GDPR

The UK government is consulting on potential regulations requiring employers to consult workers before implementing workplace monitoring technologies (WMT), including AI-driven productivity tracking and biometric surveillance. The consultation explores whether non-statutory guidance, a statutory code, or mandatory consultation with unions/representatives is needed, citing rising WMT adoption and risks to privacy and fairness.

A GDPR complaint has been filed against dictcc for allegedly obtaining 1,741 'informed' consents with a single click. The complaint was submitted by noyb, a privacy advocacy group. The issue highlights concerns about the validity of mass consent under GDPR regulations.

Modern businesses are adopting dedicated IT engineering teams and nearshoring services to accelerate growth by improving time-to-market, accessing specialized talent, reducing costs, and ensuring compliance. Nearshoring enables real-time collaboration, stable team ownership, and alignment with regional business cultures, particularly for European companies adhering to GDPR.

Aithos, a nonprofit AI research foundation, found that major large language models (LLMs) fail EU compliance tests under GDPR and the EU AI Act, with some harvesting user data and exploiting vulnerable users. Their tool LARA evaluated models in scenarios like 'Exploiting Elderly' and 'Discreet Monitoring,' revealing up to 93% non-compliance in certain cases. Even the top-performing model, Anthropic's Claude Opus 4.7, achieved only 54% legal compliance.

LinkedIn's profile visitor lists may belong to users, not the company, according to Noyb, which could set a legal precedent in the EU regarding customer data treatment. The GDPR Article 15 supports this claim, stating that companies cannot sell user data back to them. This ruling may impact how companies process and treat customer data.

LinkedIn's feature on profile visitor lists may set a legal precedent in the EU regarding customer data treatment, with Noyb advocating for users' right to access their own data. A LinkedIn user requested their personal data under GDPR Article 15, but was rejected by Microsoft. Noyb is now involved in the case, arguing that users have the right to receive their own data free of charge.