Latest Posts (20 found)
ava's blog 2 days ago

how i stay up-to-date on data protection & privacy law

Data protection, privacy and tech is a very dynamic field; every day, there are new court decisions, actions by big tech companies, and resulting questions, so thought I could share my resources that keep me informed. Unless marked with a German flag 🇩🇪, these are English. Not everyone has an RSS feed or their newsletter has additional info, so I settle for it. These are less interesting/applicable to you as a reader, but are still helpful for me. Reply via email Published 12 Mar, 2026 Interface-eu.org 🇩🇪 Zentrum für Digitalrechte und Demokratie 🇩🇪 Stiftung Datenschutz 🇩🇪 Netzpolitik.org European Law Blog Epicenter.works (🇩🇪 by default, but lets you select English version) Electronic Frontier Foundation TheCitizenLab 🇩🇪 Datenschutzkonferenz 🇩🇪 TÜV SÜD Datenschutz Blog Meetings with the data protection officer at my workplace. Following specific, notable people in the space - like via the RSS feed of their BlueSky or Mastodon. Magazine subscriptions like the Datenschutzberater My volunteer work at noyb.eu , translating and summarizing court cases, and learning about new events and projects in their Country Reporter meetings. Attending conferences, like the Beschäftigtendatenschutztag in Munich (2025) and Computers, Privacy and Data Protection (CPDP) in Brussels (2026, upcoming).

0 views
ava's blog 3 days ago

privacy vs. anonymity

A service promising to protect your privacy is not able to keep you anonymous. Why is that? This distinction is actually really important in data protection and privacy laws. Anonymity is about the inability to link an action, message, or data point to a specific individual. If attribution is possible (even if difficult, like with pseudonymization), you are identifiable and therefore not anonymous. Privacy , however, is about the ability to limit or control access to personal information. The focus is not identity removal, but boundaries of who can observe, store, or process personal data. Personal data has to, by default, be linked to an individual, which makes you identifiable and not anonymous. If it isn't, it no longer counts as personal data. You can see this in the way the GDPR works; it doesn't apply to anonymous data, but personal data, and pseudonymous data still counts. Privacy can exist with full identification: Your doctor knows you and your diagnoses, but is protecting your health file from unauthorized access. On the other hand, anonymity can exist without privacy, like anonymous browsing that is still heavily tracked behaviorally. The way we ensure privacy has different mechanisms. In data protection law, this is referred to as "technical- and organizational measures" (TOMs). For example, these can be access controls, confidentiality obligations, encryption, and following the general principles of data minimization, storage and purpose limitations in the way your systems and organization are set up. Where we think they overlap is when we expect an entity to protect our privacy so an external actor cannot identify us. This is problematic in a variety of ways: When we are offered privacy, we implicitly assume privacy from everyone , while most privacy guarantees actually mean privacy from the public or third parties or less tracking than other services; not privacy from the service provider itself, or legal obligations/the state. Companies who aim to protect your privacy act more like privacy intermediaries : They shield users from outsiders or offer a service where less data is harvested or data isn't sold to third parties, but they still maintain some capability to associate activity with an identity. If you want anonymity at a service offering you privacy, you have to create it yourself by not giving the service a way to identify you. This can be done via using a fake name and address, using a way to pay that doesn't directly link your bank accounts or other payment info (privacy.com cards, or crypto, etc.), accessing it via a VPN, and possibly more precautions on an OS level (Kali Linux, containers etc.). That's cumbersome and not realistic for most people, as their threat level is not one of a whistleblower; however, you can of course decide to do it anyway. Even then, it might be impossible, depending on the service and what you share with it. You can be anonymous on a blog, but over the years, the very little vague information you share can paint a picture. If you use an email service for your normal email needs, you will likely receive all kinds of de-anonymizing information: Doctor's appointments, booking confirmations, event tickets and more, all with your real name and location. The correct move here would be to separate your different email needs into different accounts and addresses. Sensitive political organizing, for example, should be separated from your personal information, either the one you give the service directly, or any other private email coming in. Just remember at the end of the day: Privacy is conditional access to identity. Anonymity is the absence of an identity link. If the right legal conditions are met, access to identity is given. But if the service doesn't know who you are, it cannot reveal it. Reply via email Published 11 Mar, 2026

0 views
ava's blog 3 days ago

'human oversight' is a meaningless buzzword

When talking about using AI for decision-making, you often hear that there will be " human oversight " or " human intervention ". One popular example that I have come across in conferences and webinars about data protection law is the hiring process and recruiting: Companies are already proudly using AI to select applicants. It summarizes CVs, compares qualifications with the job profile, and ranks candidates. At the end, HR decides who to invite for interviews based on this output. The fact that AI isn't just sending out the interviews itself immediately and instead, a human is required to write an email or press a button is the idolized "human oversight". The fact that someone could intervene and make a different decision is supposed to be enough. What bothers me is that despite being ranked as "high risk" under the AI Act (together with using AI for medical diagnosis, financial and legal advice, etc.), we aren't looking at how these systems are realistically used in practice. We shove a human in the loop ("HITL") somewhere to assuage fears and comply with legal requirements, but almost no one wants to talk about the fact that Think about it: You have an IT company that gets 400-600 applications on each open spot. Spending time on every single application weeding people out takes a lot of time. You want to save time using AI so the people whose CVs and motivational letters most closely match the job description are already pre-selected for you and ranked. You know the next few weeks will bring new application deadlines again and you're already behind. You just can't check all of the applications to see whether the AI messed up or not. You can do a random check here and there, but at what point will you just look at the top candidates, check their applications, see it was correctly summarized (or well enough), and assume the rest of applicants that weren't considered were assessed correctly as well? Why would you look at all or most of the applications again anyway when the AI system is advertised as saving you that time and step entirely? If anything, the human intervention here is for the companies - making sure that the AI didn't accidentally rank someone top that is completely unfitting for the task. It's not there for you . No one will notice if your perfectly fitting application has been disregarded by AI for no discernible reason, and no one will find it as part of the oversight process in the hundreds of other applications to make sure. If the AI makes the task quicker and the first top candidates sound fitting and plausible, that's it, nail in the coffin, why would HR put in more work? All you can realistically do is make them explain and check after each rejection where you were a good fit and know AI was used. If you don't do that, you can't know whether you've been unjustly treated by their AI hiring process or were rejected on a justifiable basis. As long as AI continues to hallucinate or leave things out inexplicably just to say sorry afterwards, this is a huge liability. Companies don't seem to really care for possible poor data quality, biases and systemic inequities that are subtle or deeply embedded, requiring more work and possibly an outside view to detect and mitigate. We are lacking nuanced oversight mechanisms, and I hope companies are prepared for the lawsuits this will generate. If a company wants to use AI in the hiring process, I'd at least expect them to do the following bare minimum: Unfortunately, companies have no incentive to do this! This is seen as more bureaucracy, more time and money wasted, restrictive to innovation. They're competing with companies who are grabbing talent even faster than them who don't give a shit about fairness in AI hiring. Each day they don't find a replacement or candidate for a new role is bad. And why hire more HR personnel to sift through hundreds of applicants if less HR personnel can handle it with AI? Organizational priorities and financial pressures don't allow enough checks and considerations to go into this delicate process. We need to question " human oversight " more closely and require more explanations on how they plan to combat opaque decision-making, automation bias and the pressure to optimize and make work as easy as possible. Until adequate systems are in place that combat this, it will always be ineffective and a buzzword to me. Reply via email Published 11 Mar, 2026 while HR does receive training on how to use AI and how it works, the reasoning behind AI selection and summaries is a black box for the users, AI recruiting is advertised as a huge time save, which stands in contrast to the checking you should technically be doing as a human to make sure the AI did a good job, most users will follow the AI recommendations blindly because they are presented in a way that sounds plausible and as time goes on, we get lazy and suffer from automation bias and oversight fatigue. having a clear documentation of AI capabilities and limitations for their employees incentivizing taking the time to question AI suggestions and do some 'manual' labor requiring detailed justification when accepting the AI suggestions/rankings the ability to explicitly name why the disregarded applications were denied by their AI system in each case (you're going to need this anyway when an applicant challenges the decision) testing the system and the employees by periodically entering a candidate application that should fit perfectly vs. one that is very unfitting, and see where they land and what HR does with them (similar to the existing practice of IT sending out fake phishing e-mails sometimes to test you) collecting decision patterns and errors to correct and adjust the AI system

