Lawyer | Adj. Professor | Former Pres. San Marino Data Protection Authority | AI Researcher | IEEE | INNS | FHCA | @dappremo | #GDPR#IoT#Blockchain#XMPP
The EDPB has adopted a common template for GDPR data breach notifications.
7 sections. 126 fields. Business logic for conditional visibility and validation.
nicfab.eu/en/posts/edpb-data…#GDPR#DataBreach#EDPB
The European Commission publishes the final Code of Practice on Transparency of AI-Generated Content — Article 50 AI Act, EU icons, adequacy assessment. Voluntary de iure, benchmark de facto.
nicfab.eu/en/posts/code-of-p…#AIAct#AI
Italy moves on #AIAct implementation: two draft decrees got preliminary approval — governance, policing, liability, AI literacy. My analysis: the parameters to watch, from Art. 74(8) to training as condition of effectiveness.
nicfab.eu/en/posts/italy-ai-…
New post: the European Commission's Draft Guidelines on high-risk AI classification — Annex III. Second part of the analysis, after Annex I. Consultation open until 23 June 2026.
nicfab.eu/en/posts/annex-iii…#AIAct#AI
NicFab Newsletter #24 is out.
This week: European tech sovereignty (Commission Open Source Strategy, Parliament → Qwant), the Garante on AI in schools, the EU General Court on the DMA perimeter, AI Act Art. 28.
Read → nicfab.eu/en/newsletter-issu…
The EU’s 3 June 2026 package on technological sovereignty links cloud, AI, semiconductors, and open source to strategic autonomy.
My analysis of COM(2026) 503, CADA, sovereignty levels, and GDPR implications:
nicfab.eu/en/posts/eu-techno…
Yesterday, I anticipated a reflection on the U.S. Executive Order of June 2, 2026, on advanced AI.
The article is now online.
The real contrast is not “U.S. innovation vs EU regulation”, but strategic-security governance vs legal-compliance governance.
nicfab.eu/en/posts/frontier-…
The difficulty with the AI Act is not reading it but turning it into an operational map.
Three new bilingual IT/EN resources on nicfab.eu:
→ AI Act Timeline
→ AI Act – Annex I
→ AI Act in Pills
👉 nicfab.eu/#AIAct#AI#Compliance#GDPR
Annex I of the AI Act: the less-scrutinized frontier of high-risk classification. Not a minor variant of Annex III, where the AI Act grafts onto EU product safety, conformity assessment, and CE marking. Article 6(3) derogation does not apply here.
nicfab.eu/en/posts/annex-i-h…#AIAct
NicFab Newsletter #21 is out.
This week: CJEU C-797/23 on publishers' fair remuneration, AI Act simplification proposal, EU concludes the CoE Framework Convention on AI, Ofcom's first Online Safety Act sanction.
→ nicfab.eu/en/newsletter-issu…
NicFab Newsletter #19 is out.
→ 10 years of GDPR
→ AI Act trilogue stalls
→ EU Age Verification App vulnerabilities
→ First EU standard on trusted data transactions
→ CopyFail Linux kernel
nicfab.eu/en/newsletter-issu…#Privacy#AIAct
ai-resources.eu — open, bilingual (IT/EN) reference for the EU digital regulatory ecosystem.
9 acts in full, inter-act cross-references, technical standards, and today an 80-entry AI-centric glossary.
ai-resources.eu/en/#AIAct#GDPR#EUlaw#AI
For anyone following EU digital regulation, data protection, AI governance, cybersecurity & digital policy: a daily curated digest of institutional sources. Updated daily. Free.
nicfab.eu/daily-digest/#AIAct#GDPR#Cybersecurity#AI
Tracking Pixels in Email: the Italian DPA Guidelines and the consent puzzle.
A commentary on Decision No. 284/2026 — privacy by design (Art. 25 GDPR) & consent granularity (EDPB Guidelines 05/2020).
🔗 nicfab.eu/en/posts/tracking-…#GDPR#ePrivacy#pixels
AI Literacy: What Businesses Must Do Today
Art. 4 AI Act in force since Feb 2025. Enforcement from Aug 2026.
New post: 30-day plan, role-competence matrix, evidence package, 5 questions for your AI provider.
nicfab.eu/en/posts/ai-litera…#AIAct#AILiteracy#AI