In late 2022 the EU took a step that should raise the pulse of any executive who treats cybersecurity as “just IT.” The NIS2 Directive (Directive (EU) 2022/2555) is now the law of the land across much of Europe, and…
The GDPR enforcement regime is entering a new phase. On 16 June 2025, the European Parliament and the Council of the EU reached a provisional agreement on new procedural rules for cross-border data protection cases. The reform aims to fix…
📅On 17 September 2025, the European Data Protection Supervisor (EDPS) issued a formal Opinion on the European Commission’s plan to negotiate a new framework for EU–U.S. data sharing — directly tied to the U.S. Visa Waiver Program and border security…
When the European Union adopted the Data Act in 2023, Brussels hailed it as a milestone. For the first time, legislation sought not only to protect personal data—as the General Data Protection Regulation (GDPR) did—but to regulate the broader economic…
China’s public security authority announced that Dior’s Shanghai branch committed serious violations of China’s data protection laws by transferring Chinese customer data to its headquarters in France without mandatory legal safeguards. Background The issue traces back to a breach in…
Part 6/6: [S8fe.ai’s Manifesto] The global financial system was reshaped in 1944 at Bretton Woods, where world leaders aligned on rules to govern currencies, capital flows, and trade. Today, we face a similar turning point—except the currency is data, and…
This week, the U.S. FTC Chair sent a strong warning to tech giants: don’t weaken American users’ privacy or security just to comply with foreign rules. The message is clear—when companies face conflicting demands from jurisdictions like the EU and UK, applying…
Part 5/6: [S8fe.ai’s Manifesto] If the digital economy is the new trade economy, then cross-border data flows are its shipping lanes—and those lanes urgently need modern customs checkpoints. Today, most data leaves a country without documentation, taxation, or even awareness—a…
On 18 July 2025, Uganda’s Personal Data Protection Office (PDPO) ruled in Ssekamwa Frank & 3 others v. Google LLC that Uganda’s data protection compliance obligations apply to any entity—anywhere in the world—that handles the personal data of Ugandan citizens…
In the 20th century, national power was measured in barrels of oil and military might. In the 21st, it’s being rewritten in lines of code and terabytes of data. But we’re not ready. Data Is Not Just the New Oil…
