Data & Law
What's digital sovereignty and how to practice it
Digital sovereignty isn't some abstract concept. It's about deciding who gets access to your data, where it lives, and what happens if a provider vanishes.
Your Data & the Law
Chat Control, e-Evidence, Cloud Act, the laws that decide who gets to read your data. We decode them, then look at the rights and tools you still have to protect your privacy from your Mac.
Where to start
Data & Law Explainer
Six months and nineteen global texts, the terrifying convergence
HR 8250, CSAR, verdict Meta, World ID, Online Safety Act. Six months, nineteen texts, four continents. One direction.
Data & Law Explainer
Your email provider has ten days to hand you over
Since 18 August 2026, your email data can be handed over within ten days to an authority in any member state, without a judge in your country.
All articles
Data & Law Explainer
Your email provider has ten days to hand you over
Since 18 August 2026, your email data can be handed over within ten days to an authority in any member state, without a judge in your country.
Data & Law Explainer
Passwork, « Made in EU » outside, FSB-certified inside
A tool sold as Made in EU, with code pushed from Russia. The label has no legal weight. Here's the checklist to vet your software supply chain.
Data & Law Explainer
Six months and nineteen global texts, the terrifying convergence
HR 8250, CSAR, verdict Meta, World ID, Online Safety Act. Six months, nineteen texts, four continents. One direction.
Data & Law Explainer
NIS2 forces companies to encrypt. CSAR prevents them from really doing it.
NIS2 forces encryption on businesses. CSAR wants to crack it. Same institution. Two incompatible texts. What it means for you.
Data & Law Explainer
Chat Control 2.0, the EU wants to read your messages first
The CSAR regulation would force messaging apps to scan your messages before encryption. Signal threatens to leave Europe. Here's what you can do.
Data & Law
What's digital sovereignty and how to practice it
Digital sovereignty isn't some abstract concept. It's about deciding who gets access to your data, where it lives, and what happens if a provider vanishes.