David Luyt

Home/David Luyt

About David Luyt

David practices law because he enjoys simplifying complex ideas into practical insights. He is a POPI professional, electronic signature expert, and online business aficionado. He facilitates interactive workshops, writes succinct opinions, and drafts beautiful documents. Read more ...

AI explainability legal governance: Pulling back the curtain

Let's talk artificial intelligence (AI) explainability and legal governance. AI often seems like a magic show: impressive but hard to understand. However, with increasing reliance on AI, legal frameworks now demand transparency. Recent advances, particularly Anthropic's research on circuit tracing, [...]

By |2025-04-17T12:54:49+02:00April 17th, 2025|Categories: AI Law|Tags: , |

Corporate AI deepfake fraud: When trusted faces deceive

It's time to address corporate artificial intelligence (AI) deepfake fraud. AI can now create compelling fake videos and audio of real people. This 'deepfake' technology presents a growing threat to businesses, particularly through financial fraud. Criminals are using deepfakes to [...]

By |2025-04-10T10:44:20+02:00April 10th, 2025|Categories: AI Law, Cybersecurity Law|Tags: , , , |

Personal data deletion rights: Navigating your responsibilities

Personal data deletion rights aren't just paperwork — they're like removing permanent marker from a whiteboard: simple to describe but tricky to do correctly. Data protection laws now give people more rights to control their personal information. One crucial right [...]

By |2025-04-10T10:45:22+02:00April 8th, 2025|Categories: POPI and Data Protection|Tags: , |

Executive cyber liability risks

Time to talk about executive cyber liability risks. Managing cybersecurity and compliance at a senior level carries more significant personal risks than ever. Regulators worldwide are increasingly holding individual executives, such as Chief Information Security Officers (CISOs) and Chief Compliance [...]

By |2025-03-27T16:00:19+02:00March 27th, 2025|Categories: Cybersecurity Law|Tags: |

AI governance board oversight: Mastering the fire

Just as mastering fire once offered humanity warmth, safety, and power, so does mastering artificial intelligence (AI), which promises immense business potential — provided your organisation governs it wisely. Neglect, however, risks turning a strategic opportunity into an organisational inferno. [...]

By |2025-03-26T15:45:57+02:00March 26th, 2025|Categories: AI Law|Tags: , |

Cybersecurity law compliance: Getting it ‘just right’

Like Goldilocks sampling porridge, businesses face the challenge of getting their cybersecurity measures 'just right' — not too weak to invite breaches nor too cumbersome to stifle operations. In today's landscape, fraught with AI-driven scams and rampant ransomware attacks, achieving [...]

By |2025-03-27T16:17:39+02:00March 20th, 2025|Categories: Cybersecurity Law|Tags: |

Implementing the cybersecurity triad

Implementing the cybersecurity triad effectively is like managing traffic at a busy intersection. 'Confidentiality', 'Integrity', and 'Availability' each represent a different stream of traffic. If one stream isn't managed correctly, it disrupts everything, causing chaos and risks to security. Cyber [...]

By |2025-03-18T19:10:59+02:00March 18th, 2025|Categories: Cybersecurity Law|Tags: |

AI voice cloning scams

Artificial intelligence (AI) brings convenience to our lives, but imagine your voice being stolen and used as a weapon by criminals. AI voice cloning scams use your voice, or that of someone you trust, to deceive you into transferring money [...]

By |2025-03-18T13:54:08+02:00March 17th, 2025|Categories: AI Law, Cybersecurity Law|Tags: , , , |

Data protection in Bulgaria

Data protection is a critical element of Bulgaria's fast-evolving digital economy. As businesses explore innovative technologies, foreign investment grows, and data-driven services expand, compliance with the GDPR and the Bulgarian Personal Data Protection Act (PDPA) is essential for safeguarding consumer [...]

By |2025-02-25T15:26:37+02:00February 25th, 2025|Categories: POPI and Data Protection|Tags: , |

Beyond consent: Better grounds for processing personal data

Today, processing personal data is not just a technical matter but a legal requirement governed by strict rules. Relevant data protection laws generally state that every data processing activity must have a legal basis. Although many believe that consent is [...]

By |2025-02-20T12:20:17+02:00February 20th, 2025|Categories: POPI and Data Protection|Tags: , |

EU generative AI compliance: Lessons for the rest of the world

Let's talk EU generative AI compliance. Using generative AI is like releasing a genie from its bottle — its powerful capabilities create limitless possibilities and raise significant challenges. Generative AI can produce human-like text, lifelike images, and more. However, its [...]

By |2025-04-10T10:46:16+02:00November 19th, 2024|Categories: AI Law|Tags: , |