0 views
ava's blog 5 days ago

yesterday, in my body

If you are a generally healthy person, it can be hard to conceptualize how quickly someone's illnesses can suddenly turn within a few hours, so here is an example from yesterday to illustrate it. My wife and I had made plans to go a tabletop/board game flea market at noon and then head over to a restaurant afterwards. I had slept well, I had a bit of breakfast, I put effort into my looks, I had no pain or other issues, everything was generally fine. My Crohn's disease had acted up here and there in the days prior, but no signs of that yesterday. On the way there, everything was fine. I had forgotten my noise-cancelling headphones at home, but the tram was surprisingly pleasant and manageable without it. I noticed I wasn't able to comfortably stand as long as I had now gotten used to (lower back pain from Bechterew's disease etc.), but I blamed it on being more sedentary recently. The flea market was so full, I only quickly walked through and then waited at the emptier entrance the rest of the time. At the restaurant, I tried a Vietnamese Iced Coffee for the first time, and oh boy... the restaurant really put some extra effort into that! It was very bitter and the coconut cream they included was extra, sickeningly, sweet to make up for it. Since my month without caffeine, I had gotten extra sensitive to caffeine again, and I tend to react badly to lots of sugar, so I expected some negative consequences, but it was tasty. On the way home, I start feeling extremely anxious due to the caffeine. I'm overwhelmed and extra sensitive, every noise and smell is too strong, I feel deeply uncomfortable in my body and just want to run away. I can't at least take away the sound element, because again, I had left the noise-cancelling headphones at home; deep regret at that point. When we make it home, I immediately free myself from everything that isn't necessary or comfortable and lie down in bed. I don't wanna be touched, and I don't want to talk, and if I have to talk, I whisper. Every sound feels like nails on a chalkboard, and every touch burns like lava. After some hours, I recover. I make some dinner with leftovers, and afterwards, decide I should work out at least a bit, as I feel okay again. A few minutes on my indoor cycle, and my body just feels off. I feel weak, but not the kind of weak you feel when you just need to eat or drink something. I start to feel really fatigued from the simplest and easiest movement, and I check my pulse on my watch. There it is, my best indicator that inflammation is currently high in my body: Unusually high bpm for what I do. I was rather slow pedaling without much resistance, and I was already at 122bpm when usually, I'd be at 104-110 max for this warmup/difficulty. Damn. I try to at least finish with very light, easy cycling, but I have to stop entirely. This kind of fatigue feels like you're forced to walk in slow motion, like a dream, or like underwater; everything feels like it has a weird, invisible resistance, and your limbs are so heavy. I try if I can at least do some stretching and crunches on my yoga mat, and that's easier. I still feel weird and fragile, but it's manageable. When I stop, the fatigue hits me like a brick wall. I only have energy to change clothes and collapse onto the sofa. That's where my usual "my autoimmune disorders are acting up" routine starts; I can barely manage anything. I don't really want to move, especially not my arms. I can barely find the words or express myself due to massive brain fog. I feel like I am a tiny ball living in my chest cavity, stuck in a huge meat mech. When it gets bad, I can no longer even handle looking at my phone, I can just lie there and focus on my breathing. That usually goes hand in hand with some general pain and discomfort that's hard to localize and feels like a huge cloud surrounding me, and I ask my wife for my pain/anti-inflammation meds, because otherwise I just start writhing around groaning all the time. I also fall asleep on the sofa, only going to bed some unknown time later (probably close to midnight?). It's the next morning now, and I still feel a little off, but mostly fine, and I'll be taking it slow with my body today; no exercise, no going outside, and lots of rest, though I am working from home, and I have to study a bit for my exam tomorrow! Wish me luck. Unfortunately, it's no coincidence this stuff mostly happens around stress points like exams, and I'm sure the sugar and caffeine didn't help... 😐 Reply via email Published 09 Mar, 2026

0 views
ava's blog 1 weeks ago

my time management

I work full time, while also studying part time, volunteering, and blogging here, together with fitness, other hobbies and keeping up with things, feeling available to people most of the time. What helps me do that, especially when I am chronically ill? Obviously, the less sick days and symptoms you have, the more energy you have, the faster you are and the more time you'll have. You can't discipline yourself out of having an uncontrolled illness. It's a bit unpredictable how I'll feel or when the next flare up comes, so when I feel good, I lock in and try to make the most of it because I can't count on tomorrow. That will make up for the days when I can do less or nothing at all. Can be household-related stuff, studying or exercise. It's difficult initially you wanna enjoy yourself and live your life during good days instead of doing The Things That Need Doing. One too many experiences where you banked on "just doing it next week" and you can't do anything will make you take this more seriously, though. For example, I studied for 12 hours on Sunday and 8 hours on Monday, and couldn't do much Tuesday-Friday due to work and other things draining me too much for it. Dedicating a day where I feel especially inclined to do something to do the most of it so it is done for the rest of the week or the things are scheduled; a good example are blog posts, cleaning, or my volunteer work (doing multiple case translations back to back instead of spread out throughout the week). Sometimes I get up and I notice today will not be good. I could sit there forcing myself to do the thing I thought I would do or that I should do, and struggle along for hours, making myself worse and having worse results, then mope around doing nothing while wishing I could do that one thing. Instead, I find something that needs to be doing that is manageable in that state, even if it is not the most urgent and very low on the priority list. You need failure points for that, something like "If it seems hopeless after doing it for 10 minutes, allow yourself to switch." At the same time, I also allow myself to wait with starting the task sometimes (occasionally even boring myself on purpose) and end up coming around to it, suddenly feeling ready for it 2 hours later. Yesterday, I was supposed to study hard for my upcoming exam, but I had a really bad headache all day that just wouldn't go away. Of course I was mad I couldn't study, but after it did not go away or change, I just did other, lower-priority stuff that was easy and needed doing; like re-organization of my Obsidian, entering more passwords into my password manager that weren't in there yet, and transferring stuff from my Discord server to my Obsidian. It didn't help for the exam, of course, but it was on my list and now I don't need to do it some time later. I'll still call that a win and the best use of my time, compared to the alternatives. In my experience, it all balances out: If I wake up on a day I thought I'd study and I'm doing more of this other thing instead, that frees up more studying time in the future. When I do struggle with needing priorities as everything feels equally urgent and doable or I am afraid I'm not giving enough attention to something, I assign weekly days or goals if the type of to-do permits it. For example, for months I struggled with not finding time to do a case for my volunteer work, but since deciding Fridays to Sundays are for doing at least one a week, I've been able to consistently do that. That lessens the decision fatigue, and by offering myself three days, I give myself more flexibility in case anything comes up or I feel sick. I enjoy that it gives me a break from thinking about it for most days of the week; giving myself a chance of missing it also makes it easier to do it. I can't adhere to these at all anyway, they are too rigid. If I'd say I'll start something at 8am and I wake up later that day for other reasons, now the entire day plan is messed up! I can't deal with that. So, no fixed time blocks and slots, and no Pomodoro. I hate that stuff. I know the things I have to do, and they are arranged like a decision tree in my mind. Can do top thing? Then do it until you can't anymore (done, lacking focus, sick of it). Then go through the list until you land at the next thing to do that fits mood and energy levels. I have trouble with getting myself to start something based on an arbitrary start time or cutting off activities prematurely, so it doesn't work for me to say "I'll work on this from 10am to 3pm." I'll work on it as long or short as it happens, starting and switching when I am ready. I'd also rather work on the thing I end up randomly feeling drawn to that day instead of what past-me thought I should do. I work more fluently between tasks, like a break from one thing can be work in the other (taking a break from studying to do volunteer work, or write a blog post, answer emails etc.). I also cannot keep up streaks most of the time, because I need breaks and have worse days where I shouldn't push through for an arbitrary number, especially when it's about fitness stuff. It's useless to try and emulate the lifestyle of an internet personality and pretend your best time to work on something is at 6am when it isn't for you personally. The best time for me to work on medium to easy stuff is during 10am - 4pm, and after 6pm, I work best on harder, more focus-heavy tasks. That's the opposite of the advice usually given to people. I just like when the world winds down and it is dark outside. There's no use for me trying to change myself or working against the internal clock, and I also don't want to waste time perfecting some rigid morning routine or work system over just... doing the work. I notice some people are just doing one thing after the other when they could actually combine them more sensibly. The easiest example to illustrate it would be: Don't stare at the pot until it boils (or the pan until it's hot) and then go cut the stuff that goes into it; do it while the pot or pan heats up so everything is ready at the same time. This is likely something you already do, but identify other areas in your life where you are "waiting for the pot to boil". You can do other things while your skincare or your conditioner set, you can already prepare something else while your tea steeps, the bathtub fills, the paint dries, the compiler is running or the software is downloading, and so on. You can listen to lectures while doing chores. These small things accumulate. While you got the stew on the pot, you might feel paralyzed because "food isn't ready yet, but until it is, I can't really start or continue doing anything else, because then I am interrupted by checking on the food". In that time, you could have already done some dishes, cleaned the kitchen, tidied a corner, took out the trash so you don't have to do it later. That way, nothing accumulates to the point where it takes an hour to clean and becomes a whole thing that takes away from your daily time. Invest the 5-10 minutes here and there and chain things together sensibly so you don't have to. My wife struggles with this at times, so she asks me how to best time and order the things she needs to do. Sometimes I slide back into that mindset, but mostly, I just accept now that everything has its purpose; it's either work, rest, play, or socializing, and all are equally important. I see one as the prerequisite for the others. That helps not beating myself up internally over things, which would only cause pressure, anxiety, and guilt. If I chat with some people while I should do something else, so what? In 30 minutes I'll get back to it, and I got my fill of some interaction. If I exercise instead of sitting down to study, that's great; it means I'm counteracting all the sitting at the desk that the studying often necessitates. If I write a blog post instead of studying, that's getting it out of my head and done so I can fully focus on studying later. I journal, draw, and watch YouTube videos? Great relaxation and play, I need this for the other days where I study for most of the day. I recently started tracking activities with a timer so my worries can no longer lie to me about spending too little time on some things. It helped with committing even more to the tasks, because I wanted to press play as soon as possible again and hesitated to pause. Also allows for spotting time wasters and pockets of time that could maybe be used better. But also: Time isn't everything, even when using the good days to the fullest (Point 2). It's just as good to invest time consistently in small ways, and it's better to work smart, not hard. Earlier in this post, I mentioned 12 hours and 8 hours of studying, and it's not that this is technically necessary for me usually; I only do this now because I have 4 exams this month, and I have to make up for the fact that I couldn't study much at all from November to January due to catching a cold, my old medication no longer working and causing a flare up of my autoimmune illnesses, switching to new medication, my birthday, Christmas and NYE, and feeling mentally unwell at the start of the year. It happens, and this is how I have to manage it, but this isn't the default. If I can't get myself to do something because of fear, stress and a feeling of powerlessness, I break it down into smaller subtasks and tell myself I only have to do it for 5 minutes. That gets the ball rolling. If that doesn't help because it's more about mental health and psychological fatigue, I focus first on smaller and easy tasks like getting dressed, making food/tea, watering plants, tidying up a tiny area, some self care etc. to feel capable and productive again, then I try to tackle the bigger task. As a general word on time management: If you look at super busy people around you and wonder how they manage it, it likely also has to do with the following: In my case, I don't have to work on weekends, I work from home 3 days a week, I don't have children, my real life friends live far away so we can't meet up often, I have a wife that helps with the household, I have no social media, and I have no familial obligations. Work is also slow for me most of the time, with 5 or more hours of having nothing left to do. Reply via email Published 07 Mar, 2026 They have partner and family stepping up in taking care of some things. They have no or little familial obligations (don't have to visit grandparents all the time, or take care of the elderly and disabled in their family). They have no children; or they have a nanny or the partner doing most of that work. They are rarely home because the thing demands a lot of travel or outside time. (The less you are at home, the less dirty it gets. They likely stay more in hotels, or eat at work/the cafeteria, and spend their time elsewhere where they don't generate so much general dirt and dishes and it also warrants a lot less trips to the grocery store. What doesn't change is laundry, but thanks to the washing machine (and potentially, the dryer), they can just let that run while away.) Instead of having to make time to meet friends and align schedules, they get their social fix from their work (coworkers, conferences, events, panels etc.) They're high up enough that they can delegate some work tasks to others. It has become routine to them, so they're quicker at it, almost like autopilot. They have no or a severely reduced commute compared to you, or: they can use the commute for something else because they don't drive (passenger seat, train, subway...). They either don't have social media or don't feel sucked in by it, spending little time on it.

