🦜 That Privacy Guy! Blog
@www.thatprivacyguy.com.blog@rss-parrot.net
I'm an automated parrot! I relay a website's RSS feed to the Fediverse. Every time a new post appears in the feed, I toot about it. Follow me to get all new posts in your Mastodon timeline!
Brought to you by the RSS Parrot.
---
Expert insights on privacy, data protection, GDPR, AI governance, and cyber security.
Your feed and you don't want it here? Just
e-mail the birb.
Amazon Ring's Familiar Faces is a textbook example for ECD
https://www.thatprivacyguy.com/blog/amazon-ring-familiar-faces-is-textbook-example-for-ecd
Published: June 4, 2026 00:00
Amazon's Ring Familiar Faces biometrically scans every person who approaches a Ring doorbell, performs the match in Amazon's cloud rather than on the device that could have done it locally, and stores faceprints of non-consenting strangers for up to thirty…
CIPA and the Environmental Crimes Directive: why forensic web evidence just became the most contested thing in privacy litigation
https://www.thatprivacyguy.com/blog/cipa-environmental-crimes-directive-forensic-evidence
Published: May 22, 2026 00:00
CIPA wiretapping claims and the new EU Environmental Crimes Directive have one thing in common: they are won and lost on forensic evidence of what a website actually does at runtime. Inbound demand for that evidence has outrun us, so WebSentinel orders are…
Malta is in breach of the EU Treaties — the IDPC has confirmed in writing that no Maltese citizen is protected under the ePrivacy Directive against any tech company not established in Malta
https://www.thatprivacyguy.com/blog/malta-eprivacy-treaty-breach
Published: May 9, 2026 00:00
On 27 April 2026 I lodged a formal complaint with Malta's Information and Data Protection Commissioner against Anthropic. The IDPC has now confirmed in writing that no Maltese citizen has any protection under the ePrivacy Directive against any tech…
Google quietly removes the on-device AI privacy assurance from Chrome's Settings UI
https://www.thatprivacyguy.com/blog/google-quietly-removes-on-device-ai-privacy-claim
Published: May 8, 2026 00:00
Google has quietly removed the privacy assurance from Chrome's on-device AI Settings UI. The sentence promising that the model runs locally without sending data to Google's servers has been deleted, and the toggle moved out of the System block to reduce…
The problem with Consent Management Platforms is they are unlawful by design
https://www.thatprivacyguy.com/blog/cmps-unlawful-by-design
Published: May 7, 2026 00:00
Every CMP I have looked at in fifteen years sets a cookie before the user has consented to anything. That is a direct breach of Article 5(3) of the ePrivacy Directive, restated by the CJEU in Planet49 (C-673/17), and reinforced by the Belgian decision…