On 7 May 2026, the European Parliament and the Council of the EU reached a provisional political agreement on the AI Omnibus — a targeted recalibration of the EU AI Act (Regulation (EU) 2024/1689). The reforms delay key deadlines, simplify obligations for smaller businesses, clarify how the AI Act interacts with sector-specific product [...]
A practical guide for organisations deploying AI in Europe, the UK, Ireland, and the US. Published: May 2026 | 5–8 min read | Keywords: DPIA, FRIA, GDPR Art. 35, AI Act Art. 27, Fundamental Rights Impact Assessment, Data Protection Impact Assessment, High-Risk AI, EU AI Act Compliance, AI Governance, Responsible AI [...]
Under the GDPR, the role of the Data Protection Officer (DPO) plays a central part in how organisations are expected to govern data. Ignoring the rules on designation, independence, and support doesn’t just create theoretical risks. It can lead to penalties worth millions. What the GDPR Requires: Designation, Position, and Responsibilities of the DPO Not [...]
What is a DPIA? Data Protection Impact Assessments (DPIA) are crucial processes that help companies manage how they handle personal data and identify and minimize risks to rights and freedoms before launching new products or services. This process allows companies to manage how they handle personal data and demonstrates their General Data Protection Regulation (GDPR) [...]
In the dynamic realm of data protection, the Irish Data Protection Commission (DPC) emphasised on the pivotal role of the Data Protection Officer (DPO). While smaller businesses may not require a full-time DPO, understanding the conditions for a mandatory appointment is crucial. Requirement for the DPO: the processing is carried out by a public authority [...]
