PrivacyPod

In this episode, our experts Hannes Saarinen and Pilvi Alopaeus take a closer look at one of the largest data breaches in Finland, where an attacker gained access to the City of Helsinki's network drive—compromising the personal data of around 300,000 people living in or, for example, attending school in Helsinki. To help us unpack the case and the newly published investigation report, we're joine...

We are back from summer break with a bunch of positive energy (that lasted through about the first two cases). This episode was recorded by Hannes, Jyri, and Pilvi on the historical day of data transfer anticlimax, despite all the LinkedIn posts preparing to sell you more legal advice. So, in this episode, we cover: The Latombe I that was not meant to be (insert violins and a slow dramatic tear)....

This PrivacyPod special episode was recorded on the very day the Latombe decision (T-553/23) was made, capturing the immediacy and raw analysis of a pivotal moment in EU–US data privacy law. Host Joost Gerritsen, together Prof. Dr. Gloria González Fuster (VUB, LSTS Director) and Pablo Trigo Kramcsák (PhD researcher, LSTS) delves into the EU General Court's ruling and its implications for the EU–US...

In this episode, Jyri and Pilvi have been fished out from the pool and summer vacays to discuss privacy–and they desperately try to be optimistic, it's summer, after all. Whippii. In this episode, we wallow in the following cases: TikTok Class Action in Germany (2000€ for the innocence of a child? How does that work? ) What is happening in the USA… (DOGE access to personal data, Palantir, migrant...

In this Joost's Case Corner episode Joost, Pilvi and Jyri discuss running and privacy. In fact, the cases on our chopping block today highlights that no matter how complex privacy is, it always comes back to the basic simple questions—that are anything but simple.   The chopping block serves you today the following cases: Meta v EDPB [T-319/24, 29 April 2025] → Meta challenged the EDPB's opinion a...

In this Joost's Case Corner episode Joost, Jyri, and Pilvi discuss why Netherlands you should go to Netherlands as well as some of the latest CJEU cases. On our chopping block today, are: CJEU Deldits [C-247/23] aka. Hungary v. GDPR and LGBTQ+ rights: GDPR and transgender identity: the rectification of data relating to gender identity cannot be made conditional upon proof of surgery. Spoiler alert...

In this episode Jyri and Pilvi try to overcome their urge to discuss anything else but privacy and just be negative and tired of how the world is going, and after a while they actually somewhat succeed in that–or perhaps succeed is a bit of a strong word.  In any case, we discuss the current world politics situation and how it might affect the DPF and data transfers to China, not to mention that L...

Once again, Pilvi and Jyri are joined by the legendary Joost, in another episode of Joost Case Corner and the magic of European Court of Justice (and Court of First Instance) case law!   In this episode, Pilvi and Jyri (with some connection issues but not to worry Phil and all Jyri fans–he's there!) discuss the following cases with Joost Gerritsen: Case T-354/22: Judgment of the General Court in B...

It's 2025 and the world is a little crazier… and more orange. So the tea is hot in the global privacy scene indeed, and Jyri and Pilvi are totally here for it.  Not to worry, we don't want to cause extra heartbeats this early in the year by speculating if the DPF will stand through this new orange era of madn…interesting times, but it is absolutely the right time to take a look at China.  We start...

Today's episode is perfect for the holiday season - or maybe you don't want to think about work stuff during holidays? Oh well, you are very welcome to join the ride with Laura and Pilvi when they discuss consent or pay -models with Filip Sedefov.  What is the topic really about? Are we regulating/focusing on the right things? Is personal data a tradable commodity that you can exchange for free se...

Gather around the fire, children, and listen closely: it is time once again to enjoy CJEU case law in the best possible way with Joost's Case Corner! Yes, Jyri and Pilvi join forces again with the amazing Joost Gerritsen and dive right back into the CJEU Super Friday cases. In this episode, we will cover: Case C-200/23, Agentsia po vpisvaniyata (A Bulgarian case about whether an individual has the...

Tired of keeping up with all the CJEU case law? Want to prepare  yourself for all the cool discussions at the IAPP Brussels event? Not to worry! The Joost's Case Corner covering the CJEU Super Friday cases has landed for you to enjoy. In the first of two of the Super Friday episodes, we will cover: Case C-21/23 Lindenapotheke (What is Art 9 data and what's not? Can companies rat out each other reg...

