AEPD publishes second issue of scientific journal “Privacy, Innovation and Technology”

What happened

The Spanish Data Protection Agency released the second issue of its scientific journal PIT, dedicated to the 10th anniversary of the GDPR. The monograph examines proactive responsibility, the right to explanation in automated decisions, and data‑by‑design for generative AI used by public administrations. A privacy studies section presents nine research papers on topics such as neuro‑data, automatic anonymisation, data breaches, smart cities and synthetic identity.

Why it matters for trust and compliance

• Its status is published. It is enacted but may not be in force yet. Check the effective date before planning around it.
• The publication provides expert analysis of GDPR challenges and AI governance, helping practitioners anticipate regulatory impacts of emerging technologies.

Who is affected

Recommended actions

1. Check that privacy notices describe the practices this addresses.
2. Revisit retention schedules and data minimisation for the data involved.
3. Map the security requirements to existing controls and close gaps.
4. Inventory AI or automated decision systems in scope and their assessments.
5. Review age assurance and protections for minors' data.
6. Confirm handling of sensitive data categories meets the stricter rules.