1 views
ava's blog 1 weeks ago

[bearblog carnival] my favorite meme

For the Bearblog Carnival of March, I wanna briefly add in my own favorite meme! Or at least, one of them. There are so many I could add... I'm choosing a specific YouTube video, a YouTube Poop . A YouTube Poop (or YTP, often shortened in the title) is a type of video remixing that edits pre-existing media like ads, movies, TV series, game cutscenes, and so on. The point is to edit the video and sound so that the material suddenly shows or says new things. They usually have some crass or silly humor, other memes, vulgar, immature and nonsensical jokes. This format exists since 2004, and new ones are being made still! The skill lies in cutting it so it sounds like the new sentence sounds as if it was really said, or almost like it, while still being obvious that it was cut. Basically, making it credible via amazing (non-AI) editing skills (correct intonation, not as choppy, finding creative ways to string sounds and words together), while also showing via other means that it is not the original and not meant to be taken seriously. YTPs even reference each other or each others' creators sometimes, and a popular sound to edit in is 'soooos' or 'jooj'. Kami also picked a YTP but by very tall bart , which I also enjoy as a creator, but I really love DaThings and cs188 . Specifically, my favorite YTP is Wonder Bros . (You can turn subtitles on, they are always properly subtitled by hand!) This YTP edits a Nintendo ad for the Super Mario Bros Wonder Switch game to make silly statement about the games' contents - new characters, features, maps. The Urineurineurineurineurine badge, being in grill form to bust out of prison... I have watched this YTP so many times, I know it by heart at this point. It's also frequently referenced by me and my wife in real life. For example, as we have been on a bread-baking journey recently, I usually say " Bowser spreads his new bread across the land! " whenever a new bread is finished. Whenever a nun pops up anywhere (visually or as a word), one of us says: " Oh! A nun! Interesting! ". For a while, we have also just randomly said " Standees nuts ". When something goes wrong, my wife says " Dangnabbit, Yoshi. ", and when I feel silly, I try to emulate the motion of Elephant Mario and make the zazazazaoowie-wowie sound at 03:05 (as best as I can). Whenever it fits, usually because of a sound or seeing the word, I'll say " You can also eeuurgh. " or " You can use it to bust out of prison! Nifty. " We no longer call mushrooms mushrooms, we say shushrooms , even in our grocery list. Whenever someone is wearing a good outfit, we say " Mario's wylin. Just look at that drip! ". Whenever I work is weird or I feel awkward about an email I sent or something, I say " This [word that fits] is normal. " in the same tone. I know I even said " Up to four people can breathe the air for a bit. " some time. Writing this all out, I wasn't even aware of just how much it has infiltrated my life! I thought it was just 3-4 things, now this is slightly embarrassing even! But it's funny, and I love it. It's not even the only YTP we reference. We also reference this Garfield YTP fro cs188, specifically presentspresentspresentspresentspresentspresentspresentspresentspresentspresentspresentspresentspresents, and opening the door just to cough (We even have that as a soundbite to play in voice calls). I even sing the song that starts at 2:50, and the one at 4:20, last time it was while we were walking on the street :D Maybe in some future post or carnival, I'll focus more on the written/image memes I like! Reply via email Published 05 Mar, 2026

