
All Posts
- Spotting Dark Patterns In Interfaces
Dark patterns are interface designs that steer people into unintended choices about their data. This article works through the EDPB and FTC catalogues, the honest design alternatives and the way CIPT questions describe an interface and ask what it exemplifies. - What A Model Card Contains
A model card documents an AI model’s purpose, performance across segments and known limitations. This article traces the idea to its 2019 origin, separates the card from the AI Act technical file and shows how AIGP definition questions use its neighbours as distractors. - When Article 49 Derogations Apply
Article 49 derogations allow international transfers without an adequacy decision or safeguards, under strict conditions. This article walks the hierarchy, the seven listed grounds and the residual compelling-interests route, then shows how CIPP/E scenario questions test each boundary. - The FCRA Adverse Action Sequence
An employer who tells a candidate no before sending the report has broken the sequence. The FCRA adverse action steps, the standalone disclosure that precedes them, and the 2025 guidance withdrawals candidates keep missing. - Privacy Threshold Analysis Before The DPIA
Most privacy programmes can show you their completed DPIAs. Far fewer can show why the other projects did not need one. The privacy threshold analysis is the instrument that answers that, and CIPM tests the sequence. - What Cryptographic Erasure Cannot Delete
Deleting the key is faster than wiping the drive, and it fails silently when three conditions are not met. What NIST now says about cryptographic erasure, and how it meets a GDPR erasure request. - Text And Data Mining Opt-Outs
EU copyright law permits commercial mining of lawfully accessible works, and lets rightsholders switch that permission off. AIGP candidates need the mechanics of the reservation, and what Article 53 of the AI Act requires of model providers. - When The Household Exemption Stops Applying
A doorbell camera that catches the pavement is doing something the GDPR governs. This is where the household exemption ends, what the CJEU decided in Rynes, and how CIPP/E frames the question. - Who Counts As A VPPA Consumer
A 1988 statute about video rental records now drives tracking pixel class actions. This piece sets out what the Video Privacy Protection Act says, why three circuits disagree about who is a VPPA consumer, and what the Supreme Court has been asked.
