Market Intelligence

Football clubs routinely collect biometric performance data on players through wearables and monitoring systems, yet when a player transfers to a new club, this valuable dataset typically remains with the selling club rather than following the athlete. Under GDPR, performance data qualifies as personal data—often special category health data—raising complex questions about portability rights, lawful processing bases, and whether players can compel clubs to transfer their historical metrics. The

Ireland's Data Protection Commission has published a comprehensive report examining its supervisory engagement with organizations developing AI products between 2021 and 2025, revealing a tenfold increase in AI-related engagements and highlighting critical compliance areas including lawful basis, transparency, and children's data protection. The report provides detailed insights into the DPC's quasi-regulatory sandbox approach and outlines key observations on data protection obligations for AI technologies,

The Italian Data Protection Authority has outlined eleven priority areas for its inspection activities from August to December 2026, targeting sectors ranging from geomarketing and digital health to artificial intelligence...

Implementing artificial intelligence in an organisation does not begin with choosing a tool, but with answering the question of who we are in the AI value chain and what we are responsible for.

The loss or corruption of data in a business is rarely “just” a technical problem. In practice it is a serious legal and financial crisis: production downtime, loss of trust among business partners and, in extreme cases, administrative fines running into millions.

The High Court has issued its first judgment on Ireland's representative actions procedure under the 2023 Act, addressing critical questions about how the GDPR's accountability framework affects...