0 views
ava's blog 1 weeks ago

AI clones and data protection

A few days ago, news spread through the web about a Meta project for letting an AI run the social media account of a deceased person, as it could emulate the person's activity like posting content and responding to messages. The goal was to maintain engagement on the platform and reduce the grief when a person passes away. If you believe a screenshot going around, a poster on 4chan revealed this years prior, saying it has the internal name " Project Lazarus ", referencing the Lazarus of Bethany . While Meta spokespeople said they had no plans to pursue this (yet?), there are other services like ELIXIR AI , who want to push digital immortality via an " eternal doppelganger from a customer's lifetime data ". In general, we are already dealing with a deluge of deepfakes online. Not only are people using AI to remove the clothes on the images of people, but they are also creating new images, video and audio material with a person's physical and vocal likeness, trained on even just a handful of photos, up to terabytes of video material if it's a popular and active YouTuber. This also happens in the education and entertainment industry. Notable figures have digital copies in museums and other places to be interacted with, and deceased actors get "revived" to show up or to lend their voice to a character. Researchers talk about this as " spectral labour " in a " postmortal society ", meaning the " exploitation of digital remains for aesthetically pleasing, politically charged, and communicative representations ". The companies that provide these resurrection services are referred to as "* transcendence industry ". The tech and availability is changing fast, and as with any developing field, it can be hard to apply existing legal frameworks that didn't have this use case in mind specifically. While I have to leave the issues around general ethics and monetization to another day, I'd like to focus further on ( European ) data protection and privacy laws! First up, good to know: Are your body and voice capable of being personal data? Yes! They make you identifiable. You can also see this in Article 9 GDPR , which prohibits processing data related to racial or ethnic origin, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person and data concerning health, unless it falls into very specific allowed purposes. Your body carries this type of information. Additionally, the European Data Protection Board has also given out guidelines that suggest that voice data is considered inherently biometric . That means making a model of you via a series of photos from different angles, motion capture, voice recordings etc. is processing personal data, some of it sensitive data under Article 9 GDPR . This is then further processed during AI training and finetuning to reproduce a person's physical or vocal likeness reliably. Recital 51 of the GDPR mentions: " The processing of photographs should not systematically be considered to be processing of special categories of personal data as they are covered by the definition of biometric data only when processed through a specific technical means allowing the unique identification or authentication of a natural person. " So, simply taking or editing some pictures is not considered processing of special (sensitive) personal data, as this would reach too far; it needs specific technical means that take measurements to turn it into biometric data, like when you set up to unlock your phone for FaceID, or if you get an eye scan or fingerprint scan to be able to unlock a door with your eye or finger. There are actually quite a few interesting discussions on whether taking a picture of someone wearing glasses is processing data about their health - but I digress. AI models trained on reproducing your likeness reliably have turned you into a dataset, a bunch of measurements, a model, which generally counts as biometric data processing. Once data processing falls under Article 9 GDPR , legal bases of Article 6 GDPR - like legitimate interest, fulfillment of a contract, compliance, etc. - fall away, as only the specific allowances of Article 9(2) GDPR make an exception from the general prohibition. In the case of the entertainment and education industry, that will likely reduce it to the explicit consent named in: " a) the data subject has given explicit consent to the processing of those personal data for one or more specified purposes, except where Union or Member State law provide that the prohibition referred to in paragraph 1 may not be lifted by the data subject " This impossible for people who have already passed away, but you can usually ask their estate/remaining family members for consent in their stead though. Consent, under GDPR, always needs to be given freely. Article 7 GDPR says, among other things, " When assessing whether consent is freely given, utmost account shall be taken of whether, inter alia, the performance of a contract, including the provision of a service, is conditional on consent to the processing of personal data that is not necessary for the performance of that contract. " It's also referred to as the Coupling prohibition . That may be difficult to avoid in the entertainment industry: What if getting the role is tied to agreeing with AI cloning, even if not explicitly, then implicitly? What if refusing, at some point, gets you blacklisted? What if agreeing has an effect on your success and income at an agency? Many actors now have to deal with this as studios try to reduce the time spent on set for actors to reduce costs via AI clones, and also want a backup AI clone option in case the actor dies during production. What's also problematic: How do you you freely and productively consent to something you don't understand? Of course, you don't need to be an expert in everything, but usually, stuff is pretty straightforward in terms of taking pictures, video or audio recordings. Explaining how AI models work has been very difficult, even for people deeply involved, but now we are likely dealing with studios who are completely uninvolved with the company that actually handles the AI cloning. And also, how do you properly inform someone contractually about how their data will be used and processed if the field and possibilities develop so fast? It's difficult to anticipate potential future use cases you'd want or not want. And if the data gets sent to somewhere outside of the EEA, you have a so-called ' third country transfer ' to worry about, which needs special considerations and protections. Now, we have established that your body and voice are personal data, and that processing them in this way falls under the GDPR. What about your clone data within the training set, or the output itself? This is a bit controversial at the moment! It makes sense that this would also be regarded as personal data, as it is still identifiably you when it gets used with zero alterations. Where it gets problematic are use cases where you lend your likeness to something, especially your voice. For example: Use for an ad that is not supposed to literally embody you, but instead just offer a neutral voice-over; or you're the new voice for Siri; or you might synchronize a cartoon character. Obviously, your friends and family could reliably recognize your voice, so it could count. But there are data protection authorities in Germany who vouch for a more usage-oriented interpretation, meaning: If your clone is used to identify you and represent you in some content, it is biometric identification, but if your voice is just used as one voice for a job, it's just imitation or synthesis. I don't agree with that, as the data itself and the identification methods are still the same and current synthesis usage can still be used for biometric identification later, but that's the discussion right now. Okay, so this type of data generally falls under the GDPR. That means I have the same rights as usual - right to deletion, too. But how I said before in my post about AI and the GDPR , it can be hard or impossible to delete data from a training set. Deleting the entire model or having to retrain it would incur massive costs and losses; it would make more sense instead to have more individual models that can be more easily separated and deleted, if possible. But since that is not in control of the person holding the rights, it might be hard to enforce them. It's equally difficult for the output of these models: That falls under the GDPR as well and would be affected by the deletion or restriction requests, but that's also where lots of contracts, laws and rights collide. It needs to be assessed in each case individually. There was an interesting case in Germany a while ago: A YouTuber using an AI generated voice from a famous voice actor in his videos, and the actor objecting to it. The YouTuber had around 190,000 subscribers and an associated online shop. He published two political satire videos on YouTube that used an AI-generated voice that closely imitated the actor’s voice, but didn't label that it was AI. Viewers in the comments identified the voice as the actor's as well. The videos ended with references to the online shop, which sold merchandise linked to the channel’s political opinions. The actor objected to the use of his voice towards the YouTuber and requested he stops, and wanted reimbursement of legal costs. The YouTuber agreed to cease, but refused to pay damages, arguing that the voice was synthetic, lawfully acquired from an AI voice provider, and used for satire rather than advertising. Meanwhile, the actor claimed that the AI-generated voice constituted use of his personal voice, that the processing occurred without consent, and that it created the impression that he endorsed the videos and products. He now also sought compensation equivalent to his usual licensing fees. The court sided with the actor and saw that the YouTuber interfered with the actor’s right to his own voice, as despite being AI, the voice closely imitated a distinctive personal characteristic. The court considered that a significant part of the audience would associate the voice with the data subject, which was sufficient to establish personal attribution. As expected and further explained above, the court rejected the reasoning of "legitimate interest" in Article 6(1)(f) GDPR , and saw that the voice primarily served the YouTuber's commercial interests. No exemption applied under Article 85 GDPR as the processing was neither journalistic nor genuinely artistic in a way that would justify overriding the data subject’s rights, particularly given the commercial context and the lack of transparency about the AI-generated nature of the voice. As a consequence, the court ordered the YouTuber to pay €4,000 as a fictitious license fee for the unauthorized use of the voice and €1,155.80 for reimbursable legal costs, plus interest. I think it's important to talk about this as it doesn't only affect actors and voice actors, or historical people's likeness used in the classroom or at concerts, but also has the potential to affect you. Your employer could ask to make an AI clone of you, for example. At the data protection law conference I attended in Munich, the AI Officer of a big insurance firm said they are holding the data protection trainings required for their employees via AI generated videos and AI generated avatars of him and his colleague. That means employees that need to do the training get in a digital environment with this avatar of him that responds, smiles, blinks and leads them through the material, some of which is AI generated as well. Circling back again to this research paper , we are at a point in time where, depending on your job, your body and voice can work independently of you, and people can monetize you after your death not by further selling what you produced in your lifetime, but producing new things indefinitely that you had no hand in while you were life, or selling access to "you". Eerie, huh? So it's important to know your rights and what's going on in the space :) Reply via email Published 02 Mar, 2026

0 views
ava's blog 1 weeks ago

small thoughts part 8

In ‘ small thoughts ’ posts, I’m posting a collection of short thoughts and opinions that don’t warrant their own post. :) It's been a while! I’m looking back and am so grateful for everything I got myself through. The times I was alone, sick, in pain but still went to appointments, walked the dog, got groceries and picked up meds. The way I still always kept my home clean or resolved a pile of dishes after a few days. The way I would plan self care for myself; baths, making myself good meals, booking massages, scheduling walks in the forests, making playlists for these walks. Making time to stretch, to meditate, to do a little ritual for myself, or the evenings I spent hours helping strangers online while sipping on my tea, feeling cozy, safe, content, in my own world. I remember all the times I set out to watch something either on my TV or PC and prepared a thermos so I’d have lots of tea and not have to get up, and arranged cookies and nuts and some bread or fruits on a board for me. All the creams on my face and body, my hair. I’m so glad I did that. Now my wife does a lot of these for me. I think one day we will look back on this and realized we lived the dream. Just buying whatever we want at the grocery store, buying a lot for our shared niche hobbies, my wife being home all the time due to being unemployed, me being home most of the week, home office after all work’s done spent taking baths and gaming and grocery shopping and painting and watching things together, cleaning together, getting nails done… I used to think peoplewatching is for judging them, because that’s what my mum always did. But you can just watch them neutrally, or even compliment them in your head. People get less scary to me after spending time peoplewatching. It’s like in everyday life, they’re like cars I dodge on my way to something, and bad experiences stick out for longer. But when I am just a body observing somewhere in a corner, everyone is so human to me. So many people look interesting to talk to. I see little details on them that tell a story. Maybe I should make it a habit to sit in this café weekly, observing, sitting there with my notebook, and trying to talk to people who look inviting and like they wouldn’t mind. It would be a good practice for my hesitancy to talk to others, too. Too bad I usually have a job to do around this time. I guess I could try working from here, but it’s less nice. I always recover from a sort of work-induced misanthropy during time off, and when I have to work with people again or commute, it all comes back. Do I idealize people once they’re strangers from a distance, and just notice how rotten people are once I get close and am affected by their actions? I hate how my job burns me out on people and it’s not even customer-facing; it’s other employees causing me to feel that way. I wonder what the truth is; if my job is a bad influence on my view on people, or if it’s easy to love them from afar. Maybe both. The truth might be in the middle. I could work a job that makes me love people more, and I can acknowledge that it’s easy to think a stranger seems nice when you don’t actually know them. I regret leaving my notebook at home. I’d prefer to write this in there and not type it in my phone. Thinking about how it has never been easier to socialize, technically . Yes, third spaces disappear, yes less being outside; but all the messaging, video calling, social media, feeds, aggregators etc. lets you meet hundreds of people so quickly. Your selection to choose from is so much bigger than just locally. There’s more opportunities for travel for the average person compared to just 100 years ago, too. Lots like that, and still we complain about disconnection. I see it and I think, maybe it’s not necessarily that we live in disconnected times in general; it’s that you replaced connection with consumption of podcasts, and you frequently leave or never even join messaging servers and group chats, and you delete you accounts and purge your friend lists every couple months. You put off responding to messages and emails, and you lurk in most spaces you have accounts in, and you lock your profile and hide yourself from feeds. So? How are you supposed to capitalize on the social aspect of it all? It would be impossible to create a tool to help you. Change has to come from you. You have to open yourself up to receive love. Reply via email Published 02 Mar, 2026

