In case you missed it – EDPO weekly recap | 13 – 17 July 2026

flashback - 6-12 June 2026

 

Here is a brief recap of the news and updates we shared last week.

Transatlantic data flows came back into focus after a US Supreme Court ruling prompted European privacy regulators and activists to assess whether the EU-US Data Privacy Framework remains sufficiently protected, with potential implications for companies transferring data from Europe to the US. [1]

Google’s updated privacy settings drew attention after reports that saved media, including images, files, audio and video recordings uploaded to Search services, may be used to develop and improve Google services and technologies, including AI models, unless users opt out. [2]

Ukraine signalled a preference for AI systems that can be operated on its own infrastructure, favouring self-hosted models over tools that remain under the control of external providers. [3]

The EDPB adopted new guidelines on anonymisation and web scraping in the context of generative AI, as well as the final version of its guidelines on the processing of personal data through blockchain technologies. The anonymisation guidelines are open for public consultation until 30 October 2026. [4]

In platform regulation, the European Parliament voted to advance a bill that would give tech companies the legal basis to scan for child sexual abuse material, reviving debate around child protection, privacy and surveillance risks. [5]

References:
[1] Trump’s court win reignites fight to sink €1.7T data deal with Europe – Politico

[2] If you use Google, you’re training its AI. Here’s how to opt out – TechCrunch

[3] Ukraine to pick AI models operated without provider control, official says – Reuters

[4] EDPB sheds light on anonymisation and web scraping for generative AI and adopts final version of guidelines on blockchain – EDPB

[5] Europe’s conservatives revive zombie bill on child abuse scanning – Politico


*These articles were not written by EDPO. The opinions and views of the author(s) do not necessarily represent those of EDPO.

 

 

About the author

Sérgio Abreu

Sérgio studied International and European Law at Nova University in Lisbon. In his master’s thesis he delved into the impact of facial recognition technologies in Data Protection and Privacy in the EU. He’s CIPP/E certified. Sérgio studied and worked in multiple European cities, including Coimbra, Lisbon, Ljubljana, Brussels and Luxembourg. Sérgio was a Blue Book Trainee at the European Commission’s Data Policy and Innovation Unit, where he was involved in the preparatory work surrounding the Data Act. He also worked at a financial tech company and as a trainee at the Portuguese Competition Authority and at the Portuguese Embassy in Brussels. Sérgio is fluent in Portuguese and English and has an intermediate level in Spanish and French.

Sérgio Abreu

Get our weekly newsletter in your inbox every Monday with fresh GDPR and Data Protection news!