Data, AI and privacy: analysis and field notes
We share what we learn from designing and operating Data & AI solutions.
Artificial intelligence, analytics, GDPR, consent, sovereignty and architecture: content meant to make sense of the changes that have a concrete impact on organisations.
No articles found
Try another term or a different category.
Digital Omnibus: what the AI Act delay actually changes
Regulation (EU) 2026/1744 defers high-risk obligations to December 2027. What has applied since 2 August 2026, and what it means for UK organisations.
MLOps: definition, lifecycle and tooling for keeping a model in production
MLOps explained: the lifecycle of a model in production, the three maturity levels, the tooling, drift, and what changes with LLMs (LLMOps).
Quebec Law 25: obligations, deadlines and compliance (2026 guide)
Quebec Law 25 explained: who it applies to, the 2022-2024 obligations, GDPR comparison, CAI penalties and a practical compliance roadmap for 2026.
AI anonymisation and NER: the guide that disentangles anonymisation, pseudonymisation and UK GDPR (2026)
How NER-based anonymisation works, where it fails, and the UK GDPR distinction between anonymised and pseudonymised data, per the ICO code of practice.
Custom AI Bookkeeping Pre-Posting: Filling the Gaps Sage, Xero and QuickBooks Can't Cover (UK 2026)
Bespoke AI pre-posting for UK practices: heterogeneous invoices, multi-format expenses and non-Peppol foreign suppliers, beside Sage, Xero and QuickBooks.
AI Invoice Extraction for UK Businesses: What Cloud Accounting Software Can't Do (2026)
AI extraction for non-standard invoices — foreign suppliers, healthcare bills, multi-format receipts — where Xero, QuickBooks and Sage stop short.
AI Invoice Automation: A 2026 P2P Guide for UK Finance Leaders (MTD, PEPPOL, ICO)
AI invoice automation in the UK: Making Tax Digital alignment, the PEPPOL B2G mandate, OCR with three-way matching, ERP integration and measurable ROI.
AI Email Management for Business: 2026 Practitioner Guide (UK)
Smart triage, classification, reply suggestions, thread summarisation and structured extraction — with Outlook and Gmail integration and UK GDPR.
Business Email Automation in 2026: A Practical Guide for UK Companies
Email automation for UK businesses: five levels of automation, the tools that deliver (Make, n8n, Outlook Copilot), and UK GDPR and PECR compliance.
AI Email Triage in 2026: A Practical Guide for UK Enterprises
AI email triage for UK businesses: a four-block architecture, a taxonomy that holds up, Outlook and Mimecast integration, UK GDPR compliance and ROI.
AI Email Classification: Techniques and Tools for UK Businesses 2026
AI email classification for UK and Irish teams: sorting vs classifying, multi-label taxonomies, generic LLMs against dedicated classifiers, UK GDPR.
AI Email Assistant for Outlook and Gmail: 2026 UK Practitioner Guide
Microsoft 365 Copilot, Gemini in Gmail and sovereign alternatives compared: integration patterns, real limits and UK GDPR compliance under ICO guidance.
Business AI Agents: 2026 Practical Guide for UK Companies (Frameworks, Use Cases, Oversight)
Agent or assistant? Frameworks (LangGraph, n8n, Dify), what survives production, the guardrails you cannot skip, and where ICO guidance applies.
UK Cyber Essentials & sovereign cloud certification for business: 2026 practical guide
Cyber Essentials Plus, ISO 27001, NCSC Cloud Security Principles, G-Cloud, NHS DSPT and MoD JSP 440 — the UK sovereign cloud certification guide.
Sovereign Cloud for Business: UK Practical Guide 2026
Sovereign cloud in the UK: what it means, who provides it (OVHcloud London, IBM, Azure UK Sovereign), how it compares to hyperscalers, and UK GDPR.
Enterprise RAG: architecture and best practices for 2026
Retrieval-Augmented Generation in UK enterprises: a six-component architecture, choosing a vector database, sovereign LLMs and ICO compliance.
Local LLM in Business: Deploying Sovereign AI On-Premise (2026)
Open-weight models (Llama 3, Mistral, Qwen, Phi-3), the hardware you need, deployment tools, performance against cloud, total cost and security.
Healthcare AI in 2026: NHS Compliance, DSPT, DTAC and Architecture Choices
Healthcare AI in the UK: DSPT certification, Caldicott principles, MHRA medical devices, the DTAC framework, and on-premise against cloud.
DPIA for an AI project: practical guide 2026 (UK GDPR + EU AI Act)
When a DPIA is mandatory for an AI project, the ICO's five-step method, how it meets the EU AI Act, and a structure template you can reuse.
Business AI Charter: Practical 2026 Guide (UK GDPR + EU AI Act)
Why a workplace AI charter matters, its eight essential sections, a minimum template, and how to deploy it under UK GDPR and union recognition rules.