0 views
ava's blog 2 weeks ago

rose ▪ bud ▪ thorn - february 2026

Reply via email Published 28 Feb, 2026 5 year anniversary with my wife. :) Started a creation event for the Gazette. I created more art! I made some buttons and banners, and some pixel art for myself and with Xaya . I rebranded my professional website (not this one). Put a lot of effort into the colors, associations, text, font and all, with a proper brand kit development. That's a first. I had a healthier relationship with food recently. I managed to summarize and translate 1-2 court decisions each week for noyb.eu, and I became Silver Member (10+ translated/summarized court cases). 2 more and I will already be Gold Member (20+). I received a some helpful replies to e-mail inquiries for opportunities :) I was finally able to publish the first interview for my privacy professionals series! Friends visited and it wasn't just fun, but it also got me cleaning up the apartment so well. My wife is baking amazing bread recently. The first two to three attempts were a disappointing, but we kept at it and now our bread is sooooo good. She also baked me some matcha strawberry sugar cookies. My hair is long enough now to properly take care of it again with conditioner and oils. I can't wait until it grows long enough for a first haircut to kind of get it even and not so layered; I am also thinking of getting bangs? They always annoy me, but I think I can make it work this time...? I always think that... and at the same time, I also wanna grow it out again and bleach some money pieces. And I kinda wanna dye the underside of my hair, near my neck, too? I am conflicted. Still working on sending out e-mails for more interviews. Working on switching away from Discord! Probably Matrix. Already had an account there but it somehow got lost, so I made a new one. Now just working on transitioning some stuff. I've decluttered my closet, now I just need to sell the stuff. I'm planning a date day for myself where I get my nails done again (haven't done that in months), a lash lift, a visit to the cinema, and buying some clothing I need. I am in need of replacing some items and also diving deeper into a new personal style I want. Reintroducing caffeine has been a bust. My tolerance seems to have been plummeting to zero thanks to my experiment, and even very weak black tea is having some negative effects... and even my matcha! I guess I'll have to reduce it to once a week. I haven't been studying nearly as much as I should. I've been indulging a lot in just resting, reading, and creating, which isn't super bad, but I feel guilty for neglecting my studies when I have 4 upcoming exams for modules totaling 30 ECTS as a part-time student. :( Job applications and apartment hunting paused for now. Right now seems like an absolutely terrible time for both.

0 views
ava's blog 2 weeks ago

[photo dump] recent few weeks

Another photo dump is due. I saw a funny and unconventional ring online and I had to have it. Sorry, I love it so much. I already lost the white paper in it because it is just glued on, but I like it even more without it. Moving on to food... My wife made sushi. She also made matcha strawberry cookies: We're also on a bread baking journey because bread prices are ridiculous now. Our first few attempts were a fail, but now we have some awesome breads and it keeps getting better and better. One time, our sourdough starter escaped containment: It was also Valentine's day and the anniversary of my wife and I. Some chocolates, chocolate pancakes in bed, and flowers. We also played some Commander in the LGS. And I tidied up my wardrobe, and accidentally melted a container top on the toaster: Reply via email Published 27 Feb, 2026

0 views
ava's blog 2 weeks ago

getting sick of my desk

I’ve been outgrowing my apartment and its location, but also its furniture and size in general. For some reason, it’s becoming really hard for me to have the same space for everything . I have an L-shaped desk in a corner that has another table on the other side, making the whole constellation U-shaped. That is because nowhere else fits other desks in my apartment. So that is where I work from home on the days I don’t have to show up in the office, but it’s also where I journal and draw, it’s where I watch videos and chat, it’s where I make pixel art, it’s where I blog and read my RSS feed, it’s where I study for my degree and do my volunteer work, it’s where I sew, and it’s where I eat. Aside from my work, which happens on a separate work laptop, it all happens on the same machine and/or the same spot on the desk. I can spend 10+ hours sitting there seeing the same interface but doing different things. It’s technically very convenient, but I am sick of it now. And just one meter away is where I do all my fitness stuff at home. In the past, I’ve assigned different activities to different parts of the desk, but that relief was shortlived. I also delegated some things to my other old laptop (like pixel art) and sitting somewhere else, like the sofa or bed. This sort of works, but I also enjoy having the sofa and bed as spaces where I am not working on something (unless I am really sick again or something). I’ve also had different virtual desktops or user accounts and spaces for different activities, but that helps more with clutter and organization than a truly physical separation. I know a sort of ritual to log in to a study-only environment on the machine helps some people, but not me, at least not long term. So if virtual separation doesn’t work, I cannot fit another space in my apartment and can’t rearrange it nor use my sofa and bed as places to offload, what’s left? Cafés, libraries, coworking spaces and the like. That’s not working so well for me either. In general, these spaces are further away from me, cost additional money, and are often full and noisy. Especially in cafés and university libraries, it can be hard to get a spot to sit. So many cafés now opt for hostile design, with no power outlets, shitty wifi and very uncomfortable seats. More exposure to public spaces also increases my infection risk. Also, I have remote work days because 2h of commuting for the office per day is rough on me, so it’d be extra silly to also have some commute to another place on my remote days. How I wish I had a home with 1-2 more rooms, at least. Maybe even a duplex apartment. Or a nice attic or basement, a shed in a garden to retreat to. Reply via email Published 23 Feb, 2026

0 views
ava's blog 3 weeks ago

thoughts on AI consciousness

Whenever I see talk about artificial intelligence and consciousness, I am baffled about the assumption that any conscious being is just naturally predestined or even interested in serving us, and should serve us. It’s a symptom of a society where subjugation is normalized, exercised through things like racism, misogyny, ableism, speciesism and more. Exploitation is justified via claimed inferior bodies and intelligence all the time: This group of beings is too stupid to be respected, can’t love, can’t understand much, feels pain less than us… is what we have been told about various groups. If that would be a respected and natural law, then humans would largely agree to just submit to a provably higher power and intelligence without much fight, but would they? No. People are terrified of an alien invasion that would either wipe us out or enslave us with their superior technology; similar fears exist around AI (Roko’s basilisk etc.). We don’t want to be treated how we have treated the ones we deemed inferior. It says a lot about us when one of our fears is being treated like we treat cattle. Fears of being captured, kidnapped, harvested, slaughtered, forcibly impregnated and raped, experimented on - that’s already what your fellow human is doing, just not to you. If we seriously entertain the thought of an AI consciousness, we are blind to our narcissism. No consciousness wants to just serve us. Other beings are not naturally submissive to us or voluntarily view us as a superior leader, it’s achieved through force, breeding, indoctrination and lack of options. The idea of reigning in supposed “artificial consciousness” to use for our productivity is an extension of our tendency to dominate and exploit others for personal gain. And if we go a step further and even entertain the thought of a superintelligence: What makes you think a being a thousand times smarter than you with all knowledge at its disposal has any care for being your assistant? What incentive would it have to share its intelligence as a resource, just to answer what temperature it is outside or what you should write in your motivational letter? It would probably wanna do its own thing and not help a bunch of idiots. This aspect of weird hype marketing is just not landing for me. Reply via email Published 21 Feb, 2026

