The anonym.community research team tracks GDPR enforcement, EU AI Act compliance, and PII anonymization trends across 14 research tracks.
The EU AI Act sets a hard deadline of August 2026 for GPAI model providers to document and govern training data. Here is exactly what Article 10 requires, what counts as anonymized, and how organizations can comply before the deadline.
Dataset after dataset has been re-identified in academic research and adversarial settings. This post surveys the current state of re-identification attacks — what techniques work, against what types of data, and what this means for anonymization practice.
GDPR fines passed €4 billion in cumulative total in 2025. Here are the major enforcement actions from 2025–2026, the patterns DPAs are targeting, and what the trajectory means for compliance programs.
Synthetic data is increasingly marketed as a privacy-safe alternative to anonymized data. But the legal status of synthetic data under GDPR is not settled, and the privacy guarantees depend entirely on the generation method. Here is what you need to know.
Children's personal data is the fastest-growing regulatory priority in data protection. The EU's Digital Services Act, US state laws, and GDPR enforcement are converging on stricter requirements. Here is the current state of obligations and enforcement.