Blog
Identity, in plain words.
Reporting, analysis, and practical guidance on deepfakes, biometric privacy, GDPR rights, and the European approach to digital identity.
The state of deepfakes in 2026: what changed and what to do about it
AI-generated impersonation went from novelty to industrial in 24 months. Here's what shifted, what platforms still don't catch, and what individuals can actually do.
Voice cloning takes 30 seconds. Here's why your CFO should know
Modern voice synthesis needs less than a podcast clip. Wire fraud calls now pass voice authentication. What executive teams should change in their verification flows.
Creator leak economics: how stolen content keeps getting recycled
Following the supply chain from leak forum to aggregator to tube site. Why one takedown isn't enough — and how continuous monitoring actually works.
Your face is special category data. Here's what GDPR Article 9 means for you
Biometric data has stronger protection than your email address under EU law. What rights you have, how to exercise them, and what to demand from any platform that processes your face.