Dear Friends and stakeholders, Every generational company begins with a simple belief that the world is changing faster than most people realize. At S8fe.ai, our belief is that we are entering the age of the data economy — and that…
India has officially notified the DPDP Rules, 2025, activating core provisions of the Digital Personal Data Protection Act, 2023 — marking a major leap toward GDPR-style data protection. Key Components of the New Framework Consent Management Clear, verifiable consent required,…
Excerpt The European Court of Justice’s SRB decision deepens the meaning of “personal data” under GDPR — recognizing that data is relational, contextual, and civic in nature. As the boundary between private information and public infrastructure blurs, Europe is quietly…
Key Highlights Shein has faced more than €190 million in fines across Europe within just three months. • France: €150M for collecting cookies without user consent • France: €40M for misleading discounts • Italy: €1M for alleged greenwashing The company…
With the revised Federal Act on Data Protection (FADP) now in force and active FDPIC guidance on AI, Swiss regulators have made it clear: AI systems are fully subject to data protection and accountability obligations. For financial institutions, FINMA applies…
The EU’s Financial Data Access Regulation (FiDA) is central to building an open finance ecosystem. It expands financial data sharing while safeguarding customer privacy through strict security and confidentiality requirements. FiDA covers a wide range of financial data types, including…
DORA Comes Into Effect On January 17, 2025, the EU Digital Operational Resilience Act (DORA) entered into force. It establishes a unified framework for ICT risk management in the financial sector, ensuring institutions can withstand, respond to, and recover from…
The European Union has set a global precedent once again. With the AI Act, it has established the world’s first comprehensive legal framework for artificial intelligence. Much like GDPR did for data privacy, the AI Act is designed not only…
Peru’s data protection authority (ANPD) has sharpened its stance on proportionality in data use. Companies can no longer rely on practices like photographing customer ID cards during product delivery — deemed excessive and unnecessary under Peru’s Personal Data Protection Law…
China’s public security authority announced that Dior’s Shanghai branch committed serious violations of China’s data protection laws by transferring Chinese customer data to its headquarters in France without mandatory legal safeguards. Background The issue traces back to a breach in…
