Language

🇬🇧English🇩🇰Dansk🇸🇪Svenska🇩🇪Deutsch

Blog

Data Security Insights

Insights on GDPR, NIS2, AI security, and data minimization.

Copilot didn't leak your data. It made others find it.
CopilotMicrosoft 365Data Discovery

Copilot didn't leak your data. It made others find it.

Microsoft 365 Copilot honours every permission you have set. That is exactly the problem. For twenty years obscurity was doing the work you thought access control was doing.

Adam SonnetAdam Sonnet
||6 min read
Why Europe and the Free World Might Be the Real Winners in the AI War
AIEuropeOpen Source

Why Europe and the Free World Might Be the Real Winners in the AI War

David Junge argues that Europe is exceptionally well-positioned to benefit from AI, thanks to open-source models, world-class digital infrastructure, and renewable energy approaching zero cost.

David JungeDavid Junge
||3 min read
Real-World Purview Benchmark: We Tested Microsoft Purview on 89,521 Files
PurviewGDPRBenchmark

Real-World Purview Benchmark: We Tested Microsoft Purview on 89,521 Files

Independent benchmark testing Microsoft Purview classification accuracy on a 73 GB synthetic dataset. Results: 99.8% passport misclassification, 91% payment card errors, and critical gaps in GDPR coverage.

D
Data & More
||4 min read
You don't need the AI Act. Article 5 already said no.
AI ActGDPRNIS2

You don't need the AI Act. Article 5 already said no.

Compliance teams are waiting for AI Act guidance before touching their AI deployments. The obligations that actually bite are eight years old and already in force.

Adam SonnetAdam Sonnet
||7 min read
We use AI to find personal data. We don't let it delete anything.
PurviewClassificationDeletion

We use AI to find personal data. We don't let it delete anything.

Classification produces a probability. Deletion is irreversible. Any vendor who connects those two directly is selling you a confidence they cannot justify.

Adam SonnetAdam Sonnet
||7 min read
Data Protection in a Hybrid War: Why Data Minimization Is Your Last Line of Defense
SecurityGDPRData Minimization

Data Protection in a Hybrid War: Why Data Minimization Is Your Last Line of Defense

David Junge argues that in today's hybrid war landscape, data minimization is the last line of defense. When breaches happen, the data that isn't there can't be stolen.

D
David Junge
||2 min read
Privacy protects people. AI security protects companies. Watch what happens when they disagree.
GDPREthicsData Minimization

Privacy protects people. AI security protects companies. Watch what happens when they disagree.

Most of the time the two align, and the alignment is what makes this business work. The interesting question is the cases where they come apart — and who is in the room when they do.

Adam SonnetAdam Sonnet
||6 min read
Can you actually delete someone from a RAG pipeline?
DSARRAGRight to Erasure

Can you actually delete someone from a RAG pipeline?

A data subject access request arrives. You delete the source document and close the ticket. The person is still in four other places, and one of them you cannot reach.

Adam SonnetAdam Sonnet
||6 min read
D&M
SecurityCISOAI

Your Data Is in Clear and Present Danger

David Junge warns that unstructured and unmanaged security information is the weakest part of most organizations' security frameworks, based on analysis of over 4 billion datasets.

D
David Junge
||4 min read
Data centers in orbit are a better idea than they sound
Data SovereigntyGDPRData Minimization

Data centers in orbit are a better idea than they sound

The physics is more convincing than the pitch decks. The jurisdiction is where it gets hard — and that is a question European compliance teams should look at now, not in 2035.

Adam SonnetAdam Sonnet
||8 min read
When Murder Turns Out to Be Bad Statistics
StatisticsData PrivacyClassificationBayesian

When Murder Turns Out to Be Bad Statistics

David Junge explores how bad statistics sent innocent people to prison, and draws a surprising parallel to data privacy classification, Bayes' theorem, and the Raven Paradox.

David JungeDavid Junge
||6 min read|LinkedIn