Sign in

David Erdos

@daviderdos.bsky.social
300 followers 381 following 102 posts

Trinity Hall Fellow, Professor of Law & Open Society & CIPIL Co-Director Cambridge University. Interested in #dataprotection #GDPR information law, legal history & public and private international law. Viewpoints personal & RT≠endorsement

PostsRepliesMedia
David Erdos @daviderdos.bsky.social · 30/09/2026
On day ICO becomes the Information Commission, I'm please to publish 📢 a new article exploring the its enforcement (or lack thereof) of (UK) #GDPR & both #scrutiny & #oversight of this since 2028/19: www.sciencedirect.com/science/arti... Fines have averaged just 6.8 and final notices 1.8/year.
100
David Erdos @daviderdos.bsky.social · 30/07/2026
The HoC Defence Committee has contradicted the Information Commissioner's understanding that MoD #Afghan UK #GDPR #databreach was "a one-off occurrence following a failure to following [sic] usual checks", with MoD itself even admitting it occured "while officials were following agreed procedures"
100
David Erdos @daviderdos.bsky.social · 14/07/2026
Pleased to post a new working paper on C-199/24 Legal Newsdesk: papers.ssrn.com/sol3/papers.... This case explored the #GDPR position of Lexbase which, in return for payment, provides criminal & court judgment info from searches of those who had been subject to conviction in #Sweden 1/6
papers.ssrn.com
C-199/24 Legal Newsdesk limits Freedom of Expression under the General Data Protection Regulation (GDPR)
<p><i>C-199/24 </i>Legal Newsdesk<i> arose from the need to determine the position under the GDPR of a database which, in return for payment, provides both crim
121
David Erdos @daviderdos.bsky.social · 08/07/2026
DSIT will launch an "independent review into the culture, accountability & governance" of @iconews. This must be broad-based, transparent & lead to an accountable culture focused on delivering on ICO primary monitoring & enforcement duties parliamentlive.tv/Event/Index/... UK #GDPR #FoI
parliamentlive.tv
Parliamentlive.tv
Science, Innovation and Technology Committee
132
David Erdos @daviderdos.bsky.social · 23/06/2026
John Edwards is gone but the impact of domineering & abusive behaviour at @infocommission.bsky.social may remain. There are indications this led to good & well-motivated people leaving & more broadly to extreme difficulties in challenging a cavalier approach to #dataprotection regulation.
133
David Erdos @daviderdos.bsky.social · 22/06/2026
Applications close TODAY for #dataprotection & #commonlaw systems position @trinityhallcamb.bsky.social & CIPIL @cambridgelaw.bsky.social. Please apply if interested & able to research in this exciting and topical area! www.trinhall.cam.ac.uk/about/vacanc... #Australia #Canada #NZ #HongKong #UK
trinhall.cam.ac.uk
WYNG Research Associate in Data Protection and Common Law Systems - Trinity Hall Cambridge
000
Reposted by David Erdos
michael veale @michae.lv · 05/05/2026
‘Going to the cloud’: renting servers, or integration of deeply proprietary services? “both options go by the same name, and orgs often slide from the first into the second without realizing the fundamental difference, until it’s too late” @ccs.bsky.social www.tandfonline.com/doi/full/10....
tandfonline.com
Cloud drift: how hyperscaler cloud computing shapes internet governance
When the Foundation for Internet Domain Registration in the Netherlands (SIDN) announced plans to migrate to Amazon Web Services (AWS) in 2024, it sparked intense political debate about critical in...
1149
Reposted by David Erdos
Mike O'Neill @mikeoneillcloud.bsky.social · 25/04/2026
www.linkedin.com/feed/update/... 0256/ cc: @daviderdos.bsky.social
linkedin.com
I’ve Submitted a Formal Complaint to the ICO About Email Address Sharing by Online Platforms without Consent | Mike O&#39;Neill
This pattern is in much wider use than online pharmacies. The majority of online retailers we have scanned include third-parties on their websites that collect email addresses used for tracking acros...
