Privacy, data protection and digital regulation lawyer, pragmatic thinker and authorhttps://bsky.app/profile/eustaran.bsky.socialhttps://bsky.app/profile/eustaran.bsky.social/post/3mk3cbckqm22xQuite a venue to discuss international data transfers at the Venice Privacy Symposium this morning.22 Apr 2026 10:33 +0000at://did:plc:ppayo6y73rl722ltmv4ng6fb/app.bsky.feed.post/3mk3cbckqm22xhttps://bsky.app/profile/eustaran.bsky.social/post/3mhgzq5wwxk25Great thread about the practical mindset of European top judges.👇 [contains quote post or other embedded content]19 Mar 2026 22:16 +0000at://did:plc:ppayo6y73rl722ltmv4ng6fb/app.bsky.feed.post/3mhgzq5wwxk25https://bsky.app/profile/eustaran.bsky.social/post/3mhdk6desoc2zDoing some domestic filing, I came across this article I wrote as a newly qualified lawyer in June 1996 for the internal newsletter of the first law firm I worked for. Aside from being a blast from the past, the similarities with how we approach the use of AI at law firms today are pretty striking.18 Mar 2026 13:00 +0000at://did:plc:ppayo6y73rl722ltmv4ng6fb/app.bsky.feed.post/3mhdk6desoc2zhttps://bsky.app/profile/eustaran.bsky.social/post/3mh6nx4qwxc2hBeyond legal technicalities and appeasement, can Europe pull off the next generation of global digital regulation standards? My latest piece on the real purpose of the EU Digital Omnibus. https://www.linkedin.com/pulse/what-digital-omnibus-really-eduardo-ustaran-aftbe https://www.linkedin.com/pulse/what-digital-omnibus-really-eduardo-ustaran-aftbe?utm_source=share&utm_medium=member_ios&utm_campaign=share_via16 Mar 2026 14:24 +0000at://did:plc:ppayo6y73rl722ltmv4ng6fb/app.bsky.feed.post/3mh6nx4qwxc2hhttps://bsky.app/profile/eustaran.bsky.social/post/3mgpmg3oda22qOur take on where the EU Digital Omnibus is at the moment and what is likely to go through. https://www.hoganlovells.com/en/publications/eu-digital-omnibus-where-simplification-is-likely-and-what-businesses-should-plan-for10 Mar 2026 14:47 +0000at://did:plc:ppayo6y73rl722ltmv4ng6fb/app.bsky.feed.post/3mgpmg3oda22qhttps://bsky.app/profile/eustaran.bsky.social/post/3mgeokhx3bc2bWondering what aspects of AI global regulators are acting on?  We discuss it in some depth in this episode of our podcast The Data Chronicles. Perfect for the weekend! https://www.hoganlovells.com/en/publications/the-data-chronicles-ai-enforcement-an-international-overview06 Mar 2026 06:26 +0000at://did:plc:ppayo6y73rl722ltmv4ng6fb/app.bsky.feed.post/3mgeokhx3bc2bhttps://bsky.app/profile/eustaran.bsky.social/post/3mftmjuiu2224When people hear about the ICO, they often think of @infocommission.bsky.social, but there is another very respectable entity that has the same initials: the Irish Chamber Orchestra. This ICO has today released a wonderful album that is just food for your soul. https://open.spotify.com/album/27pXTnnjlNy1jYAdfyOgNo?si=5I4DspngSNy5DiAA9Je-aA27 Feb 2026 11:34 +0000at://did:plc:ppayo6y73rl722ltmv4ng6fb/app.bsky.feed.post/3mftmjuiu2224https://bsky.app/profile/eustaran.bsky.social/post/3mfox6yjirc2iData protection is not just about compliance. It is also about demonstrating compliance, and this is particularly important for regulatory investigations, we hear at #IAPPIntensive26. Transparency is therefore key alongside the ability to maintain confidentiality.25 Feb 2026 15:02 +0000at://did:plc:ppayo6y73rl722ltmv4ng6fb/app.bsky.feed.post/3mfox6yjirc2ihttps://bsky.app/profile/eustaran.bsky.social/post/3mfow7z5nok2iNot getting the wider strategy right when faced with a regulatory investigation is regarded as the most critical mistake. It sounds obvious but when operating in crisis mode, having the space to think is lacking precisely when it is most important. Wise views at #IAPPIntensive26.25 Feb 2026 14:44 +0000at://did:plc:ppayo6y73rl722ltmv4ng6fb/app.bsky.feed.post/3mfow7z5nok2ihttps://bsky.app/profile/eustaran.bsky.social/post/3mfovkcbaas2iA complaint that is not amicably resolved and is escalated to a regulator is seen as one of the most common triggers of a formal regulatory investigation at #IAPPIntensive26. So avoiding escalation