Insights

Shadow AI, de AVG en datalekken (2): datalek en modelrisico’s

Shadow AI, GDPR, and Data Leaks (2): Data Leaks and Model Risks

Part 2 of a four-part series on shadow AI for DPOs and privacy officers. Shadow AI is the use of AI tools such as ChatGPT, Claude, or Gemini outside the purview of IT and the DPO, often through free personal...

Shadow AI, de AVG en datalekken (1): wat shadow AI is en wat de AVG eist

Shadow AI, the GDPR and data breaches (1): what shadow AI is and what the GDPR requires

Part 1 of a four-part series on shadow AI for DPOs and privacy officers. At the end of 2025, the municipality of Eindhoven reported to the Dutch Data Protection Authority (AP) that employees had uploaded Youth Act documents, CVs, and...

In dit blog bespreken we hoe AI-tools binnen de HR moeten worden gekwalificeerd onder de AI Act, welke verplichtingen daarbij op hoofdlijnen horen en hoe een FG daar in de praktijk mee aan de slag kan.

HR AI Tools under the AI Act: What Does the DPO Need to Know?

Most AI tools deployed by organizations for recruitment, CV screening, or performance monitoring fall under the most stringent regime of the AI Act, and many organizations are not yet fully aware of this. For the Data Protection Officer (DPO), this...

Een digitale versie van jezelf (AI): een aantal juridische aandachtspunten

A digital version of yourself (AI): some legal considerations

Who owns your face, your voice, and your words in the age of synthetic personas, aka AI clones? The rise of AI clones (realistic-looking and sounding AI representations of real people) marks a shift in how identity is legally understood...

Nieuwe EU-datawetgeving en de M&A praktijk: AI Act

New EU data legislation and M&A practice: AI Act

The EU's 2030 Digital Agenda sets the course for a European digital future, with accompanying new legislation. This new legislation brings numerous changes and obligations for various organizations and is therefore also relevant for M&A practice, as the scope of...

Our experts