132
Reposted by David Erdos
Faculty of Law @cambridgelaw.bsky.social · 14/04/2026
📣We have issued a new @ssrn.bsky.social Legal Studies RPS (v16 #2) including articles by Timo Minssen, Mateo Aboy & Effy Vayena, Ira Chadha-Sridhar, @daviderdos.bsky.social and @mwgehring.bsky.social, Marie-Claire Cordonier Segger & Matheus Garcia: 🔗https://bit.ly/4tNFSm1 #LegalScholarship
Legal Studies Research Paper Series Vol. 17, No. 2
055
David Erdos @daviderdos.bsky.social · 13/04/2026
New Article! In 1960 #Ireland enjoyed a strong, even if informal, external association with the Commonwealth in 1960 but by 1979 all significant #citizenship, #tariff, #monetary & #diplomatic arrangements were at an end: www.tandfonline.com/doi/full/10.... (also www.slideshare.net/slideshow/ir...)
111
Reposted by David Erdos
Markus W. Gehring @mwgehring.bsky.social · 30/03/2026
We must all start calling out the absurd breaches of international law by the current US Government- this one clearly breaches UN obligations but few seem to call it out: Judge never reconsidered working at ICC despite sanctions www.rte.ie/news/2026/03...
rte.ie
Judge never reconsidered working at ICC despite sanctions
Kimberly Prost, a Canadian judge sanctioned by the US, says she has never reconsidered working at the International Criminal Court, even though it has led to her being shut out from most of the intern...
174
David Erdos @daviderdos.bsky.social · 01/04/2026
In 5yrs since it left EU #dataprotection framework & then enacted Data (Use & Access) Act (DUAA), the UK has shifted to a more business friendly approach. But largely through solidifing a limited enforcement stance as substantive #GDPR change is rather limited papers.ssrn.com/sol3/papers....
001
David Erdos @daviderdos.bsky.social · 31/03/2026
On back of MPs letter about #TattleLife the UK ICO said it was investigating. But how can it regulate #onlineabuse when it failed to update its policy guidance for #GDPR despite saying it would do so for +5 yrs, then deleted this & now says it holds no info? More at inforrm.org/2026/03/31/e...
013
David Erdos @daviderdos.bsky.social · 19/03/2026
Although currently misfiled in the Information Commissioner's Office database as an enforcement notice, the ICO's £14.5M UK #GDPR fine against Reddit regarding an alleged failure of #agegating is now out: ico.org.uk/action-weve-... 1/2
110
David Erdos @daviderdos.bsky.social · 09/03/2026
Despite applying for membership in 1997, #Palestine is sadly absent from today's #Commonwealth Day. Not least given the British mandate origins of today’s tragedy, the C/w has a special responsibility which from 1967 to 1997 it did recognise. More at www.tandfonline.com/doi/full/10....
tandfonline.com
Palestine and the modern Commonwealth: past engagements and future membership?
All Commonwealth summit communiqués from the late 1960s through to the mid-1990s maintained a focus on the Palestinian conflict and highlighted approaches that could lead to its just resolution. Wh...
010
David Erdos @daviderdos.bsky.social · 09/03/2026
On #Commonwealth Day I'm pleased to reshare my new article on the history & current reality of C/w citizenship including how it might promote #business mobility, which is key to "unlocking prosperity together", this year's C/w theme: www.tandfonline.com/doi/full/10.... #multilateralism
tandfonline.com
Commonwealth citizenship: the decline and future of an amorphous concept
The post-War Commonwealth citizenship concept promised a post-imperial system of non-alien status and rights. Although the former Dominions maintained (and South Africa furthered) discriminatory po...
