European Commission

  • The Seven Year Itch: On the GDPR’s Anniversary, A Look At Its History, Legacy, and Uncertain Future

    June 4, 2025

    • Competition and Privacy

    • Consumer Privacy

    • Cybersecurity

    • Data Brokers

    • Data Minimization

    • Data Protection

    • Data Security

    • Enforcement of Privacy Laws

    • International Privacy

    • International Privacy Laws

    • Privacy Laws

    • Analysis

  • EPIC, Coalition Urge EU Polish Presidency to Prioritize Action Against Spyware Misuse

    December 13, 2024

    EPIC, alongside 13 civil society organizations, has sent a joint letter to the Polish Presidency of the Council of the European Union, urging them to prioritize decisive action against spyware misuse.

    • Data Protection

    • Intelligence Surveillance

    • International Privacy

    • Surveillance Oversight

    • Updates

  • EPIC Urges European Commission to address surveillance gaps in First Periodic Review of EU-US Data Privacy Framework

    September 5, 2024

    EPIC filed comments with the European Commission urging the Commission to address surveillance gaps in the EU-US Data Privacy Framework and protect the privacy rights of EU residents.

    • Data Protection

    • FISA Section 702

    • International Privacy

    • Surveillance Oversight

    • Updates

  • Feedback of EPIC to the European Commission regarding the First Periodic Review of the EU-US Data Privacy Frameworks

    September 5, 2024

    • Comments

  • What U.S. Regulators can Learn from the EU AI Act

    March 22, 2024

    On March 13, the European Union Parliament passed the Artificial Intelligence Act (“AI Act” or “the Act”), taking the penultimate step in a years-long legislative process. Originally proposed in early 2021, the sweeping, harms-based Act categorizes artificial intelligence systems by preconceived risks to fundamental rights, public safety, and public health into prohibited, high-risk, or low or no-risk systems.

    • AI Policy

    • Artificial Intelligence and Human Rights

    • Data Protection

    • Face Surveillance & Biometrics

    • International Privacy

    • Surveillance Oversight

    • Analysis

  • Summary: What does the European Union Artificial Intelligence Act Actually Say?

    February 23, 2024

    Covering everything from ChatGPT to the systems used to build freight truck cabins, the European Union’s Proposed Artificial Intelligence Act (“AI Act” or “the Act”) is a piece of tech legislation rivaled only in scope by the GDPR. The sweeping harms-based structure categorizes artificial intelligence systems by preconceived risks to fundamental rights, public safety, and public health (prohibited, high-risk, and low or no-risk systems).

    • AI Policy

    • Artificial Intelligence and Human Rights

    • Data Protection

    • International Privacy

    • International Privacy Laws

    • Privacy Laws

    • Analysis

  • European Commission Publishes Interactive Summary of Platform Content Moderation Data

    February 1, 2024

    The European Commission has published an interactive dashboard that summarizes data on content moderation decisions from multiple online platform providers.

    • Access to Information

    • Data Protection

    • Democracy & Free Speech

    • Enforcement of Privacy Laws

    • International Privacy

    • Online Harassment

    • Updates

  • EU Lawmakers Clinch Deal on Landmark Artificial Intelligence Legislation

    December 11, 2023

    Late Friday night, EU policymakers reached a political agreement on the final terms of the Artificial Intelligence Act.

    • AI Policy

    • Artificial Intelligence and Human Rights

    • Data Protection

    • International Privacy

    • International Privacy Laws

    • Privacy Laws

    • Updates

  • European Commission Adopts Adequacy Decision for EU-U.S. Data Privacy Framework

    July 10, 2023

    The European Commission has formally adopted an adequacy decision for the EU-U.S. Data Privacy Framework (the Framework). U.S. and EU authorities developed the Framework to replace Privacy Shield, a data transfer framework which was deemed non-compliant with the GDPR in the Schrems II case.

    • Communications Privacy

    • Consumer Privacy

    • Data Protection

    • Enforcement of Privacy Laws

    • FISA Section 702

    • Intelligence Surveillance

    • International Privacy

    • International Privacy Laws

    • Privacy Laws

    • Surveillance Oversight

    • Updates

  • EPIC Comments on EU Commission Spyware Guidelines

    June 14, 2023

    EPIC’s comments commended the EU Commission for its efforts to ensure proper due diligence by industry stakeholders but reiterated the need for a moratorium on at least the most intrusive forms of cyber-surveillance, such as spyware.

    • International Privacy Laws

    • Privacy in Public

    • Privacy Laws

    • Surveillance Oversight