Proposed Changes to the GDPR and EU AI Act
On 19 November, the European Commission published its Digital Omnibus, a package of targeted amendments to key EU digital laws, most notably the GDPR and the EU AI Act. It’s important to remember that these are proposals, not law. The next stage is formal Trilogue negotiations between the Commission, the Council (including Member State ratification), […]
Is Your AI System “High-Risk” Under the EU AI Act?
Is Your AI System “High-Risk” Under the EU AI Act? The compliance deadline for “high-risk” obligations under the EU AI Act is 2nd August 2026 – less than 9 months’ away. By then, you should have: An inventory of your AI systems: A risk classification for each system; Documented reasoning for each classification; and Registered […]
Fundamental Rights Impact Assessments
A FRIA is an evaluation of the risks high risk AI systems present in relation to individuals’ rights. It also asks deployers to consider remediation strategies to mitigate the risks should they occur.
Digital ID: Anxiety by Design
The recent referendum in Switzerland on digital ID (50.4% in favour) revealed a nation divided. In the UK, the debate is only just beginning, but public sentiment is wary. A petition against digital ID has attracted nearly 3 million signatures.
Malta’s AI Regulations, 2025 – Summary for Legal Teams
Malta’s AI Regulations – Cheat Sheet for Legal & Compliance Teams
In October 2025, Malta took a major step in aligning with the EU AI Act by publishing two legal notices:
Shadow Al: The Hidden Risk Lurking in Your Workplace
As organisations race to deploy Al tools, a quiet revolution is happening behind the scenes – and it’s catching many employers off guard. Welcome to the world of Shadow Al.
Is It Time We Revisited Cookies? Lessons from Google’s €325m Fine
Last month, Google was hit with a staggering €325 million fine by the French data protection authority (CNIL) – the largest fine ever imposed for cookie-related violations.