https://vulapri.com/knowledge-hub/guidance-watch/ Each week we surface a few resources that may help you do the work — authoritative guidance, tools, frameworks and reports, including the excellent-but-hard-to-find material you would otherwise only meet by accident. Not a feed of legislation news or fines. en-gb © VulaPri Limited Tue, 04 Aug 2026 17:11:39 +0000 1440 https://vulapri.com/knowledge-hub/guidance-watch/cnil-security-of-personal-data-guide/ https://vulapri.com/knowledge-hub/guidance-watch/cnil-security-of-personal-data-guide/ Mon, 03 Aug 2026 09:00:00 +0000 The CNIL's 25-factsheet baseline for Article 32 measures, with a changelog of what moved between editions and the regulator's own statement that it uses the guide. https://vulapri.com/knowledge-hub/guidance-watch/aepd-agentic-ai-data-protection/ https://vulapri.com/knowledge-hub/guidance-watch/aepd-agentic-ai-data-protection/ Fri, 31 Jul 2026 09:00:00 +0000 The Spanish regulator's 71-page guide, in English, mapping the GDPR onto agentic AI — and its load-bearing line: technical autonomy does not move the legal responsibility. https://vulapri.com/knowledge-hub/guidance-watch/edpb-dpia-template/ https://vulapri.com/knowledge-hub/guidance-watch/edpb-dpia-template/ Fri, 17 Jul 2026 09:00:00 +0000 The EDPB's draft DPIA template — 51 numbered instructions across seven sections. It standardises the record, not the method, and asks you to name the methodology you use. https://vulapri.com/knowledge-hub/guidance-watch/aepd-risk-management-and-dpia-guide/ https://vulapri.com/knowledge-hub/guidance-watch/aepd-risk-management-and-dpia-guide/ Fri, 17 Jul 2026 09:00:00 +0000 The Spanish regulator's 160-page DPIA and risk methodology, in English — and the most explicit regulator statement we have found of why DPIAs fail in the mitigations column. https://vulapri.com/knowledge-hub/guidance-watch/cnil-pia-guides-and-software/ https://vulapri.com/knowledge-hub/guidance-watch/cnil-pia-guides-and-software/ Fri, 17 Jul 2026 09:00:00 +0000 The CNIL's PIA guide suite and its free, open-source PIA software — actively maintained, version 4.1.0 released 2 April 2026, in twenty languages. https://vulapri.com/knowledge-hub/guidance-watch/denmark-dpia-templates-ai/ https://vulapri.com/knowledge-hub/guidance-watch/denmark-dpia-templates-ai/ Fri, 17 Jul 2026 09:00:00 +0000 The Danish regulator's two DPIA templates — one generic, one built specifically for developing and running AI solutions, carrying a catalogue of concrete AI risks and mitigating measures. Danish-language Excel, and built with inspiration from the ICO's own AI risk toolkit. https://vulapri.com/knowledge-hub/guidance-watch/edpb-website-auditing-tool/ https://vulapri.com/knowledge-hub/guidance-watch/edpb-website-auditing-tool/ Fri, 10 Jul 2026 09:00:00 +0000 The EDPB's free, open-source website auditing tool: point-and-click cookie and tracker audits with evaluated findings and exportable audit reports — no coding required. Installers for Windows, macOS and Linux. https://vulapri.com/knowledge-hub/guidance-watch/edps-website-evidence-collector/ https://vulapri.com/knowledge-hub/guidance-watch/edps-website-evidence-collector/ Fri, 10 Jul 2026 09:00:00 +0000 The EDPS Website Evidence Collector: a free, open-source tool that captures reproducible evidence of what a website sets and sends — cookies, local storage, trackers and third-party requests — with no third-party cloud involved. https://vulapri.com/knowledge-hub/guidance-watch/edpb-guidelines-2-2023-technical-scope-eprivacy/ https://vulapri.com/knowledge-hub/guidance-watch/edpb-guidelines-2-2023-technical-scope-eprivacy/ Fri, 10 Jul 2026 09:00:00 +0000 The EDPB's adopted interpretation of which technologies the ePrivacy 'storage or access' rule catches — tracking