NewIssue 2 · November 2026: The GDPR rewrite is back. Your breach playbook may be next.

Data & AI Governance Leader · Brussels, Belgium

Data and AI governance that stands up to regulators

The AI Act, the GDPR reform and the Data Act are rewriting what governance teams must prove. I help organisations in the EU and UK build controls that regulators accept and business teams actually use.

Read the latest BriefSubscribe and get the free checklist
New issueIssue 2 · November 2026

The GDPR rewrite is back. Your breach playbook may be next.

GDPR reformBreach notificationCookiesAI Act

Read Issue 2 · 8 min read

12+

years in data governance and compliance

Benelux & UK

data governance lead at Cognizant

Banking to consulting

BCBS 239 at Wells Fargo, GDPR across EU clients

EU Data & AI Regulation Brief

Latest issue

All issues →
NewIssue 2 · November 20262 November 2026· 8 min read

EU Data & AI Regulation Brief: Issue 2, November 2026

The GDPR rewrite is back. Your breach playbook may be next.

Why it matters

EU governments have agreed how they want to change the GDPR. Nothing is law yet, but the direction is set: fewer breach notifications and more internal evidence. Teams that can prove their risk assessments will gain; the rest will be exposed.

  • GDPR reform
  • Breach notification
  • Cookies
  • AI Act
  • Data Act

Inside this issue

  1. 1Breach notices: high-risk breaches only, within 96 hours instead of 72
  2. 2One EU-wide DPIA list from the EDPB, and a legal test for pseudonymised data
  3. 3Uber fine of €824,990,000 published; AI Act output marking due 2 December
Read Issue 2 8 min read, with a to-do list for this month

What I work on

Regulation into practice

Turning GDPR, BCBS 239 and now the EU AI Act into operating models, controls and evidence that hold up under scrutiny.

Governance foundations

Data ownership, metadata, lineage and data quality, built so that the same foundations serve compliance, analytics and AI.

Platforms that get adopted

Collibra, Microsoft Purview and Informatica implementations designed around how people actually work, not only how the tool is licensed.

More about my background →

Get the EU Data & AI Regulation Brief

One email a month. What changed in EU data and AI regulation, why it matters for governance teams, and what to do about it.

Your email is used only to send this newsletter and, if you ask for it, the checklist. It is never shared. Unsubscribe at any time by replying to any issue.