GDPR-Compliant AI: 2026 Compliance Guide for Enterprises
GDPR-compliant AI: legal framework, DPIA, best practices, cloud vs on-prem and recent fines — operational 2026 guide for DPOs and decision-makers.
Business AI Training: A Practical 2026 Guide for Enterprise Teams
Business AI training: 4 levels of usage, CLEAR prompt method, GDPR/AI Act compliance, in-house vs external — practical guide for enterprise teams in 2026.
ChatGPT for business in the UK: 2026 practical guide (UK GDPR, ICO, sovereign alternatives)
Deploying ChatGPT in a UK enterprise: UK GDPR risks, the post-Brexit transfer regime, ICO expectations, sovereign alternatives and an AI usage policy.
Mistral vs ChatGPT: Honest Enterprise Comparison (2026)
Mistral against ChatGPT on ten criteria — sovereignty, performance, price, UK GDPR, integrations — with a decision tree and a hybrid strategy.
AI for SMEs: practical guide 2026 (use cases, budget, UK GDPR)
AI for UK SMEs in 2026: 5 high-ROI use cases, realistic budget, mistakes to avoid, UK GDPR & ICO compliance — operational guide for British SME directors.
AI Use Cases for Business: 5 Patterns That Work in 2026
AI use cases for business: 5 patterns that scale (extraction, classification, automation, agents, anonymisation), selection criteria and pitfalls.
Sovereign AI: Definition, Stakes and Real Choices in 2026
Sovereign AI in 2026: what makes an AI system truly sovereign, comparison of European players (Mistral, Albert, Aleph Alpha) and TCO vs ChatGPT Enterprise.
GDPR Compliance for E-Commerce: What UK Online Retailers Must Know
UK e-commerce GDPR: ICO enforcement priorities, PECR rules for cookies and email marketing, and a practical compliance checklist for online retailers.
GDPR Fines: Complete Breakdown of CNIL Sanctions and How to Avoid Them
Record CNIL fines in 2025: €486.8M. Google, SHEIN, FREE, France Travail… Full breakdown of GDPR sanctions, recurring violations, and how to stay compliant.
Complio vs GDPR Consultancy Audit: Comparison
Complio (89 euros, 10 min) vs consultancy firm (5,000 euros, 6 weeks): detailed comparison to choose the right GDPR audit approach.
Cookilio vs Tarteaucitron: Which Cookie Manager to Choose?
Cookilio vs Tarteaucitron comparison: consent proof, support, ease of integration. Free open source or turnkey sovereign CMP?
The 10 Most Common GDPR Mistakes Made by Businesses
Missing privacy policy, cookies without consent, nonexistent records... The 10 GDPR mistakes that cost dearly, with examples of real sanctions.
Cookilio vs Didomi: Sovereign CMP or Enterprise Platform?
Cookilio vs Didomi comparison: sovereign SMB CMP at EUR 9/month vs enterprise CMP on custom quotes. Features, pricing, sovereignty, and simplicity.
Cookilio vs Axeptio: Which CMP Should You Choose?
Cookilio vs Axeptio comparison: data sovereignty, consent proof, UX and pricing. Find the right CMP for your website.
AI Act: What Businesses Need to Know in 2026
Timeline, risk classification, obligations by category: everything businesses need to know about the European AI Act in 2026.
Website GDPR Audit: Complete Guide 2026
What is a website GDPR audit? What to check, why it is essential, and how Complio does it in 10 minutes for 89 euros.
Cookie Wall: Legal or Not in France in 2026?
Is the cookie wall legal under the GDPR? Legal history, DPA criteria, EDPB position, sanctions and compliant alternatives for publishers.
GDPR-Compliant Cookie Banner: Complete Guide 2026
The 7 rules for a GDPR-compliant cookie banner. Prohibited dark patterns, proof of consent, common mistakes and practical solutions.
Cookie Consent Management: GDPR Guide 2026
How to manage cookie consent in GDPR compliance. CMP selection criteria, consent proof, regulatory audits, and solution comparison.
Data Hosting in Europe: Why It's Essential
CLOUD Act, Schrems II, transfers outside the EU: why hosting data in Europe has become a legal and strategic imperative for businesses.
Digital Sovereignty: Challenges and Solutions for SMBs
83% of European cloud spending goes to US providers. Digital sovereignty: definition, concrete challenges, and accessible solutions for SMBs in 2026.
GDPR Website Checklist: 15 Essential Points
The 15 points to check to ensure your website is GDPR-compliant. Actionable checklist with regulatory obligations and automated controls by Complio.
Cookies and GDPR: Everything You Need to Know in 2026
Complete cookies and GDPR guide: cookie types, legal obligations, ePrivacy Directive, compliance checklist and solutions for website publishers.
GDPR Compliance: The Complete Guide for Businesses
The 8 key GDPR obligations, checklist by company size and concrete tools to achieve GDPR compliance in 2026.