000
David Erdos @daviderdos.bsky.social · 23/02/2026
“Regulating #AI in a Changing World: #Oversight & #Enforcement”: Great to see video of Info Law & Policy Centre 2025 Conference keynote panel online. My talk focused on UK #dataprotection situation compared to #EU #GDPR experiences in #Italy & #Germany: lnkd.in/eNEeUEyW Summary notes below.
131
David Erdos @daviderdos.bsky.social · 19/02/2026
With over 40K #dataprotection complaints but just 2 fines totalling only £3.8m and no UK #GDPR enforcement notices in 2024/25, where has scrutiny and oversight of the ICO been? Pleased to post new working paper on this, also exploring avenues for positive intervention papers.ssrn.com/sol3/papers....
043
David Erdos @daviderdos.bsky.social · 17/02/2026
The ICO's new policy to just "record" many UK #GDPR complaints is at serious odds with a @phsombudsman.bsky.social ruling from 11/2025 which held complainants had a right to "an assessment under section 165 of the DPA as to whether it is likely or unlikely that the processing" was lawful. 1/3
101
David Erdos @daviderdos.bsky.social · 10/02/2026
Here's my new open-access article providing first comprehensive #law & #policy analysis of #Commonwealth #citizenship from end of WW2 to the present, also looking at its proposed future as a mechanism to faciliate short-term esp. #business mobility: www.tandfonline.com/doi/full/10....
011
David Erdos @daviderdos.bsky.social · 10/02/2026
In the wake of the egregious #Afghan UK #GDPR #databreach and many others, Government Ministers are finally grilled before the Commons' Science, Innovation and Technology Committee today committees.parliament.uk/event/26457/... following on from ICO's appearance last October #DataProtection
committees.parliament.uk
10 February 2026 - Science, Innovation and Technology Committee - Oral evidence session - Committees - UK Parliament
09:00 - The Macmillan Room, Portcullis House
000
David Erdos @daviderdos.bsky.social · 09/02/2026
Lamentable that Information Commissioner will now refuse to investigate as opposed to "log" many (perhaps most) UK #GDPR complaints despite law stating that they must “investigate, to the extent, appropriate” & inform on “the outcome of the investigation” (art. 51(1)(f)). ico.org.uk/make-a-compl...
100
David Erdos @daviderdos.bsky.social · 05/02/2026
Lovely to see hard copy of new book on the #dataprotection & #humanitarian action & proud to have contributed chapter exploring role of the #unitednations guidelines from 1990 in shaping regulation here. It's all open access so please do check it out! www.taylorfrancis.com/books/oa-edi...
052
Reposted by David Erdos
Luis Alberto Montezuma 路易斯·阿尔贝托·蒙特祖玛 @montezumachavez.bsky.social · 04/02/2026
The Administrative Review Tribunal affirmed the Privacy Commissioner’s finding that Bunnings contravened Australian Privacy Principles (APP) 1 and 5 (notification of the collection of personal information) when rolling out FRT in its stores. See lnkd.in/etqgmguY.
013
David Erdos @daviderdos.bsky.social · 26/01/2026
Please join me at CIPIL's first seminar of 2026 this Thursday at 5.30pm with Tim Pitt-Payne KC talking at Cambridge Law Faculty on future of UK #GDPR automated individual decision-making rights under the Data (Use & Access) Act. More including Zoom link at www.cipil.law.cam.ac.uk/press/events...
cipil.law.cam.ac.uk
CIPIL Evening Seminar: 'Should we care about GDPR Article 22?'
Speaker: Tim Pitt-Payne KC, 11 Kings Bench Walk Biography: Timothy Pitt-Payne KC is a leading information law silk based at 11KBW where he has practiced since 1990. He was appointed QC/KC in 2010.
010
David Erdos @daviderdos.bsky.social · 13/01/2026
Following many egregious Government #dataprotection breaches over the past few years it's v disappointing to see ICO-Government MoU doubles-down on the ICO's flawed "public sector approach" which "priortises enagement" rather than corrective powers use: ico.org.uk/media2/m15nb...