pixels, tracked links, device fingerprinting, IP tracking and local processing, not just cookies. https://vulapri.com/knowledge-hub/guidance-watch/ico-storage-and-access-technologies-guidance/ https://vulapri.com/knowledge-hub/guidance-watch/ico-storage-and-access-technologies-guidance/ Fri, 10 Jul 2026 09:00:00 +0000 The ICO's definitive UK guidance on cookies, tracking pixels, device fingerprinting and similar technologies — finalised 29 April 2026 and updated for the Data (Use and Access) Act 2025 changes to PECR. https://vulapri.com/knowledge-hub/guidance-watch/dsk-standard-data-protection-model/ https://vulapri.com/knowledge-hub/guidance-watch/dsk-standard-data-protection-model/ Fri, 03 Jul 2026 09:00:00 +0000 The DSK's Standard Data Protection Model (SDM): a regulator-built method that turns the GDPR's Article 32 'appropriate technical and organisational measures' duty into seven testable protection goals with a reference-measures catalogue. https://vulapri.com/knowledge-hub/guidance-watch/nz-gcpo-privacy-maturity-assessment-framework/ https://vulapri.com/knowledge-hub/guidance-watch/nz-gcpo-privacy-maturity-assessment-framework/ Fri, 03 Jul 2026 09:00:00 +0000 New Zealand's Government Chief Privacy Officer Privacy Maturity Assessment Framework (PMAF): a free framework to score privacy programme maturity across four dimensions and three maturity levels. https://vulapri.com/knowledge-hub/guidance-watch/cms-gdpr-enforcement-tracker/ https://vulapri.com/knowledge-hub/guidance-watch/cms-gdpr-enforcement-tracker/ Fri, 03 Jul 2026 09:00:00 +0000 CMS's GDPR Enforcement Tracker: a free, searchable database of publicly announced GDPR fines across the EU/EEA, plus an annual analytical report — a management and benchmarking tool for privacy risk. https://vulapri.com/knowledge-hub/guidance-watch/edpb-spe-law-compliance-ai-security-data-protection/ https://vulapri.com/knowledge-hub/guidance-watch/edpb-spe-law-compliance-ai-security-data-protection/ Fri, 03 Jul 2026 09:00:00 +0000 An EDPB Support Pool of Experts training by Dr Marco Almada on the legal and compliance interface of the GDPR, AI Act and Data Act for AI security and data protection — the author's independent views, not an official EDPB position. https://vulapri.com/knowledge-hub/guidance-watch/edpb-pseudonymisation-guidelines-01-2025/ https://vulapri.com/knowledge-hub/guidance-watch/edpb-pseudonymisation-guidelines-01-2025/ Fri, 26 Jun 2026 09:00:00 +0000 The EDPB's draft Guidelines 01/2025 on Pseudonymisation — definition, benefits and when to use it, with an annex of ten worked examples. A practical reference for DPIAs and Art. 32 security. https://vulapri.com/knowledge-hub/guidance-watch/ibm-ponemon-cost-of-a-data-breach-2025/ https://vulapri.com/knowledge-hub/guidance-watch/ibm-ponemon-cost-of-a-data-breach-2025/ Fri, 26 Jun 2026 09:00:00 +0000 IBM/Ponemon's 2025 Cost of a Data Breach Report — global average USD 4.44m (down 9%), US all-time high USD 10.22m, with new shadow-AI findings. Listed as a widely-recognised industry benchmark. https://vulapri.com/knowledge-hub/guidance-watch/norway-pbd-software-development/ https://vulapri.com/knowledge-hub/guidance-watch/norway-pbd-software-development/ Fri, 26 Jun 2026 09:00:00 +0000 Datatilsynet's practical, developer-facing guide to building GDPR Article 25 data protection by design and by default into the software development lifecycle. https://vulapri.com/knowledge-hub/guidance-watch/cipl-accountable-ai-best-practices/ https://vulapri.com/knowledge-hub/guidance-watch/cipl-accountable-ai-best-practices/ Fri, 26 Jun 2026 09:00:00 +0000 CIPL's white paper mapping accountable-AI best practices onto its seven-element Accountability Framework — a practical structure for standing up an AI governance programme.