This column appears in an abridged version in Het Financieele Dagblad of Feb. 17, 2023. Follow this link for my earlier FD columns.
Regulators conjure up all kinds of new criteria that are not in the detailed privacy law GDPR. According to Axel Arnbak, they should not be allowed to change the rules of the game during the game. Illustration: Hein de kort for Het Financieele Dagblad Hacking is an art form not only reserved for whizzkids and cybercriminals. Simple lawyers and policymakers also hack day in and day out, but through loopholes to further their cause. For example, data regulators have known how to find new ways to further stretch strict privacy laws in their standard-setting and enforcement actions for decades. The latest multi-million dollar fines imposed on big tech companies, for example, are based in part on general principles not even spelled out in law, such as the principle of "propriety. From those principles, the watch