121
David Erdos @daviderdos.bsky.social · 11/12/2025
Neglect of unique #Commonwealth collection never ceases to amaze! The old CW Institute was told not to give items to ailing Museum but did www.theguardian.com/uk/2002/nov/..., +140 Museum items were then illegally sold bbc.co.uk/news/uk-engl... before closure & now... www.bbc.co.uk/news/article...
bbc.co.uk
Hundreds of items taken in high-value Bristol Museum archive raid
More than 600 artefacts from the museum's British Empire and Commonwealth collection are taken.
030
Reposted by David Erdos
Open Rights Group @openrightsgroup.org · 24/11/2025
The final straw – the Information Commissioner's Office has decided NOT to investigate the Afghan data leak. It's time to investigate them! Over 70 organisations and experts back ORG's call for an inquiry into the regulator's chronic failure to enforce data law. www.theguardian.com/technology/2...
theguardian.com
Civil liberties groups call for inquiry into UK data protection watchdog
Campaigners including Good Law Project describe ICO ‘collapse in enforcement activity’ after Afghan data breach
12318
Reposted by David Erdos
Good Law Project @goodlawproject.org · 24/11/2025
What’s happened to the ICO’s enforcement regime? We’ve signed @openrightsgroup.org’s letter calling for an inquiry after the data regulator declined to formally investigate the MoD over the Afghan data breach. bit.ly/48gc9ZZ
theguardian.com
Civil liberties groups call for inquiry into UK data protection watchdog
Campaigners including Good Law Project describe ICO ‘collapse in enforcement activity’ after Afghan data breach
05133
Reposted by David Erdos
Lukasz Olejnik @lukaszolejnik.bsky.social · 20/11/2025
A teddy bear equipped with AI was meant to be a child’s chat companion, but it eagerly jumped into topics like BDSM and “where to find knives.” The manufacturer stopped sales and cut off access. AI toys need strict filters, testing, and oversight or ot ends in a plush sewer. #AIact #GDPR
12310
David Erdos @daviderdos.bsky.social · 24/11/2025
With no investigation even of Afghan #databreach despite grave risk to c100K & just 2 UK #GDPR fines in 24/25, I'm proud to join 70+ orgs & experts call on Commons Sci & Tech Committee, which oversees the ICO, to investigate #dataprotection enforcement probs www.openrightsgroup.org/press-releas...
openrightsgroup.org
70+ organisations and experts demand action over failing ICO
Over 70 civil society organisations, academics and data protection experts have urged the Chair of the Select Committee for Science Information and Technology to open an inquiry into the collapse in e...
020
Reposted by David Erdos
Chris Marsden @chrismarsden.bsky.social · 16/11/2025
"Munich regional court sided in favour of Germany’s music rights society GEMA, which said ChatGPT had harvested protected lyrics by popular artists to “learn” from them" Paying for the lack of respect and permission www.theguardian.com/technology/2...
theguardian.com
ChatGPT violated copyright law by ‘learning’ from song lyrics, German court rules
OpenAI ordered to pay undisclosed damages for training its language models on artists’ work without permission
09932
David Erdos @daviderdos.bsky.social · 15/11/2025
Good to give input on @AJEnglish piece on barriers to #Trump action against #BBC. US #defamation law shields speech about public officials unless can show publisher knew was false or showed a reckless disregard for this. BBC is clear was unintentional. x.com/AJEnglish/st...
x.com
Al Jazeera English on X: "Would Trump’s $1bn lawsuit against the BBC hold up in court? https://t.co/QczYzdg6L9 https://t.co/sPOoIiduda" / X
Would Trump’s $1bn lawsuit against the BBC hold up in court? https://t.co/QczYzdg6L9 https://t.co/sPOoIiduda
021
David Erdos @daviderdos.bsky.social · 14/11/2025
Alongside grave individual impact, Public Accounts Committee finds that Afghan #spreadsheet #databreach will likely cost c£850m & arose within a context where the MoD "did not do enough to learn the lessons from previous data breaches" reported to ICO committees.parliament.uk/committee/12...
