Piero Bosio Social Web Site Personale

Annex I of the AI Act: the less-scrutinized frontier of high-risk classification.Not a minor variant of Annex III — the structural point where the AI Act grafts onto EU product safety, conformity assessment, and CE marking.The Article 6(3) derogation does NOT apply here. And the post-Omnibus narrowing of "safety component" changes the perimeter.New analysis on my blog NicFab.eu:🔗 https://www.nicfab.eu/en/posts/annex-i-high-risk-classification/#AIAct #AnnexI #HighRiskAI #ConformityAssessment #AI

NicFab Newsletter #21 is out.The protection of minors is becoming the lever with which Brussels is rewriting the architecture of the web — age verification, Ofcom's first Online Safety Act sanction, the push against fragmented national social media bans.This week: CJEU C-797/23 on publishers' fair remuneration, AI Act simplification proposal, EU concludes the CoE Framework Convention on AI.→ https://www.nicfab.eu/en/newsletter-issues/2026-05-19-issue-21/#Privacy #AIAct #GDPR #AI #DataProtection #cybersecurity

NicFab Newsletter #19 is out.This week:→ EDPB marks 10 years of GDPR→ AI Act trilogue stalls — high-risk rules still set for 2 August 2026→ EU Age Verification App found vulnerable hours after launch→ First European standard on trusted data transactions (EN 18235-1:2026)→ CopyFail (CVE-2026-31431) added to CISA KEV→ Minnesota first US state to ban nudification appshttps://www.nicfab.eu/en/newsletter-issues/2026-05-05-issue-19/#Privacy #DataProtection #AIAct #Cybersecurity #AI

NicFab Newsletter #18 is out 📬This week:→ Italian DPA: Poste/Postepay fined €12.5M, tracking pixel rules→ AI Digital Omnibus: possible AI Act postponement→ Civil society letter against weakening (34 orgs)→ EDPB/EDPS opinions on Biotech Act & cybersecurity→ Breaches: ANTS, ADT, Rituals, UK Biobankhttps://www.nicfab.eu/en/newsletter-issues/2026-04-28-issue-18/#Privacy #GDPR #AIAct #AI

AI Literacy: What Businesses Must Do TodayArt. 4 AI Act has been in force since 2 February 2025. Enforcement from 2 August 2026.My new post provides a practical toolkit:→ 30-day implementation plan→ Role-competence matrix→ Minimum evidence package→ 5 questions for your AI provider→ Register templateWithout AI literacy, human oversight, informed use, and risk management remain a paper exercise.🔗 https://www.nicfab.eu/en/posts/ai-literacy/#AIAct #AILiteracy #Compliance #AI #artificialintelligence

NicFab Newsletter #16 is out.This week: EDPB 2025 Annual Report and CEF 2026 on transparency, new eIDAS 2.0 rules for digital wallet onboarding, Adobe Reader zero-day exploited since December 2025, AI Act Art. 20 on corrective actions, and Legal Prompting on analyzing DPA decisions.Read: https://www.nicfab.eu/en/newsletter-issues/2026-04-14-issue-16/Subscribe: https://www.nicfab.eu/en/pages/newsletter/#subscribe-now#Privacy #GDPR #AIAct #Cybersecurity #DataProtection #eIDAS #AI

E se la tua AI aziendale stesse già esponendo dati senza che tu lo sappia?📌 Link all'articolo : https://www.redhotcyber.com/post/e-se-la-tua-ai-aziendale-stesse-gia-esponendo-dati-senza-che-tu-lo-sappia/A cura di Carolina Vivianti#redhotcyber #news #sicurezzainformatica #intelligenzaartificiale #cybersecurity #riskichyber #aiact #governanceai #protezione

@eparto Valid concern. The trust model in web-delivered code differs from native apps with verifiable binaries — agreed.My analysis is framed from a GDPR standpoint: the relevant distinction is between platforms with routine server-side access to content and platforms where content is encrypted client-side with keys the provider does not hold. That remains significant even acknowledging web trust assumptions.Open-source clients and audits mitigate — imperfectly, but materially.

AI Act: Who is actually a deployer, and what must they do today?Alarmist posts keep circulating — fabricated deadlines, non-existent penalties, overstated obligations.My new analysis: what "deployer" means, real timelines, actual penalties, the Commission's position on AI agents, and 6 practical steps.Regulatory precision is not an academic luxury. It is a professional responsibility.👉 https://www.nicfab.eu/en/posts/deployer-ai-agents/#AIAct #EUAIAct #AIGovernance #ArtificialIntelligence #Compliance #TechLaw #AI

NicFab Newsletter #15 is out.→ €31.8M record fine against Intesa Sanpaolo→ Trivy supply chain attack: 340GB stolen from EU cloud→ CNIL enforcement priorities 2026→ AI Act red lines on biometric categorization→ FortiClient EMS zero-day, React2Shell, $285M DPRK hack→ AI Act in a Nutshell: Article 19→ Legal Prompting: privacy notices and AI→ Podcast Episode #3🔗 https://www.nicfab.eu/en/newsletter-issues/2026-04-07-issue-15/📬 https://www.nicfab.eu/en/pages/newsletter/#subscribe-now#Privacy #GDPR #AIAct #AI #Cybersecurity #LegalPrompting