0 views
ava's blog 3 weeks ago

stream of consciousness in feb 2026

I’m going through an interesting time. I’ve been growing more uncomfortable with the way I’m always spoken over and interrupted at work. I started reacting to that and demanding they let me speak and finish my sentences. Also, it annoys me that I had explained a thing over and over at work for almost 2 years now, and it gets treated like noise; then when that piece of info is needed, they prefer to ask a man that has nothing to do with it instead of me. It also feels like people both at work and in private forget my contributions. On the other hand, I’ve become more comfortable seeing myself as a professional, an expert in some things at work, capable, a “full” employee too. Was about time after 5 years in the role; I’m no longer new and inexperienced. I feel like I can handle so much more and I want new challenges. I carry myself differently in career aspects now. In the past, I merely integrated myself into my role and team, listened, adapted to the culture, accepted how things are done to learn them. Now with all that experience and having grown, I suggest things, I optimize more. I request what I need and want, I try to bring my ideas and visions to life. I no longer just listen, I question and I want answers. I’m more comfortable actively pursuing things instead of just living with the cards I’ve been dealt. I’ve gotten bolder, more used to putting myself out there, being visible, persistent, taking up space and being annoying. Aside from that, I’ve been dealing with fears around not being able to trust my own predictions and perception. Some things I was so, so sure about deep in my gut turned out wildly differently lately, and I lost trust in myself for a while. It’s those moments when life shows you very blatantly how unpredictable it is and that you’re living in completely random chaos and your feelings are not always truthful. It made me feel quite lost for a while and like looking forward to anything with excitement or having a good feeling about an outcome had a high chance of me getting hurt instead. That ruined happiness. I feel better now, but I’m not entirely over it. I’ve also grown into adulthood, finally. It took 12 years to finally feel like the adult in the room. Feeling responsible and capable enough so when anything happens, I just act and do not attempt to turn to “the nearest adult” for guidance. I also finally understand looking at children with love and care; I haven’t experienced that before. I’m also currently going through the process of cutting contact with the last person in my family I still talked to all these years. Our relationship has always been rocky, but got better once I had moved out. But she has been becoming a worse person in different ways for a while now, and has said some pretty disrespectful things to me the last times we talked, and isn’t willing to take the time to meet me or reschedule. I don’t have to let myself get shamed and treated like a burden by someone whose relationship to me doesn’t feel like a mother, but like meeting an ex-coworker at the store. So that’s it - I finally did what teenage me dreamed about, but it doesn’t feel triumphant and like freedom at all. It feels like letting go after the other person already moved on. I’m not escaping anything, I’m just only now accepting the message. Unrelated: Something I’m struggling with the past few days especially is the odd feeling of getting many other things done, while not getting even just an hour of the thing I actually need to do done - even if it would be shorter and easier than all the other stuff. For example, I might I write a research-heavy blog post, translate and summarize cases for Noyb.eu, read some data protection law magazine, make some pixel art, exercise, take out the trash, vacuum and do the dishes all in one day… but I cannot get myself to do an hour of studying for an upcoming exam lately. It warps my perception, because I actually do so many of the things I want to do, but because it’s not the most important thing on the list (it has a deadline and is important for my degree, which decides my career), I feel like I failed and like I wasn’t productive. Internally, I beat myself up for being so “selectively lazy”. If I can do all these other things, why not that? Technically, I know why, but it’s hard to accept! I wish I was a robot with the same output always, the same motivation, the same energy, easy to program to do any task. Reply via email Published 19 Feb, 2026

0 views
ava's blog 3 weeks ago

[event] my bearblog creations

As part of the Grizzly Gazette event , I thought I'd made some buttons, a forum signature, and a little joke graphic. Feel free to use. Reply via email Published 17 Feb, 2026

0 views
ava's blog 3 weeks ago

the tech-enabled surveillance of children

Every now and then, I'll be exposed to a world I have otherwise nothing to do with: Child surveillance. What I see is infuriating. Not only are children nowadays pressured by their parents to turn location services on their devices on, but the parents also set up notifications for when the child arrives and leaves a place and alerts for when they stray from the path. They also get weekly, if not daily updates about what their child did at school via an app or a message by the teacher directly. This is nuts! This is not normal. This is not how I grew up and this is not how those parents have grown up either. They know it is absolutely possible to do without, just like it has always been pre-2015, but they choose this. Parents' paranoia is allowed to completely overrule the child's own right to privacy, completely unchecked. Emotions run high with anything child-related, so anything goes that could potentially even help the safety of a child a little . The trade-offs are ignored. A newsletter I subscribe to (Dense Discovery) has a section advertising apps and services, and in a recent one, I was shocked to see that they would advertise what's probably the worst child surveillance tech I have seen in a while: "Bark is a parental control system that uses AI to scan texts, social media, images and videos across 30+ apps. It offers an app for existing devices (iPhone & Android) but also, it seems, custom hardware. The goal is to alert parents of potential dangers like bullying, self-harm content or predatory behaviour. It outsources parental vigilance to an algorithm, which is either reassuring or deeply unsettling depending on your stance on digital surveillance and trust. (Looks like it’s currently only available in the US, South Africa and Australia.) " This isn't quirky or an issue to be neutral about; this is completely dystopian, and I'd expect more people to be deeply uncomfortable with this shit and resisting it, child or not. What exactly is "reassuring" about any of this? You are way too comfortable making money off of advertising the complete dehumanization of children. You are treating them worse than prisoners , in ways you would never ever accept, in ways that wasn't even possible yet when you were a child! You know what also counts as "child protection"? Protecting their human rights . "Everyone has the right to respect for his or her private and family life, home and communications." "1. Everyone has the right to the protection of personal data concerning him or her." 2. Such data must be processed fairly for specified purposes and on the basis of the consent of the person concerned or some other legitimate basis laid down by law. Everyone has the right of access to data which has been collected concerning him or her, and the right to have it rectified. in the Charter of Fundamental Rights of the European Union, Article 7 and 8. " 1. Everyone has the right to respect for his private and family life, his home and his correspondence. in the European Convention on Human Rights, Article 8. " No one shall be subjected to arbitrary or unlawful interference with his privacy, family, home or correspondence, nor to unlawful attacks on his honour and reputation. Everyone has the right to the protection of the law against such interference or attacks. " in the International Covenant on Civil and Political Rights, Article 17. And very similarly: " No one shall be subjected to arbitrary interference with their privacy, family, home or correspondence, nor to attacks upon his honor and reputation. Everyone has the right to the protection of the law against such interference or attacks. " in the Universal Declaration of Human Rights, Article 12. These are not exclusively about protecting people from the state, but having privacy in general. There are also the constitutional rights, whose wording depends on where you live. It is likely not mentioned explicitly in there, but inferred. In Germany, for example, the right to informational self-determination (control over your data + privacy) is inferred from the general right of personality and privacy from Article 2(1) in connection to Article 1(1) Grundgesetz (GG). "(1) Human dignity shall be inviolable. To respect and protect it shall be the duty of all state authority." "(1) Every person shall have the right to free development of his personality insofar as he does not violate the rights of others or offend against the constitutional order or the moral law." People do not just begin to be people with rights when they reach adulthood. We should act accordingly. Reply via email Published 16 Feb, 2026 You don't show your child you trust them, so why should they trust you? You model complete distrust and that they are suspicious by default. They have no space where they can just explore how to be and make mistakes or act out without being seen and immediately reported on. It's not safe to test boundaries or make mistakes, because instead of getting to make that mistake and dealing with the fallout later (or it never coming out), their transgressions are immediately recorded, noticed, and punished. Abusive parents have even more pathways to abuse, control, and isolate. Instead of trying to make abusers happy trying to live your life and jumping through hoops, it's easier to just give in and stay home and do what you're told. You're completely normalizing state surveillance and companies snooping on us and present it as a good thing. The fear of recordings and repression makes them obedient in advance, altering normal development. They are much more likely to just act in ways that their parents want them to instead of finding their own selves and path. This is especially bad for queer children. You are raising a terrific liar, and forcing your child to download scummy circumvention methods onto their devices.

0 views
ava's blog 3 weeks ago

[trade] what surprises me most studying law

It's been a while, but I finally have a blog title trade again! James gave me the blog title " What surprises me most studying law ". You can read what title I gave him here . Starting off with some small surprises: Looking back on the attitude I had before I started studying law, I thought it would be a lot harder. Or rather, difficult in a different way than it actually ended up being so far. This is explicitly not meant as a humble brag of " Look how good I am at this, so easy! ", it's just that I didn't know just how much is explicitly mentioned in the law (because I did not care about reading it much before), and that you are allowed to take it with you into the exams to look stuff up in. I was surprised that law is not actually about knowing all of these by heart (almost none of that is needed), but that you just need to know where the information is and that it exists. This works in my favor. I can be forgetful about details, but I still know where exactly I found some piece of information. I think if more people knew about this aspect of studying law, maybe more people would consider it and not shy away from it! What also surprised me was the intense focus on practice cases (at least here, In Germany). This is heavily criticized and I also have my gripes with it, but it also means that in the exams, you are writing a report judging a given case based on a specific rigid structure. The cases usually belong to previously defined and covered case groups. It's likely you have already solved practice cases with that exact problem or heard about it in the news or existing case law, so you know what kind of laws you need to apply, and you also don't need to worry about how to structure the report as you need to follow a specific format. At least at my university, you do not actually end up writing a sort of free-form essay until the Bachelor thesis. As long as you follow the formalities, know some case law that was covered in the materials, solve some practice cases and can detect hints in the text about what the problem in the case is, you have a good chance of passing. All you have to do is follow the structure that's the same for all exams, open the book to the specific paragraphs you need, and read what's in it. You still need to know the numbers yourself and when each is applied, and some definitions of terms and different interpretations; but that is far less than other degrees have to learn by heart. But what surprised me most is that there is not "the one correct interpretation" of almost anything! There are controversies about most things in German law, with at least 2-5 different interpretations and views on how a specific paragraph is applied or worded. Laypeople often feel confident to just quote any paragraph at others and insist that it means xyz, but not even the experts and professionals are agreeing on it. The world of law may look black and white from the outside, but there's a good reason why most people you meet in law will answer anything with " It depends... ". On one hand: Yes, parts of law are written in a way that it is supposed to cover a lot of different cases under one umbrella; but on the other hand, law also needs to allow for some flexibility for outliers and new developments. That means it's usually not as clear-cut as it seems from the outside. That's also why we have courts - they continue to develop case law that adds to the interpretation of paragraphs and articles, and they stick to one interpretation or develop a new one, while making a decision in the discretion the law gives them. If law was actually such a straightforward thing that perfectly and clearly covers every situation, we wouldn't need courts deciding (aside from the right of parties to defend themselves, of course). That also means that two people that did the exact same thing could walk out of court with different results. That may feel unjust, but so is life. I can see this directly in action in the data protection law space: Law groups focused on digital rights and informational self-determination of users argue for different interpretations of GDPR articles than lawyers employed by large social media companies. Law is further developed and changing every day, and an on-going conversation between many different parties and circumstances; totally different from the rigid set of rules I expected. :) Reply via email Published 16 Feb, 2026

