Blog

Build, don’t block — what the compute market says about EU AI sovereignty
On 27 May 2026, after delays, the European Commission is expected to propose the Cloud and AI Development Act (CAIDA), the centrepiece of its Tech Sovereignty package. In a new ICLE policy brief published this week, I argue that a strict version of CAIDA pushed by some stakeholder would impose most of its costs on European users.
Meta AI’s Incognito Chat: a new bar for confidential AI
Meta has launched Incognito Chat with Meta AI, a way to talk to an AI assistant on WhatsApp and the Meta AI app under privacy guarantees that, as Mark Zuckerberg puts it, are “similar to how end-to-end encryption means no one can read your conversations, even Meta or WhatsApp.
The Digital Omnibus Won’t Work Without Enforcement Reform
Now that I’m emerging from a slower period of paternity leave, you can expect more regular programming. Today, I’m sharing an edited excerpt from my latest comments on the planned GDPR reform.
Comments on the interplay of the EU DMA and the GDPR
The European Commission and the European Data Protection Board (EDPB) are preparing guidelines on the interplay of the Digital Markets Act with the EU’s main privacy law - the General Data Protection Regulation (the GDPR).
Podcast with Eric Seufert on the EU’s GDPR/AI reform package
I joined Eric Seufert again on the Mobile Dev Memo podcast to talk about the European Commission’s newly unveiled “digital omnibus” package and what it means for the GDPR, AI, cookies, and the broader competitiveness debate in Europe.
Europe Is Not “So Back”: Why Cookie Banners Are Here to Stay (Despite the Reform) and the Hard Route Not Taken
“Europe is so back. No more cookie banners.” Alas, no. Cookie banners are staying. But the banner is just an irritating symbol of the fact that European politicians can’t quite muster the will to do the hard things we need.
AI privilege and ChatGPT encryption
OpenAI’s Sam Altman has been publicly floating the idea of “AI privilege,” a form of legal confidentiality to protect interactions between users and AIs. According to Altman: “We should apply as much protection as when you talk to … your human doctor or your human lawyer, as you do when you talk to your AI doctor or AI lawyer.
Leaked GDPR reform: some good ideas but what about enforcement?
I’ve been arguing that the EU’s data protection law—the GDPR—needs to be reformed, mostly due to the absolutist approach taken to its interpretation by the data protection authorities. Even a year ago this may have seemed far-fetched.
Why is Meta offering cheaper and simpler “pay or consent” in the UK?
Meta announced today the introduction of a cheaper and simpler than in the EU version of “pay or consent” (subscription for no ads) for Facebook and Instagram for UK users. This follows Meta’s discussions with the UK Information Commissioner’s Office (ICO), which issued a guardedly positive statement about the development.
Apple’s new DMA criticism, EU-only feature delays, and what’s next
Apple has issued a sharply critical statement regarding the impact of the EU Digital Markets Act (DMA) and its impact on Apple products in the EU. The company says EU users will see delays to features such as AirPods’ live translation and iPhone Mirroring on macOS.