Does Your SaaS Actually Need a Data Protection Officer? Running the Article 37 Test

The GDPR question SaaS founders ask most often has no numeric answer — it turns on two deliberately undefined phrases. And whichever way you land, you need to be able to show your work.

On July 23, 2026
0 Comment

GDPR Regulators Just Finished Grading Europe on ‘The Right to Be Forgotten.’ Now They’re Grading Honesty.

The EDPB just closed the book on a year-long investigation into how companies handle deletion requests — and immediately opened a new one into whether companies are honest about what they collect in the first place.

On May 9, 2026
0 Comment

The EU Just Gave AI Companies 16 More Months — Here’s What the AI Act Delay Actually Changes

The EU just pushed its AI Act's high-risk compliance deadline from August 2026 to December 2027 — but GDPR penalties for the same systems never moved, and that gap is where the real risk now sits.

On May 1, 2026
0 Comment