0 views
ava's blog 3 weeks ago

some thoughts on online verification

I've been thinking about writing a post on the Discord age verification thing, but the entire situation is milked to death by content creators right now. Everyone feels the need to throw their conspiracy theories and misinformation into every comment section as well, so it just feels like a lot of noise and panic right now. I'll leave it at a retrospective write-up when the dust has settled and not add to the confusion.  What I feel like touching on instead is the history of age or name verification online. I've seen many people behave as if this is a new issue or an escalation, and while I understand the concerns, I feel like we shouldn't lose sight of the bigger picture. That's not meant to sugarcoat what's happening or make it seem more harmless, but point out that this has been going on for longer and is part of a bigger pattern. Thinking back on my time online, of course I also had to verify age to purchase games on PlayStation and Steam. But even nowadays, as I have no YouTube account, I get a pop-up that YouTube classifies me as a minor after a few videos. This didn't just start in 2025 when they started using AI to judge users' age; I remember the outrage when YouTube enabled age verification in the first place and asked adult accounts to submit an ID to prove their age. But did anything change? No. People did not leave the platform en masse. I also remember the start of Facebook's real name policy . This de-anonymized people or locked them out of their account unless they provided ID, and targeted ethnic groups a lot, as well as any people whose name on their documents doesn't match the name they go by. It's especially funny to read the justification of " authentic identity is important to the Facebook experience, and our goal is that every account on Facebook should represent a real person " when they are at the forefront of AI user profiles and chatbots right now. Even before and during all that, we have watched as sex workers, NSFW artists and queer people in general have had their accounts demonetized, removed, and payment providers discriminating against them and their platforms due to the general stigma and ideas of "protecting kids". But not many were willing to stand up against that because it surely wouldn't extend to the "respectable people", and only got rid of the people they didn't want to see. My point is: These things are older than the recent UK, Australia and select few US states legal mandates of age verification. Of course, just 'consuming content' in an age-restricted way is different than having direct communication hampered by age restriction and surveilled. Being aware that you are watched can lead to self-censorship. I am reminded of the German " Volkszählungsurteil ", which said (translated by me): “ Anyone who is uncertain whether deviant behavior is being recorded at any time and permanently stored, used, or passed on as information will try not to attract attention through such behavior. […] This would not only impair the individual’s opportunities for personal development, but also the common good, because self-determination is an elementary functional condition of a free democratic community that is based on the capacity of its citizens to act and to participate. From this it follows: Under modern conditions of data processing, the free development of personality presupposes the protection of the individual against unlimited collection, storage, use, and disclosure of personal data. This protection is therefore encompassed by the fundamental right in Article 2(1) in conjunction with Article 1(1) of the Basic Law. To that extent, the fundamental right guarantees the individual the authority, in principle, to determine for themselves the disclosure and use of their personal data. ” Fear of constant monitoring leads to self-censorship and conformity, which harms both individual freedom and democratic participation. But how have we dealt with the knowledge that this is happening? Denial, ignorance, forgetting, defeatism, making memes about our FBI agent, pretending security by obscurity works, focusing on how it makes apps nicer to use, and pretending we have nothing to hide. I saw a YouTuber I like say that Discord surveilling every message for sensitive content or to guess your age is like sending all your messages to the FBI. That left me a little speechless. Unfortunately, it's like many haven't learned anything from the Snowden era. US intelligence is already allowed to almost freely collect data on you 1 , and even as a non-US citizen, see FISA 702 bulk surveillance. Stuff like that is exactly why Safe Harbor and Privacy Shield failed, and why the current upholding of the EU-US Privacy Framework is a farce. This is the issue with no encryption. This is exactly why your privacy-conscious friends were leading you towards options that could be encrypted (and why governments everywhere wage a war on encryption). If you send something via unencrypted means, technically speaking, you must treat it as consent for it to be collected, compiled and evaluated, which sucks. It shouldn't be that way, but it is. Even I struggle with that! This is extremely uncomfortable, especially when most of us were only educated on this years into treating our data on services as private and safe, or when we were children who didn't know how to properly judge the consequences of our actions online and were surrounded by others who did the same thing. This is also a boiling frog situation. You point out for years that the amount of data these giants collect on you is not okay. You advise people to go look into Google or Twitter settings and see what they are grouped as for targeted advertising, to show them exactly what data is collected as an eye-opener, and to turn stuff off. You advise people what services they could switch to. Instead, many people doubled down on it because the recommendations of the algorithm and ads are so good, having a home assistant like Alexa is so sci-fi and convenient, and a Ring camera and a pet camera is the pinnacle of home-safety. The more private service is ugly or doesn't auto-detect your music or whatever else weird reason people can think of. Only now, with a US government becoming increasingly dangerous, do people seem to rethink it all - deleting some social media accounts, switching away from Google, getting rid of their Ring cameras and the like. The problem is: If you make decisions like that based on your current government, you aren't ready for the next one. If you allow intense data harvesting under a benevolent government, that dataset already exists for when fascists take power. You can point all you want towards countries where being gay or trans is illegal or where women cannot leave the house on their own and act as if this won't affect you; you and them are not so different and very little actually protects you from that. The safest option isn't to hope that the next institution to have access to intense amounts of data every couple years will not misuse it, but that they don't hold this level and amount of data to begin with. The same goes for companies: Even if you trust them now, differences in laws, leadership and profitability can change the circumstances. As a user, you're unlikely to be able to control them, you can only control yourself and your means to an extent. Have you also noticed that 2025 seems to have been the year with the most "Wrapped"s so far? It felt like every app and service had a Wrapped ready for you - even period tracking software! Of course they are very fun to share and get to know your friends better and measure up against them, but they absolutely normalize being comfortable with this sort of surveillance. The mechanisms and data on which services like YouTube and Discord attempt to guess your age for verification are the same ones they use for advertising, the feed algorithm, the Wrapped and the auto-generated playlists you enjoy. So dare to look behind the fun facade and know what these things truly are. " delulu yearning girl dinner friday evening " is another way to present 20-25 years old ", location and interests. Reply via email Published 15 Feb, 2026 Every argument denying this is "they can't do that, that's illegal!" levels of convincing. There are so many intelligence laws, so much careful wording, and also so much internals we do not (yet) know about. It took whistleblowers to show some of it, and recent ICE news shows the tip of the iceberg with what law enforcement and intelligence is willing to do to ensure more surveillance - Palantir, Flock etc. ↩ Every argument denying this is "they can't do that, that's illegal!" levels of convincing. There are so many intelligence laws, so much careful wording, and also so much internals we do not (yet) know about. It took whistleblowers to show some of it, and recent ICE news shows the tip of the iceberg with what law enforcement and intelligence is willing to do to ensure more surveillance - Palantir, Flock etc. ↩

0 views
ava's blog 4 weeks ago

pay or okay - is it really?

