Hi privacy navigators,

The Irish High Court recently awarded €7,500 in damages for a GDPR breach—reportedly the highest such court-awarded damages in Ireland (and Europe?) to date.

While administrative fines from data-protection authorities often reach into the millions or even billions, this relatively modest figure highlights a key point: it represents only an individual claim. Where numerous people are similarly affected by a single breach, the potential exposure for organizations could be enormous.

Find all resources from this episode at: https://conformally.com/privacy-navigator
Learn more about Conformally at https://conformally.com

Hi privacy navigators,

The Consent or Pay model is now a reality in the UK, and the ICO has set out a framework for how businesses can implement it while remaining GDPR-compliant.

At first glance, the approach seems balanced: users get a choice, companies get flexibility, and privacy remains protected—at least in theory.

But here’s the real question: Is privacy something that can be bought and sold like any other commodity? If so, shouldn’t the market set the price? And if not, doesn’t that make the very concept of “paying for privacy” fundamentally flawed?

The ICO tries to walk a tightrope between these two positions, but does it succeed? Or are we left with a framework that tries to regulate an uncomfortable reality without fully confronting its implications?

Find all resources from this episode at: https://conformally.com/privacy-navigator
Learn more about Conformally at https://conformally.com

Hi privacy navigators,

When news first broke that a small Chinese AI startup called DeepSeek managed to build a reasoning model better than OpenAI’s top-tier o1 model—and for around $6 million investment—everyone’s jaws dropped.

How could such an underdog possibly outperform a tech giant that’s burned billions in research and development

Not to mention it's free. As you can imagine it went viral in a matter of days.

But as we all know, there’s a dark side to these too-good-to-be-true stories. DeepSeek’s sudden stardom raised red flags among privacy regulators across Europe—especially once it became clear that this new AI powerhouse was more than happy to store and process your data on Chinese soil, in a manner that screams “GDPR… what’s that?”

Let’s dive into this fiasco and see what lessons we, as privacy pros, can learn from DeepSeek’s swift rise and potential meltdown.

Find all resources from this episode at: https://conformally.com/privacy-navigator
Learn more about Conformally at https://conformally.com