Data Sovereignty Is a Question of Who Holds Control
Ask most executives where their sensitive data lives and they can name a region. Ask who can read it, copy it or switch it off, and the answer gets vaguer....
Security and Compliance Blog
Learn security strategies, compare vendors, and implement best practices to prevent breaches and compliance violations from risky third party communications.
Posts by Marc ten Eikelder
Marc ten Eikelder, Senior Director Marketing EMEA, Kiteworks
Marc is responsible for developing and executing comprehensive brand and communication strategies across the EMEA region, with a clear focus on increasing brand awareness, driving demand and company growth. He brings over 20 years of experience in international marketing. His expertise covers a wide range of marketing disciplines, including digital marketing, campaign planning, influencer marketing, CRM, channel marketing, and go-to-market strategies.
Italy’s AI Act Decree Turns AI Governance Into Audit Evidence
Any organization running a high-risk AI system in Italy should now assume that an inspector can examine how that system is tested, and can arrive without warning. Legislative Decree No....
Three Email Mistakes Your DLP Rules Will Never Catch
Most email errors aren’t dramatic. Someone is in a hurry, autocomplete picks the wrong name, and a message meant for one client reaches another. For legal, finance, HR and deal...
GDPR Fines and Enforcement: How Penalties Are Set and How to Reduce Your Risk
GDPR fines are set by national data protection authorities under Article 83 of the regulation, and they come in two tiers: up to €10 million or 2% of total worldwide...
GDPR Joint Controllers Cannot Outsource Consent
Consent you did not collect is a liability you still own. That is the practical message of the EUR 8.6 million fine Norway’s data protection authority just imposed on Xandr,...
No One Owns the Fallout When an AI Agent Fails
Eight in ten executives across Europe and the Middle East say an AI incident reached their board or C-suite in the past year. Ask those same executives who answers when...
GDPR Article 32 Compliance for Financial Institutions: Continuous Security Measures
Financial Institutions and the Measures Regulators Keep Finding Missing GDPR has been enforceable for years, and Article 32 remains the single most commonly cited provision in major fines against financial...
Public Sector Bodies and the Measures That Age Out of “Appropriate”
Key Takeaways Article 32 Uses Illustrative Categories. It names four categories of measures without providing a fixed checklist, leaving appropriateness to be judged by risk. Risk Bar Moves With Data...
Manufacturers Handle Personal Data Too
GDPR has been enforceable for years, and Article 32 remains the single most commonly cited provision in major fines. Manufacturers processing employee, customer and supplier personal data alongside engineering data...
What “Technical Measures” Means for a Law Firm’s Own Systems
What “Technical Measures” Means for a Law Firm’s Own Systems GDPR has been enforceable for years, and Article 32 remains the single most commonly cited provision in major fines. Firms...
Public Sector AI and the Requirements Nobody Postponed
A political agreement pushing the EU AI Act’s high-risk obligations out to December 2027, covering AI used in essential public services and law enforcement, has led a lot of agencies...
Credit and Risk-Scoring Models Still Answer to the AI Act Today
A political agreement pushing the EU AI Act’s high-risk obligations out to December 2027 has led a lot of financial institutions to file the whole regulation under “next year’s problem.”...
EU AI Act Rules for Defence Contractors’ Dual-Use AI Systems
Dual-Use AI Systems and the Rules That Still Apply The EU AI Act excludes AI systems developed and used exclusively for military, defence or national security purposes from its scope...
Quality and Safety AI on the Factory Floor Isn’t Waiting for 2027
A political agreement pushing the EU AI Act’s high-risk obligations out to December 2027, and to August 2028 for AI embedded as a safety component in regulated machinery, has led...
What AI-Assisted Legal Tools Owe the AI Act Right Now
A political agreement pushing the EU AI Act’s high-risk obligations out to December 2027 has led a lot of firms to file the whole regulation under “next year’s problem.” That...