Computers, Privacy and Data Protection

Computers, Privacy and Data Protection

Last week, EDPO was playing at home — we joined the CPDP.ai 2025 in Brussels, one of Europe’s most compelling events on privacy, data protection, and digital rights.

Here are the standout moments that made us nod, scribble, and occasionally mutter:

🛡️ Data Protection as a Benchmark

From day one, the European Commission laid it out plainly: 82% of the world’s population is now covered by data protection laws — and no, that doesn’t mean fewer emails about updated privacy policies. It does, however, signal a global shift where privacy is no longer a luxury — it’s a legal baseline. The challenge now? Turning coverage into meaningful protection.

💬 Fundamental Rights & the AI Act

The AI Act’s role in protecting human dignity took center stage, with panelists calling for stronger coordination across jurisdictions, lifecycle-based risk assessments, and practical tools for assessing structural bias and discrimination. The message? We need coordination, simplification, and yes, a bit of courage.

📉 Fairness in Public Sector Algorithms

A Dutch case study revealed how a student risk profiling algorithm disproportionately flagged students with migration backgrounds. This session spotlighted the urgent need for both quantitative and qualitative auditing frameworks in AI oversight.

🔍 Transparency in GPAI Training Data

Between trade secrets and transparency, there’s a sweet spot. Sessions pushed for standardized summaries that don’t require a PhD or a magnifying glass to decode.

🤖 Safe Harbors for AI Research

From health tech to generative models, calls grew louder for independent researchers to have protected access to AI systems. Legal safe harbors and DSA-aligned transparency mechanisms were framed as key enablers of responsible innovation.

🌐 Global Digital Governance

Speakers from across institutions and civil society urged regulatory harmonization, ethical AI practices, and stronger civil society engagement. There was broad consensus on the need to simplify legal frameworks while maintaining robust protections.

 

As digital technologies continue to evolve, so too must our frameworks for rights, accountability, and innovation. CPDP reminded us that the future of privacy hinges on cross-border dialogue, interdisciplinary collaboration, and a steadfast commitment to ethics at the heart of tech governance.

CPDP.ai 2025 may be over, but the ideas sparked in Brussels are still echoing — thanks to all who stopped to chat, share, or challenge — see you again soon!

Data protection day

Data protection day

EDPO attended the Data Protection Day organised by the EDPS and the Council of Europe. Here are the key takeaways that stood out for us. The...

Digital Clearhouse 2.0

Digital Clearhouse 2.0

EDPO attended the EDPS Digital Clearinghouse 2.0 Conference in Brussels. Here are the key takeaways that stood out for us. The EU’s Digital...

About the author

Sérgio Abreu

Sérgio studied International and European Law at Nova University in Lisbon. In his master’s thesis he delved into the impact of facial recognition technologies in Data Protection and Privacy in the EU. He’s CIPP/E certified. Sérgio studied and worked in multiple European cities, including Coimbra, Lisbon, Ljubljana, Brussels and Luxembourg. Sérgio was a Blue Book Trainee at the European Commission’s Data Policy and Innovation Unit, where he was involved in the preparatory work surrounding the Data Act. He also worked at a financial tech company and as a trainee at the Portuguese Competition Authority and at the Portuguese Embassy in Brussels. Sérgio is fluent in Portuguese and English and has an intermediate level in Spanish and French.

Sérgio Abreu

Get our weekly newsletter in your inbox every Monday with fresh GDPR and Data Protection news!