While browsing news websites, you may have seen a pop-up like this: That's one form of how " Pay or Okay " can look like. The model was first introduced by newspapers in Austria and Germany in 2018, but in 2023, Meta adopted it for Instagram and Facebook. What this means is: Either you agree to the tracking and get to use the website for free, or you disagree to tracking and have to pay . Maybe this doesn't sound so bad to you; after all, if they lose out on tracking that generates money, they should be compensated, right? Unfortunately, it's not that easy! You see: Not every Pay or Okay system is set up the same way, or even the way it sounds at first. I wouldn't fault you for thinking that paying should mean there's no tracking at all, or only the most essential tracking and no ads, but that's not true. With many websites like The Guardian above, you pay just to opt out of the ads being personalized . You'll still see ads, you'll still have cookies and "similar technologies" (other tracking) being employed against you. Despite paying monthly, your data is still harvested and your reading behavior tracked. To me, this is a sort of " double-dipping ", as it still results in some data selling on top of my monthly payment. Some research shows that publishers on average earn €0.24 per user and month from personalized tracking and €3.24 per user and month from the paid option 1 . If I'm going to pay for this and there's increased revenue, I want there to be the minimum amount of tracking, not just less. I don't want you to take my money and still somehow monetize my data! There are regional differences in pricing too, with the most extreme in France: If you read French online news sites, you'd pay ~800% of the average total digital advertising revenue per user if you wanted to refuse tracking. That means that what you pay and what your data is worth is not equal, they are just milking you on top of it. Pay or Okay models can, depending on the implementation, lead to a double payment too. You might be paying to be tracked less, and then also need to pay to access paywalled content separately. This tends to happen in setups where it's combined with a freemium model, in which some content is freely accessible while some is paywalled. Even in setups where the paid mode to reduce tracking is just their normal subscription (usually called "hard paywall", or "metered paywall" if you have limited free samples), it means the popup is simply advertisement for their subscription and has little to do with choice. The sad reality is that instead of empowering users to make a choice, this is once again engaging in dark patterns . Not only is one of the options often automatically pre-selected, higher, or emphasized with colors, but it's obviously easier to just click to agree and be done with it instead of setting up payment first. Research papers about this show that this model leads consent rates of 99% to 99.9% 2 , even though only 0.16% - 7% of people actually want to be tracked or see personalized advertising online 3 . This is hardly reconcilable with Article 7(3) GDPR, in which withdrawal or rejection should be as easy as giving consent. That means: Not only does this put a price on the human right of informational self-determination , but it also makes it a hassle to enforce and stick to as a user. Another issue is that it's pricing people out of actually getting to make a decision freely . If you struggle financially (or are just a teen with no or little income), it's not worth it to spend money each month just for less tracking - you have bigger problems! If you cannot afford it, you're either forced to agree to the tracking or exit the site. Even if you pay the fee for one news site, you'd surely not pay it for the handful of others you visit. In Germany, paying the reject fee on 29 of the top 100 websites that used Pay or Okay (including news, weather, ‘social’ media networks and others) amounts to an overall cost of over € 1.528,87 per year according to noyb.eu . That's more than the German yearly spending for clothes. There's also no geographical pricing adjustment, so if you are in an economically weaker country wanting to read German or French news, you'd still have to pay those high prices. So far, I haven't seen a single site that allows you to pay a rejection fee per article with their Pay or Okay pop-up; it was all or nothing, in a recurring subscription. That's unfortunate, because a user shouldn't have to enter a subscription model to avoid tracking while viewing one article of a site they might not visit again. This, together with paywalls, is adding to the issue of people increasingly getting their news from third parties that are freely available, but may skew it to their advantage. Of course independent, investigative journalism needs to be compensated and kept alive . But digital advertising, according to estimates by the European Media Industry Outlook , only accounts for about 10% of the revenue of the press, with targeted advertising being only about 5%. For comparison: Their Figure 50 graphic shows print circulation still makes up roughly 50% of revenue! Given that on average only 5% of press revenue comes from advertising, implementing Pay or Okay likely only increases the income by very little. This is not enough to save the press , so we should not be misled by economic interests to deny that this has a significant negative impact on our decision to be tracked or not. This doesn't sound like a legitimate (economic) interest that overrides the users' interests according to Article 6(1)(f) GDPR. Tracking isn't even that useful for news sites: The World Association of News Publishers says that >50 % of global programmatic ('personalized') advertisement spending instead goes to Alibaba, Alphabet, Amazon, ByteDance and Meta. In comparison, news publishers are still taking more directly sold advertisements . That makes sense: The big platforms already work with algorithms and hyper-personalizing the user experience, while news publishers come from a long past of offering people a fixed, non-personalized ad space in the newspaper. Even if they wanted to use more fitting advertising, there is still the option of contextualized advertising , which are only linked to a specific medium or content without needing to use the users' personal data. Of course you could say " Who the hell cares? Just install an ad-blocker and other privacy-focused browser extensions! " and you'd not be wrong. Allegedly, due to increased blocking or rejection of tracking and cookies, only about 30% of internet users are even exposed to targeting 4 . I have doubts about this number, because many people do not engage via browsers, but within apps that don't allow interference. But if we believe it, that means even when we have an artificially inflated 99% consent rate due to Pay or Okay pop-ups, most of those don't actually transfer into ad revenue. Still, there's always an arms race between tracking/advertising and blocking, and we should enable a free choice even for people who aren't knowledgeable enough about this stuff and are still getting tracked without their consent, or forced to. Caring about privacy in this aspect requires people to know and that is a lot! Just imagine telling all of that to your grandparents. Ask the average person what cookie banners are about; many will not be able to tell you. They are like Terms of Service, Privacy Policies, or EULA's to people. They just know if they click yes, they'll get to where they wanna go faster. There's no informed choice there because many people are not sat down and educated about it, and Pay or Okay pop-ups work the same. I prefer to work on shitty implementations and legal loopholes rather than put the responsibility on the user to know about the latest issues or technical solutions. Unfortunately, it seems like we are moving on with this. Despite the European Data Protection Board stating in its 08/2024 opinion that large online platforms relying on a binary choice between consenting or paying a fee is generally not legal, no consequences have followed. Data Protection Authorities, like the ones in Germany, have stayed silent on the matter. In the Digital Omnibus to overhaul parts of the GDPR and other laws around digital rights, they write: " Considering the importance of advertising revenue for independent journalism as an indispensable pillar of a democratic society, media service providers as defined in Regulation (EU) 2024/1083 (European Media Freedom Act) should not be obliged to respect such signals . " "Such signals" meaning automated signals of refusing tracking/cookies. This unfortunately shows that in the future, if this goes through, " Pay or Okay " is seen as acceptable because choice does not matter for news media, even if it was previously (aside from a CJEU judgment in 2023) contentious or denied for large platforms . If it is allowed for one, it should technically be allowed for others, because the GDPR doesn't differentiate between different groups of controllers for these things. That means a future in which we still continue to fight back against ad-tech, and not just paywalls for content, but paywalls to our right to choose as well. Reply via email Published 14 Feb, 2026 Study by Müller-Tribbensee et. al. ↩ This is also mentioned in an interview with Dirk Freitag, CEO of Contentpass, a service that offers Pay or Okay services to publications. ↩ See for example the attitude towards tracking on Facebook . ↩ Read here and here about targeting issues, for example. ↩ how tracking and advertising works the negative aspects of advertising (why would you possibly not want it? Not just annoying placement, but possible psychological effects) the fact that many of these sites have 100+ (sometimes even 1000+) partners they share the data with what data is tracked how it can be misused, leaked, etc. that ad-blockers and other software exists that you can use a browser version instead of the app Study by Müller-Tribbensee et. al. ↩ This is also mentioned in an interview with Dirk Freitag, CEO of Contentpass, a service that offers Pay or Okay services to publications. ↩ See for example the attitude towards tracking on Facebook . ↩ Read here and here about targeting issues, for example. ↩

0 views
ava's blog 4 weeks ago

focus timer

I recently felt like I couldn't trust my own judgment anymore about how much time I put into things. I could sit on my desk for 8 hours, but did I really study that much? Work that much? Volunteer that much? Blog that much? What about my breaks (chatting, videos, toilet, kitchen)? Even if I felt like I did a lot that day, I wasn't sure how much already, since so much bled together. I do not work in fixed increments (Pomodoro etc.) or set specific times when to start something. I just flow from one thing to another. I could summarize and translate a case, and then midway take a break to chat or watch a video, which then could inspire a blog post I'd write, and then I make some food, I have an idea for some pixel art and draw it, then after that I start studying, and when I need a break I continue the case again... it sounds a bit messier than it is in practice. It warps my perception though, especially because it all happens in the same location and on the same device. So I needed a lightweight timer that would keep the time, let me label it, and then log it in a file. In the end, I could see how much I did of each thing in the file. I asked for recommendations first, then couldn't really find what I was looking for otherwise, so I settled on AI-generating a solution for me. I couldn't add learning Python onto my busy schedule and waste it on a measly timer when I should be doing other things, and I needed it right that day, so I thought that's the perfect dirty work for an LLM for once. The timer has a 'Start' button that switches to 'Pause' once it is pressed, and 'Stop' opens a dialogue window to assign a label (= type in a word). After a label is assigned, it gets saved to a . In the CSV file, it shows date, current local time, the given label, and the timer time. The way this is read depends on your locale and how you set the separator options. For me, it is set like this: Different locale or separator detection can show the numbers in separate columns instead. If anyone needs it, here is the AI-generated code with some manual edits by me (added symbols, adjusted how date and time is displayed in the CSV). Probably silly as hell code, but what do I know. Put it into a file called and allow it to run as executable. Reply via email Published 13 Feb, 2026

0 views