iiinova — where your digital self keeps evolving

Eduardo Ustaran @eustaran.bsky.social · 22/09/2026

This can only be a good thing and perhaps the closest we can get today to effective and pragmatic global regulation aimed at realising the promises of AI.

000

Eduardo Ustaran @eustaran.bsky.social · 06/08/2026

As a runner, I don’t interpret “pacing” as slowing down even if pacing oneself correctly means going more slowly than one could possibly run. As every marathon runner knows, getting the pace right is probably the single most important aspect of a successful outcome. The same principle applies to AI.

000

Eduardo Ustaran @eustaran.bsky.social · 22/04/2026

Quite a venue to discuss international data transfers at the Venice Privacy Symposium this morning.

110

Eduardo Ustaran @eustaran.bsky.social · 18/03/2026

Doing some domestic filing, I came across this article I wrote as a newly qualified lawyer in June 1996 for the internal newsletter of the first law firm I worked for. Aside from being a blast from the past, the similarities with how we approach the use of AI at law firms today are pretty striking.

001

Eduardo Ustaran @eustaran.bsky.social · 25/02/2026

Data protection is not just about compliance. It is also about demonstrating compliance, and this is particularly important for regulatory investigations, we hear at #IAPPIntensive26. Transparency is therefore key alongside the ability to maintain confidentiality.

010

Eduardo Ustaran @eustaran.bsky.social · 25/02/2026

Not getting the wider strategy right when faced with a regulatory investigation is regarded as the most critical mistake. It sounds obvious but when operating in crisis mode, having the space to think is lacking precisely when it is most important. Wise views at #IAPPIntensive26.

010

Eduardo Ustaran @eustaran.bsky.social · 25/02/2026

A complaint that is not amicably resolved and is escalated to a regulator is seen as one of the most common triggers of a formal regulatory investigation at #IAPPIntensive26. So avoiding escalation should be seen as a priority in practice.

020

Eduardo Ustaran @eustaran.bsky.social · 25/02/2026

Fascinating session at #IAPPIntensive26 focused on the sensitive topic how to handle regulatory investigations. First lesson to learn is that from the very first interaction with a regulator, no matter how informal or casual, the right attitude matters.

010

Eduardo Ustaran @eustaran.bsky.social · 25/02/2026

Wise words by my colleague Charmian Aw at #IAPPIntensive26 explaining how a legal framework focused on enhancing trust is the best ally of innovation.

020

Eduardo Ustaran @eustaran.bsky.social · 25/02/2026

The number of people attending this #IAPPIntensive26 session on international data transfers and the number of questions being asked shows what a big area of concern this still is for organisations.

001

Eduardo Ustaran @eustaran.bsky.social · 25/02/2026

Interesting panel session at #IAPPIntensive26 comparing the (slight) simplification of the UK’s international data transfers regime with the EU’s (growing) toughening of its own approach.

011

Eduardo Ustaran @eustaran.bsky.social · 25/02/2026

The big cheese (and more importantly the big brains) behind the @iapp.bsky.social @jtrevorhughes.bsky.social reflecting over the long evolution of our crucial profession for humanity’s wellbeing and prosperity at #IAPPIntensive26.

010

Eduardo Ustaran @eustaran.bsky.social · 25/02/2026

John Edwards of @infocommission.bsky.social emphasises the crucial importance of being agile in order to look ahead and anticipate risks. He rightly says at #IAPPIntensive26 that this is aligned with the ability to act in a coordinated fashion with other regulators.

010

Eduardo Ustaran @eustaran.bsky.social · 25/02/2026

Commissioner John Edwards vigorously defends the @infocommission.bsky.social regulatory strategy and resource allocation, and explains at #IAPPIntensive26 that their decisions about any trade offs made when pursuing some objectives over others are fully transparent.

110

Eduardo Ustaran @eustaran.bsky.social · 25/02/2026

A familiar face kick-starting #IAPPIntensive26 telling us about the changes happening at the @infocommission.bsky.social and reflecting about the importance of resilient and agile regulators in the age of AI.