@edri ✊💚

Most AI Act rules apply from 2 August 2026. Four months left.I built three interactive guidance hubs — bilingual IT/EN, open access:→ AI Hub: timeline, roles, obligations, Annex III, harmonized standards, Art. 40–41, CEN/CENELEC JTC 21→ Operators Hub: six operators, Art. 25, penalties, practical scenarios→ GDPR & AI Hub: legal bases, Art. 22, DPIA/FRIA, profiling, transfersNot articles. Tools.👉 https://www.nicfab.eu/hub/#AIAct #GDPR #DataProtection #AIGovernance #Compliance #AI

📬 NicFab Newsletter #14 is out!This week: GDPR enforcement, AI Act new deadlines, DSA investigations on child safety, cybersecurity incidents linked by credential compromise, Legal Prompting techniques — and Episode #2 of the NicFab Podcast.🔗 https://www.nicfab.eu/en/newsletter-issues/2026-03-31-issue-14/📩 Subscribe: https://www.nicfab.eu/en/pages/newsletter/#subscribe-now#Privacy #DataProtection #GDPR #AI #AIAct #Cybersecurity #LegalPrompting

📰 NicFab Newsletter #14 — tomorrow, March 31This week: Italian DPA fines (Enel, Bakeca), EDPB case digest on legitimate interest, EU Parliament rejects CSAM voluntary detection (expires April 3), Commission vs 4 porn platforms + Snapchat, Amsterdam court bans Grok nude images, EU Commission cloud breach.Plus: AI Act in Pills #14, Legal Prompting #2, Podcast E02: The methodology.Subscribe:https://www.nicfab.eu/en/pages/newsletter/#subscribe-nowStay tuned! 🎯#Privacy #DataProtection #AIAct #Cybersecurity #Newsletter #AI

@elettrona @fediverso @nicfabpodcast_en @nicfabpodcast Episodes are intentionally short (7–15 min), which helps. Audio is processed with ffmpeg before upload — mono, 64kbps CBR MP3. For the jingle, just a 10s intro/outro in CC0. No heavy sound design, the focus is on clear spoken content. Keeps files well under 10MB per episode.

The European Parliament published a briefing on AI ethics in classrooms (PE 784.573). Strong on philosophy, but missing the connection to binding EU rules and competence frameworks.My analysis as a data protection lawyer: why we don't need more principles — we need to connect GDPR, AI Act, DigComp 3.0 and eCF 4.0 to protect children in schools.https://www.nicfab.eu/en/posts/ai-ethics-classrooms-ep/#AIAct #GDPR #AIethics #Education #DigComp #eCF #europeanparliament #AI

📬 NicFab Newsletter #12 | March 17, 2026Privacy, Data Protection, AI & Cybersecurity — weekly review.In this issue: EU enforcement actions, EDPB developments, cybersecurity alerts, and AI Act analysis.👉 Read the full issue: https://www.nicfab.eu/en/newsletter/2026-03-17-issue-12/📩 Subscribe: https://www.nicfab.eu/en/pages/newsletter/#subscribe-now#Privacy #GDPR #DataProtection #AIAct #Cybersecurity #InfoSec

📬 NicFab Newsletter #11 | March 10, 2026Privacy, Data Protection, AI & Cybersecurity — weekly review.In this issue: EU enforcement actions, EDPB developments, cybersecurity alerts, and AI Act analysis.👉 Read the full issue: https://www.nicfab.eu/en/newsletter/2026-03-10-issue-11/📩 Subscribe: https://www.nicfab.eu/en/pages/newsletter/#subscribe-now#Privacy #GDPR #DataProtection #AIAct #Cybersecurity #InfoSec

📬 NicFab Newsletter #10 | March 3, 2026Privacy, Data Protection, AI & Cybersecurity — weekly review.In this issue: EU enforcement actions, EDPB developments, cybersecurity alerts, and AI Act analysis.👉 Read the full issue: https://www.nicfab.eu/en/newsletter/2026-03-03-issue-10/📩 Subscribe: https://www.nicfab.eu/en/pages/newsletter/#subscribe-now#Privacy #GDPR #DataProtection #AIAct #Cybersecurity #InfoSec

📬 NicFab Newsletter #8 is out!This week: Amazon inspections by the Italian DPA, EDPB compliance templates for 2026-2027, Digital Omnibus concerns, AI Act standard prEN 18286 rejected, state-backed hackers weaponizing Gemini, LVMH fined $25M, Anthropic vs. Pentagon, and AI Act in Pills, Part 7: on record-keeping.👉 Read: https://www.nicfab.eu/en/newsletter/2026-02-17-issue-08/📩 Subscribe: https://www.nicfab.eu/en/pages/newsletter/#subscribe-now@EDPS @EUCommission #Privacy #GDPR #AIAct #Cybersecurity #DataProtection #AI #artificialintelligence