Are you googling me? Stop googling me, Jyri!   In this episode Jyri, Pilvi, and Milla take a look at the latest interesting privacy news. The repertoire includes discussion on what happens when regulation is 20 years late (=personalized ads and privacy issues) in the form of LinkedIn's 310 million euro fine and NOYB's Pinterest complaint.    We also fall in love (and you will too) with Germany's T...

In this episode, amazing hosts Milla Keller and Floora Kukorelli sit down with Jussi Mäkinen to discuss the (bright?) future of EU technology regulation. Jussi Mäkinen leads the EU regulatory team at the Federation of Finnish Technology Industries and has extensive experience in digital regulation, both in drafting policies and advocating for industry interests. The discussion revolves around the...

Get ready for a super META conversation—no, not about social media, but about who we are and what we really do. Milla and Laura are joined by the privacy guru herself, Natalija Bitiukova (Head of Privacy at Carlsberg). They almost spent the entire episode talking about beer, but once they tapped into Natalija's epic level of privacy geekdom, the focus shifted back to our roles in the privacy world...

The world of privacy and AI shook and trembled when Hamburg's Data Protection Authority published its edgy discussion paper on Large Language Models (LLM). In a nutshell, they stated that LLMs do not store personal data and that this is in line with the CJEU's views. Milla and Pilvi were honored and humbled (=overly excited with fangirl-hats on) to have Dr. Markus Wünschelbaum, Policy and Data Str...

In this episode, Jyri, Milla, and Pilvi walk  you through the latest hottest tea in privacy and data protection. First, we turn our attention to the herald of doom itself: Clearview and the actions taken by the Dutch Data Protection Authority (fine of 30,5 million euros and then some). Will the Dutch DPA follow through with going after the management and inflict personal liability the managers or...

See how we get back to podcasting after the brat summer? Very demure, very mindful. We are not like these other podcasts, we don't come back for the new season with a half-planned episode, we don't use chatGPT to make notes, we don't record too long episodes where half of it is just giggling–we're very mindful, very considerate, very cutesy. In today's very considerate episode Jyri, Milla, and Pil...

Prepare to get your mind blown (and not necessarily in a good way) - in this episode Laura, Floora, Pilvi, Milla and Hannes (what a full house!) discuss the theory and practice behind data processing roles.  What is the background of the roles, what is working and not working - why does CJEU want everyone to be joint controllers, what about the AI Act and much more. If you bear with us to the very...

Cambridge Analytica, Brexit, Trump, Russian Trolls. Political microtargeting has shaped the world and our society more and longer than we would like to admit. The European Union decided to fight back on it with Regulation on the transparency and targeting of political advertising, yet the road to the regulation was everything but smooth. Time will tell how or if the regulation will be able to actu...

"Welcome! Welcome! Welcome! To PrivacyPod Joost's Case Corner Episode, we are your hosts Milla and Pilvi with Joost Kle… Gerritsen. Thank you so much for joining us and let us begin with our first and most important story, the events of last week's Eurovision and the big denim egg that made it all the way to "Last Week Tonight" with John Oliver (Go Finland!)."  After we have gathered ourselves fro...

We're so glad to geek out on something a bit different this week, as we welcome Natallia Karniyevich to discuss all things cyber with our hosts Hannes Saarinen and Milla Keller. Natallia is a senior associate at Bird & Bird, where she also co-chairs Bird & Bird's international cybersecurity steering group.  Natallia guides us through what has been a flood of new, stricter cybersecurity legislation...

We have good news and bad news. Good news are, we are returning with Joost's Case Corner, so expect lots of CJEU goodness from this episode. Bad news are, we get pretty distracted by other (equally important) topics before actually getting to the CJEU privacy cases… But don't worry, whatever recent case law we didn't cover in this episode, we'll come back to in another episode in a few weeks! Ok,...

Laura and Panu are joined by Otto Lindholm to discuss recent  CJEU case related to Finnish transparency laws and disclosing criminal conviction data via telephone. What is the Finnish tradition of transparency of official documents really about, are we now losing it and what's going to happen? If you ask Panu, doomsday is upon us. Transparency is dead and criminals, politicians and reality tv cont...

It's been a heavy spring. So many new things are coming to privacy folk's way, the world is (literally) shaking, we are killing our one planet, old men are driving the world to turmoil and horror. The world is getting darker.  Therefore, without forgetting the importance of discussing all the difficult things, we decided to treat you with an invitation to Milla's happy place: to discuss something...