121
Reposted by David Erdos
Luis Alberto Montezuma 路易斯·阿尔贝托·蒙特祖玛 @montezumachavez.bsky.social · 07/11/2025
The Commission will introduce the Digital Omnibus on November 19, simplifying of the implementation of AI Act. Here's the text shared by netzpolitik.org: lnkd.in/dCTW36pS.
041
Reposted by David Erdos
Markus W. Gehring @mwgehring.bsky.social · 03/11/2025
Fantastic lecture by @ukandeu.bsky.social Prof @anandmenon.bsky.social for the annual @eulegalstudies.bsky.social Mackenzie Stuart Lecture @cambridgelaw.bsky.social, chaired by Prof @cbarnard.bsky.social reflecting on the 2015 general election and inequality in the run up to the Brexit.
396
David Erdos @daviderdos.bsky.social · 31/10/2025
Disappointing to see that the UK ICO has declined to submit any evidence to the Commons Defence Committee Inquiry into the circumstances behind, and consequences of, the #Afghan #spreadsheet #databreach, the most serious ever in UK public sector history: committees.parliament.uk/work/9327/af...
committees.parliament.uk
Afghan Data Breach and Resettlement Schemes - Committees - UK Parliament
This inquiry will examine the circumstances behind and the consequences of a major data breach in February 2022 from the Ministry of Defence. The breach involved the personal data of thousands of Afghan applicants for resettlement to the UK and their families, potentially putting these people at risk of reprisals. The inquiry aims to understand how this breach could have been allowed to happen, and, once it had happened, whether successive Governments took well-informed and sensible decisions under cover of an unprecedented super-injunction. The inquiry will also examine the Government’s wider arrangements for the resettlement of eligible Afghans in the UK. While lived experience can inform the Committee's work, please be aware that the Committee does not consider or assist with individual cases.
010
Reposted by David Erdos
Paul F Scott @paulfscott.bsky.social · 30/10/2025
committees.parliament.uk/committee/24...
131
Reposted by David Erdos
Michael Froomkin @mfroomkin.bsky.social · 30/10/2025
1984: We're behind schedule. Couple sues because NYPD aims cameras into their bedroom and living room, perhaps due to their history of activism. I hope they win but the precedents are mixed. www.law360.com/cybersecurit...
law360.com
NYC Sued Over 'Voyeuristic' Police Surveillance System - Law360
A Brooklyn couple has filed a federal lawsuit alleging New York City uses a "voyeuristic" police surveillance system on all visitors and residents, which includes two police cameras that are aimed at ...
043
David Erdos @daviderdos.bsky.social · 30/10/2025
Beyond #Afghan #databreach, the UK ICO faces increased scrutiny due to need to renew #dataprotection #adequacy. The European DP Board is urging much greater scrutiny of the robustness of its complaints handling & effectiveness of UK #GDPR sanctions and remedies: www.edpb.europa.eu/system/files...
011
Reposted by David Erdos
Lilian Edwards @lilianedwards.bsky.social · 27/10/2025
Happy to announce that I'm giving a CIPIL seminar in Cambridge on Nov 20th, "Faithful or Traitor? The Right of Explanation in a Generative AI World", and it's attendance on zoom as well as in person but registration needed : see www.cipil.law.cam.ac.uk/press/events...
cipil.law.cam.ac.uk
CIPIL Evening Seminar: 'Faithful or Traitor? The Right of Explanation
Speaker: Professor Lilian Edwards, Prof of Law, Innovation & Society, Newcastle Law School Biography: Lilian Edwards is a leading academic in the field of Internet law.