should be seen as a priority in practice.25 Feb 2026 14:32 +0000at://did:plc:ppayo6y73rl722ltmv4ng6fb/app.bsky.feed.post/3mfovkcbaas2ihttps://bsky.app/profile/eustaran.bsky.social/post/3mfov6svins2iFascinating session at #IAPPIntensive26 focused on the sensitive topic how to handle regulatory investigations. First lesson to learn is that from the very first interaction with a regulator, no matter how informal or casual, the right attitude matters.25 Feb 2026 14:26 +0000at://did:plc:ppayo6y73rl722ltmv4ng6fb/app.bsky.feed.post/3mfov6svins2ihttps://bsky.app/profile/eustaran.bsky.social/post/3mfosnclvak2iWise words by my colleague Charmian Aw at #IAPPIntensive26 explaining how a legal framework focused on enhancing trust is the best ally of innovation.25 Feb 2026 13:40 +0000at://did:plc:ppayo6y73rl722ltmv4ng6fb/app.bsky.feed.post/3mfosnclvak2ihttps://bsky.app/profile/eustaran.bsky.social/post/3mfoofsoeuk2iThe number of people attending this #IAPPIntensive26 session on international data transfers and the number of questions being asked shows what a big area of concern this still is for organisations.25 Feb 2026 12:24 +0000at://did:plc:ppayo6y73rl722ltmv4ng6fb/app.bsky.feed.post/3mfoofsoeuk2ihttps://bsky.app/profile/eustaran.bsky.social/post/3mfoma22euc2iInteresting panel session at #IAPPIntensive26 comparing the (slight) simplification of the UK’s international data transfers regime with the EU’s (growing) toughening of its own approach.25 Feb 2026 11:45 +0000at://did:plc:ppayo6y73rl722ltmv4ng6fb/app.bsky.feed.post/3mfoma22euc2ihttps://bsky.app/profile/eustaran.bsky.social/post/3mfohgngvt22iThe big cheese (and more importantly the big brains) behind the @iapp.bsky.social @jtrevorhughes.bsky.social reflecting over the long evolution of our crucial profession for humanity’s wellbeing and prosperity at #IAPPIntensive26.25 Feb 2026 10:20 +0000at://did:plc:ppayo6y73rl722ltmv4ng6fb/app.bsky.feed.post/3mfohgngvt22ihttps://bsky.app/profile/eustaran.bsky.social/post/3mfoge7zch22iJohn Edwards of @infocommission.bsky.social emphasises the crucial importance of being agile in order to look ahead and anticipate risks. He rightly says at #IAPPIntensive26 that this is aligned with the ability to act in a coordinated fashion with other regulators.25 Feb 2026 10:00 +0000at://did:plc:ppayo6y73rl722ltmv4ng6fb/app.bsky.feed.post/3mfoge7zch22ihttps://bsky.app/profile/eustaran.bsky.social/post/3mfofzikdj22iCommissioner John Edwards vigorously defends the @infocommission.bsky.social regulatory strategy and resource allocation, and explains at #IAPPIntensive26 that their decisions about any trade offs made when pursuing some objectives over others are fully transparent.25 Feb 2026 09:54 +0000at://did:plc:ppayo6y73rl722ltmv4ng6fb/app.bsky.feed.post/3mfofzikdj22ihttps://bsky.app/profile/eustaran.bsky.social/post/3mfofjplhjk2iA familiar face kick-starting #IAPPIntensive26 telling us about the changes happening at the @infocommission.bsky.social and reflecting about the importance of resilient and agile regulators in the age of AI.25 Feb 2026 09:46 +0000at://did:plc:ppayo6y73rl722ltmv4ng6fb/app.bsky.feed.post/3mfofjplhjk2ihttps://bsky.app/profile/eustaran.bsky.social/post/3mfb34slig22kOn a fleeting visit to San Francisco, local companies are very keen to know how far the European digital regulatory simplification will go. You could call that part of the “Brussels Effect”.20 Feb 2026 02:35 +0000at://did:plc:ppayo6y73rl722ltmv4ng6fb/app.bsky.feed.post/3mfb34slig22khttps://bsky.app/profile/eustaran.bsky.social/post/3mf2fh3fksc22Sharp reporting on the state of play of the critical issue of copyright and AI training in the UK by my colleagues. https://www.hoganlovells.com/en/publications/ai-and-copyright-uk-outlook-for-202617 Feb 2026 10:51 +0000at://did:plc:ppayo6y73rl722ltmv4ng6fb/app.bsky.feed.post/3mf2fh3fksc22https://bsky.app/profile/eustaran.bsky.social/post/3melyeudeas2xA few reflections on AI Governance.