010

Eduardo Ustaran @eustaran.bsky.social · 20/02/2026

On a fleeting visit to San Francisco, local companies are very keen to know how far the European digital regulatory simplification will go. You could call that part of the “Brussels Effect”.

030

Eduardo Ustaran @eustaran.bsky.social · 11/02/2026

A few reflections on AI Governance.👇 A very common pattern I keep seeing is businesses feeling under pressure to implement AI tools and those with responsibility for AI governance becoming sidelined by those businesses for fear that they will slow things down. We need to change this dynamic.

110

Eduardo Ustaran @eustaran.bsky.social · 05/02/2026

When the sunrise is really the moonset.

000

Eduardo Ustaran @eustaran.bsky.social · 27/01/2026

One of the ways in which the UK is expected to specifically regulate #AI is in relation to live facial recognition for law enforcement purposes. Not a bad idea given the level of privacy intrusiveness, but very unlikely to become a “prohibited AI practice” as in the EU.

120

Eduardo Ustaran @eustaran.bsky.social · 24/01/2026

Anyone doing the #BigGardenBirdWatch this weekend? I hope this little rascal doesn’t sabotage my efforts…

020

Eduardo Ustaran @eustaran.bsky.social · 09/12/2025

This year our traditional pre-Christmas Active Outing took us alongside the Thames from Richmond to Hammersmith.

010

Eduardo Ustaran @eustaran.bsky.social · 09/12/2025

Populism and polarisation are hardly new…

020

Eduardo Ustaran @eustaran.bsky.social · 04/12/2025

Call me a data protection nerd but the real question is not whether you are happy with your ‘listening age’, but whether this wonderful conversation starter that Spotify has come up with is compliant with Art. 5(1)(d) GDPR… 🤔

030

Eduardo Ustaran @eustaran.bsky.social · 03/12/2025

If you are already thinking about the year ahead and what the top concerns of #privacy regulators will be, the intersection between #AI, #biometrics and children data is a good place to start.

110

Eduardo Ustaran @eustaran.bsky.social · 19/11/2025

Bojana Bellamy saying she has been handed a “hot potato” for moderating our panel at #DPC25. I expect that we will disagree agreeably…

010

Eduardo Ustaran @eustaran.bsky.social · 19/11/2025

On the sensitive topic of technological innovation, Irish DPC Commissioner Sunderland makes it equally clear that their are supportive of RESPONSIBLE innovation at #DPC25.

020

Eduardo Ustaran @eustaran.bsky.social · 19/11/2025

“Simplification is acceptable as long as it does not attack the core of data protection”. Crystal clear position by EDPB Chair, Anu Talus, at #DPC25 which I think still leaves room for manoeuvre for sensible and pragmatic tweaks to the #GDPR (as the UK has already done).

021

Eduardo Ustaran @eustaran.bsky.social · 19/11/2025

EDPB Chair, Anu Talus strongly defending the role of cooperation among European data protection authorities as a cornerstone of the effect of the #GDPR at #DPC25.

030

Eduardo Ustaran @eustaran.bsky.social · 19/11/2025

Ready to learn a lot and have some fascinating discussions with like minded people. #DPC25

010

Eduardo Ustaran @eustaran.bsky.social · 13/11/2025

Spotted today in my office’s canteen. A bit like with Mother’s Day, we shouldn’t really need it, as this should be practiced every day, but still welcomed.

011

Eduardo Ustaran @eustaran.bsky.social · 22/10/2025

When life takes a hectic turn it’s time to follow my cat’s sage lifestyle advice…

040

Eduardo Ustaran @eustaran.bsky.social · 17/09/2025

Very candid and helpful explanation by Kakao’s Head of Privacy at #GPA25 about the value of proactively engaging with regulators to educate on #AI innovation despite the fears of not getting the feedback you wish for. This is a very mature approach which requires mutual trust.