021
Reposted by David Erdos
Pat Walshe - Privacy Matters 🇮🇪🇬🇧🇪🇺 @privacymatters.bsky.social · 29/10/2025
I shall be responding to this. It’s important. 👇
164
David Erdos @daviderdos.bsky.social · 29/10/2025
The ICO claim #UKGDPR complaints are arising "as people become more aware of their #dataprotection rights" & now propose to refuse investigation of many of these. In fact, complaints have been stable since #GDPR & but with ↓↓ regulatory action by ICO have ↑ since 2023: inforrm.org/2025/10/28/c...
042
David Erdos @daviderdos.bsky.social · 28/10/2025
New blog on UK Information Commissioner's plan to reject investigation ‍of many #DataProtection complaints, an💡inconsistent with its obligation to inform all complainants of an investigation outcome & liable to fuel further disregard for the UK #GDPR especially among SMEs: inforrm.org/2025/10/28/c...
inforrm.org
Cause for Complaint: Assessing the ICO’s Proposed New Approach to Data Protection Complaints – David Erdos
The Information Commissioner’s Office (ICO)’s data protection complaint handling performance is currently in very clear crisis.  Despite its pledge to assess and respond to 80% of such complaints w…
102
David Erdos @daviderdos.bsky.social · 27/10/2025
Great to see open-access volume on #dataprotection and #humanitarian action now out marking decade of @icrc.org & @unhcr.org frameworks🎉https://lnkd.in/eTTyttpw My chapter is on 1990 UN Guidelines role in promoting regulation alongside autonomy & derogations for humanitarian IOs.
021
Reposted by David Erdos
BEUC - The Consumer Voice @beuc.eu · 23/10/2025
⚠️ Grindr has violated the #GDPR for sharing users’ personal data for advertising purposes, according to the #Norwegian Court of Appeal. This decision sends a strong signal to the commercial surveillance industry. Read more about the decision below ⬇️
043
David Erdos @daviderdos.bsky.social · 21/10/2025
Good to see highlighting of ICO failure to investigate grave #Afghan #databreach or even keep decision record. Similar earlier breach is binding reason for action not reverse. UK #GPDR requires "dissuasive" steps but this is lacking bsky.app/profile/chio... ukconstitutionallaw.org/2025/09/03/d...
ukconstitutionallaw.org
David Erdos: How Exposed? The Information Commissioner’s Office and the Afghan Spreadsheet Data Breach
On 17 August 2023 the Ministry of Defence (MoD) put the Information Commissioner’s Office (ICO) on broad notice about the devastating failure of data protection that is now generally known as the A…
012
David Erdos @daviderdos.bsky.social · 21/09/2025
#Australia, #Canada & #UK's joint action today brings #Commonwealth State recognition of #Palestine to 80%. It must now accept its special urgent responsibilities, set up a support Fund & revive Palestine's 1997 membership application: www.tandfonline.com/doi/full/10.... bsky.app/profile/leah...
140
David Erdos @daviderdos.bsky.social · 08/09/2025
In midst of #Gaza horror &⬆️Recognition of #Palestine by Members (up to 80% by end Sept & 🤞more soon) it's good to see Stuart Mole, former Head of it's Secretary-General's Office, call for Palestine #Commonwealth membership pathway (paused since 1997) www.commonwealthroundtable.co.uk/general/poli...
An aerial view showing destruction in Rafah after Israeli forces withdrawal Source: UNRWA
270
Reposted by David Erdos
noyb – European Center for Digital Rights @noyb.eu · 02/09/2025
📰 "The Austrian data protection authority has ordered YouTube to give users access to their personal data, enforcing data access rules contained in the EU's General Data Protection Regulation (GDPR)." www.euractiv.com/section/tech...
euractiv.com
Austria's privacy watchdog tells YouTube to give users access to their data - Euractiv
But the decision by the Austrian authority comes more than five years after privacy group Noyb filed the data access complaint
13013