Nicola Fabiano

Lawyer | Adj. Professor | Former Pres. San Marino Data Protection Authority | AI Researcher | IEEE | INNS | FHCA | @dappremo | #GDPR #IoT #Blockchain #XMPP

[Nicola Fabiano @nicfab]

The EU’s 3 June 2026 package on technological sovereignty links cloud, AI, semiconductors, and open source to strategic autonomy.

My analysis of COM(2026) 503, CADA, sovereignty levels, and GDPR implications:

https://t.co/M1C0kZbDLO

[Nicola Fabiano @nicfab]

Yesterday, I anticipated a reflection on the U.S. Executive Order of June 2, 2026, on advanced AI.

The article is now online.

The real contrast is not “U.S. innovation vs EU regulation”, but strategic-security governance vs legal-compliance governance.

https://t.co/EdnKDuUEBk

[Nicola Fabiano @nicfab]

NicFab Newsletter #22

→ Garante fines Ambrosetti €85k for late breach notification
→ Verizon DBIR: vuln exploitation overtakes credential theft
→ AI Act art. 112(1) review report
→ Colorado CADMA replaces the 2024 AI Act

https://t.co/mFgB1ikKKQ

#Privacy #AIAct #AI #GDPR

[Nicola Fabiano @nicfab]

The EU AI Act does not stand alone.
It is the architrave of a regulatory ecosystem resting on seven pillars of EU law. Original diagram of this systemic reading, now live:

→ https://t.co/Ou6dKPuu4o
→ https://t.co/1xyscbiLdr

#AIAct #EUAIAct #AILaw

@brandobenifei

[Nicola Fabiano @nicfab]

The difficulty with the AI Act is not reading it but turning it into an operational map.
Three new bilingual IT/EN resources on https://t.co/Y8ktXeMNq6:

→ AI Act Timeline
→ AI Act – Annex I
→ AI Act in Pills

👉 https://t.co/KWpfzIzcO7
#AIAct #AI #Compliance #GDPR

[Nicola Fabiano @nicfab]

Annex I of the AI Act: the less-scrutinized frontier of high-risk classification. Not a minor variant of Annex III, where the AI Act grafts onto EU product safety, conformity assessment, and CE marking. Article 6(3) derogation does not apply here.
https://t.co/nEx4lPi7Ft
#AIAct

[Nicola Fabiano @nicfab]

NicFab Newsletter #21 is out.

This week: CJEU C-797/23 on publishers' fair remuneration, AI Act simplification proposal, EU concludes the CoE Framework Convention on AI, Ofcom's first Online Safety Act sanction.

→ https://t.co/Oj9IDbzx4N

[Nicola Fabiano @nicfab]

Digital Omnibus on AI: provisional deal today.
Dates confirmed (Dec 2027 / Aug 2028 / Dec 2026), machinery to sectoral rules + equivalence clause, new Art. 5 ban on nudifiers/CSAM.
@brandobenifei
https://t.co/vc0GUp7KMO
#AIAct #DigitalOmnibus #AI

[Nicola Fabiano @nicfab]

NicFab Newsletter #19 is out.

→ 10 years of GDPR
→ AI Act trilogue stalls
→ EU Age Verification App vulnerabilities
→ First EU standard on trusted data transactions
→ CopyFail Linux kernel

https://t.co/8bvikVWVan

#Privacy #AIAct

[Nicola Fabiano @nicfab]

https://t.co/TDY0k85HEw — open, bilingual (IT/EN) reference for the EU digital regulatory ecosystem.

9 acts in full, inter-act cross-references, technical standards, and today an 80-entry AI-centric glossary.

https://t.co/59GMNenuLu

#AIAct #GDPR #EUlaw #AI

[Nicola Fabiano @nicfab]

NicFab Newsletter #18 📬

→ Poste/Postepay fined €12.5M
→ Tracking pixel guidelines
→ AI Digital Omnibus: possible AI Act postponement
→ EDPB/EDPS joint opinions
→ Breaches: ANTS, ADT, UK Biobank

https://t.co/6lLTqXWo5E

#Privacy #AIAct #AI

[Nicola Fabiano @nicfab]

For anyone following EU digital regulation, data protection, AI governance, cybersecurity & digital policy: a daily curated digest of institutional sources. Updated daily. Free.

https://t.co/15lfBF26pW

#AIAct #GDPR #Cybersecurity #AI

[Nicola Fabiano @nicfab]

Tracking Pixels in Email: the Italian DPA Guidelines and the consent puzzle.

A commentary on Decision No. 284/2026 — privacy by design (Art. 25 GDPR) & consent granularity (EDPB Guidelines 05/2020).

🔗 https://t.co/8XJ74MyjQJ

#GDPR #ePrivacy #pixels

[Nicola Fabiano @nicfab]

AI Literacy: What Businesses Must Do Today

Art. 4 AI Act in force since Feb 2025. Enforcement from Aug 2026.

New post: 30-day plan, role-competence matrix, evidence package, 5 questions for your AI provider.

https://t.co/1pZ4xGy0kZ

#AIAct #AILiteracy #AI

[Nicola Fabiano @nicfab]

NicFab Newsletter #16 is out — EDPB 2025 Annual Report, eIDAS 2.0 digital wallet onboarding rules, Adobe Reader zero-day (CVE-2026-34621), AI Act Art. 20 on corrective actions.
Read & subscribe free: https://t.co/CATmKFHeMV
#Privacy #AI #Cybersecurity #DataProtection #eIDAS

[Nicola Fabiano @nicfab]

Video conferencing is a GDPR compliance decision. Zoom, Teams, Meet, Jitsi & Proton Meet through the CLOUD Act and E2EE.
E2EE as a default is a legal safeguard.
https://t.co/p69Rdlnn6t
#GDPR #E2EE #Privacy @ProtonPrivacy

[Nicola Fabiano @nicfab]

AI Act: who is actually a deployer? Alarmist posts are spreading fabricated deadlines and non-existent penalties.
My new analysis: real obligations, real deadlines, the Commission's position on AI agents, and 6 concrete steps.
https://t.co/7zA1EP1WJG
#AIAct #EUAIAct #AIGovernance

[Nicola Fabiano @nicfab]

NicFab Newsletter #15
€31.8M fine Intesa Sanpaolo | Trivy breach hits EU cloud | AI Act biometric red lines | FortiClient EMS zero-day | Legal Prompting on privacy notices
🔗 https://t.co/BOVwexUQZh
📬 Subscribe: https://t.co/eLbrvQGgCV
#Privacy #AI #AIAct #Cybersecurity

[Nicola Fabiano @nicfab]

Most AI Act rules apply from 2 August 2026.

3 open-access guidance hubs, bilingual IT/EN:

→ AI Hub: obligations, standards, Art. 40
→ Operators Hub: Art. 25, penalties
→ GDPR & AI Hub: Art. 22, DPIA

https://t.co/TpkSUkfi7I
#AI #AIAct #dataprotection

[Nicola Fabiano @nicfab]

📬 NicFab Newsletter #14 is out!
GDPR enforcement, AI Act deadlines, DSA child safety probes, cybersecurity, Legal Prompting & Podcast Ep.2
🔗 https://t.co/pvQdHOJFvU
#Privacy #GDPR #AIAct #AI #Cybersecurity #LegalPrompting