PII anonymization · GDPR compliance · Privacy engineering
The EU AI Act sets a hard deadline of August 2026 for GPAI model providers to document and govern training data. Here is exactly what Article 10 requires, what counts as anonymized, and how organizations can comply before the deadline.
Synthetic data is increasingly marketed as a privacy-safe alternative to anonymized data. But the legal status of synthetic data under GDPR is not settled, and the privacy guarantees depend entirely on the generation method. Here is what you need to know.
Dataset after dataset has been re-identified in academic research and adversarial settings. This post surveys the current state of re-identification attacks — what techniques work, against what types of data, and what this means for anonymization practice.