👇 A very common pattern I keep seeing is businesses feeling under pressure to implement AI tools and those with responsibility for AI governance becoming sidelined by those businesses for fear that they will slow things down. We need to change this dynamic.11 Feb 2026 17:20 +0000at://did:plc:ppayo6y73rl722ltmv4ng6fb/app.bsky.feed.post/3melyeudeas2xhttps://bsky.app/profile/eustaran.bsky.social/post/3me3xlbucuc2mWhen the sunrise is really the moonset.05 Feb 2026 08:23 +0000at://did:plc:ppayo6y73rl722ltmv4ng6fb/app.bsky.feed.post/3me3xlbucuc2mhttps://bsky.app/profile/eustaran.bsky.social/post/3mdi3qdu3rs2vIf this initiative is able to help us all properly understand what AI can and cannot do, it will be a truly successful one. https://www.gov.uk/government/publications/ai-skills-for-life-and-work-summary-report/ai-skills-for-life-and-work-summary-report--228 Jan 2026 10:44 +0000at://did:plc:ppayo6y73rl722ltmv4ng6fb/app.bsky.feed.post/3mdi3qdu3rs2vhttps://bsky.app/profile/eustaran.bsky.social/post/3mdgshqj3gc2bOne of the ways in which the UK is expected to specifically regulate #AI is in relation to live facial recognition for law enforcement purposes. Not a bad idea given the level of privacy intrusiveness, but very unlikely to become a “prohibited AI practice” as in the EU.27 Jan 2026 22:25 +0000at://did:plc:ppayo6y73rl722ltmv4ng6fb/app.bsky.feed.post/3mdgshqj3gc2bhttps://bsky.app/profile/eustaran.bsky.social/post/3mdfefifog22dThe conversation by @kevinroose.com and @caseynewton.bsky.social with Amanda Askell about how to train an #AI LLM to adopt the right values is so thought provoking at so many levels. This has to be one of the most consequential debates of our time. https://open.spotify.com/episode/4xFz3C8m5fdSWF9xuneoat?si=5P_zTLdlRkyQN82o18yk9w27 Jan 2026 08:41 +0000at://did:plc:ppayo6y73rl722ltmv4ng6fb/app.bsky.feed.post/3mdfefifog22dhttps://bsky.app/profile/eustaran.bsky.social/post/3mde6bl25lc2jThis is very telling and may lead to split the section of the #AI Act Omnibus dealing with timings from the section dealing with material changes, as otherwise it may not pass on time before the high-risk AI systems obligations kick in this Summer.👇 [contains quote post or other embedded content]26 Jan 2026 21:19 +0000at://did:plc:ppayo6y73rl722ltmv4ng6fb/app.bsky.feed.post/3mde6bl25lc2jhttps://bsky.app/profile/eustaran.bsky.social/post/3md6iwzq5jc23Anyone doing the #BigGardenBirdWatch this weekend? I hope this little rascal doesn’t sabotage my efforts…24 Jan 2026 15:14 +0000at://did:plc:ppayo6y73rl722ltmv4ng6fb/app.bsky.feed.post/3md6iwzq5jc23https://bsky.app/profile/eustaran.bsky.social/post/3mcwiwycv7s2cIn a world where tensions and disagreements appear to be on the increase, this is welcome news that shows how international collaboration on data protection matters leads to practical benefits for businesses and individuals. https://www.hoganlovells.com/en/publications/qfc-difc-and-adgm-advance-regional-data-protection-cooperation-through-mutual-adequacy-recognition21 Jan 2026 10:52 +0000at://did:plc:ppayo6y73rl722ltmv4ng6fb/app.bsky.feed.post/3mcwiwycv7s2chttps://bsky.app/profile/eustaran.bsky.social/post/3mcu4bg4pzc23Our take on the new draft requirements for Processor BCR. The EDPB has certainly raised the bar, but with everything going on in the world right now, the “holy grail” of lawful data flows is about to become even more important and sought after. https://www.hoganlovells.com/en/publications/processor-bcr-gets-an-upgrade-inside-the-edpbs-new-draft-recommendations20 Jan 2026 12:00 +0000at://did:plc:ppayo6y73rl722ltmv4ng6fb/app.bsky.feed.post/3mcu4bg4pzc23https://bsky.app/profile/eustaran.bsky.social/post/3mcc7u33q2s2tKudos to @infocommission.bsky.social for its impressive report on agentic #AI its data protection implications for several reasons: 1️⃣Super-comprehensive insights of agentic AI. 2️⃣Thorough & realistic legal analysis. 3️⃣Positive mindset about embedding data protection into AI. https://ico.org.uk/about-the-ico/research-reports-impact-and-evaluation/research-and-reports/technology-and-innovation/tech-horizons-and-ico-tech-futures/ico-tech-futures-agentic-ai/13 Jan 2026 09:16 +0000at://did:plc:ppayo6y73rl722ltmv4ng6fb/app.bsky.feed.post/3mcc7u33q2s2t