020

Eduardo Ustaran @eustaran.bsky.social · 17/09/2025

ICO’s John Edwards argues convincingly at #GPA25 that it is possible to anticipate today the privacy risks of tomorrow’s agentic #AI and we act accordingly applying the existing legal framework. He adds that tools like privacy impact assessments will be particularly useful in this context.

000

Eduardo Ustaran @eustaran.bsky.social · 16/09/2025

“Privacy by design is essential to avoid bias and discrimination in #AI development”. A critical reminder by EDPB Chair Ana Talus at #GPA25.

020

Eduardo Ustaran @eustaran.bsky.social · 16/09/2025

Irish DPC’s Dale Sunderland makes it clear at #GPA25 that the right to object is not an afterthought but a necessity for the lawful use of personal data for #AI development.

010

Eduardo Ustaran @eustaran.bsky.social · 16/09/2025

EDPB Chair Ana Talus focusing on two important aspects for the legality of #AI development at #GPA25: 1️⃣The role of Data Protection Impact Assessments as a precondition. 2️⃣The interaction between #GDPR and #AI Act to cover all the bases.

010

Eduardo Ustaran @eustaran.bsky.social · 16/09/2025

Measures like pseudonimysation, anonymity, non-use of sensitive personal data highlighted by Irish DPC’s Dale Sunderland at #GPA25 not just as mechanisms for compliance but as #AI development optimisation.

010

Eduardo Ustaran @eustaran.bsky.social · 16/09/2025

Professor ByoungPil Kim highlighting at #GPA25 how the Korean Personal Information Protection Commission emphasises the role of strong data subject rights to demonstrate legitimate interests as a legal basis for #AI development.

010

Eduardo Ustaran @eustaran.bsky.social · 16/09/2025

“AI doesn’t happen in a vacuum, we have data protection law” succinctly says EDPB Chair Ana Talus at #GPA25, emphasising the role played by the #GDPR in setting the groundwork for lawful #AI development.

020

Eduardo Ustaran @eustaran.bsky.social · 16/09/2025

ICO’s John Edwards explaining at #GPA25 how the UK is aiming to influence international standards dealing with data & #AI governance by adopting pragmatic interpretations of key data protection principles like purpose limitation and data minimisation.

010

Eduardo Ustaran @eustaran.bsky.social · 16/09/2025

“In the era of #AI, the principles of the #GDPR must be respected to enable trust” according to CNIL’s President at #GPA25. A simple statement that summarises the crucial importance of data protection at this moment in time.

010

Eduardo Ustaran @eustaran.bsky.social · 16/09/2025

Straight off the bat as they say, the Korean privacy commissioner tells us in his opening speech of #GPA25 that he aims for this event to be a forum for collaboration to enable progress while addressing the challenges of #AI.

000

Eduardo Ustaran @eustaran.bsky.social · 12/09/2025

Just sharing this afternoon’s beautiful rainbow over London.

010

Eduardo Ustaran @eustaran.bsky.social · 02/08/2025

If you are planning to release in Europe a big #AI model any time soon, today is an important day…

033

Eduardo Ustaran @eustaran.bsky.social · 30/07/2025

As the application of the GPAI requirements under the #AI Act nears, here is your essential thought process to determine whether and how to comply.

033

Eduardo Ustaran @eustaran.bsky.social · 09/07/2025

Seeing the path to the hut at the base of the north face of Ben Nevis surely has to be a good addition to your scrolling. Being there is even better!

010

Eduardo Ustaran @eustaran.bsky.social · 01/07/2025

On this day, very warm greetings to all my Canadian friends and colleagues. Happy Canada Day!

000

Eduardo Ustaran @eustaran.bsky.social · 10/06/2025

Just watching the debate of the UK Data (Use and Access) Bill and it’s interesting that all the discussion so far is on what is not really the focus of the Bill: copyright & #AI. The Government is adamant to emphasise that the creative & technology industries need to reach a practical compromise.

100