
Reposted by Gabriela Zanfir-Fortuna
Update: European Commission is starting "pre-infringement dialogue" with Ireland about our complaint against Ireland's process to appoint the new Data Protection Commissioner
These "EU Pilot" dialogues occur where the Commission suspects a Member State has broken EU law
ec.europa.eu/implementing...
These "EU Pilot" dialogues occur where the Commission suspects a Member State has broken EU law
ec.europa.eu/implementing...
Pre-infringement dialogue
Pre-infringement dialogues is a tool that can be used where it is likely to lead to swifter compliance than a formal infringement procedure. This page displays a map showing the number of active pre-i...
ec.europa.eu
November 19, 2025 at 4:54 PM
Update: European Commission is starting "pre-infringement dialogue" with Ireland about our complaint against Ireland's process to appoint the new Data Protection Commissioner
These "EU Pilot" dialogues occur where the Commission suspects a Member State has broken EU law
ec.europa.eu/implementing...
These "EU Pilot" dialogues occur where the Commission suspects a Member State has broken EU law
ec.europa.eu/implementing...
So are you telling me now that the right to not be subject to solely automated decision-making that has a significant or legal effect is intended to be scraped from being a right and transformed into a normative provision that sets some rules for such ADM? 🏹
#Omnibus
#Omnibus
November 19, 2025 at 4:09 PM
So are you telling me now that the right to not be subject to solely automated decision-making that has a significant or legal effect is intended to be scraped from being a right and transformed into a normative provision that sets some rules for such ADM? 🏹
#Omnibus
#Omnibus
Reposted by Gabriela Zanfir-Fortuna
New draft chapter! 'The Mixed Nature of the AI Act: Product Safety and Fundamental Rights Regulation' (with Giovanni de Gregorio, forthcoming in @gzf.bsky.social Gianclaudio Malgieri @ggf.bsky.social and @mantelero.bsky.social 's AI Act commentary, published by Hart).
The Mixed Nature of the AI Act: Product Safety and Fundamental Rights Regulation
The European Unionʼs AI Act embodies a dual regulatory approach, balancing product safety with the protection of fundamental rights. Initially focused on ensuri
papers.ssrn.com
November 19, 2025 at 2:09 PM
New draft chapter! 'The Mixed Nature of the AI Act: Product Safety and Fundamental Rights Regulation' (with Giovanni de Gregorio, forthcoming in @gzf.bsky.social Gianclaudio Malgieri @ggf.bsky.social and @mantelero.bsky.social 's AI Act commentary, published by Hart).
It’s the first time ever in 9 years when I’m not in Brussels for DPC and I don’t have FOMO 👀 Why? Because I would rather be at home with all the emotional support system available, from husband to blankies, when the GDPR omnibus hits today 🫠
November 19, 2025 at 7:34 AM
It’s the first time ever in 9 years when I’m not in Brussels for DPC and I don’t have FOMO 👀 Why? Because I would rather be at home with all the emotional support system available, from husband to blankies, when the GDPR omnibus hits today 🫠
Reposted by Gabriela Zanfir-Fortuna
We recently concluded a special article series, “Seeing the Digital Sphere: The Case for Public Platform Data,” in collaboration with the Knight-Georgetown Institute, in which experts explored why access to public platform data is critical. Here’s a snapshot: (1/9)
November 17, 2025 at 6:15 PM
We recently concluded a special article series, “Seeing the Digital Sphere: The Case for Public Platform Data,” in collaboration with the Knight-Georgetown Institute, in which experts explored why access to public platform data is critical. Here’s a snapshot: (1/9)
Meanwhile, the housing market in the US:
Exclusive: An Italian-style estate in Silicon Valley sells for $56 million, setting a record for the affluent town of Portola Valley.
Exclusive | Silicon Valley Estate Sells for $56 Million
Sold by Bandel Carano of Oak Investments Partners, the Italian-style home in Portola Valley set a record for the town.
on.wsj.com
November 14, 2025 at 10:35 PM
Meanwhile, the housing market in the US: