After the GDPR: Cybersecurity is the Elephant in the Artificial Intelligence Room

This article presents an analysis of data protection authorities’ (DPAs) enforcement actions undertaken since the implementation of the General Data Protection regula-tion (GDPr) in May 2018. the analysis shows that corporations fail to adopt trans-parent data processing practices and appropriate technical and organisational measures to secure personal data. By focusing on two specific DPAs, the Spanish AePD and the British ICo, we make practical suggestions on how to foster the healthy develop-ment of the european digital ecosystem and the deployment of trustworthy artificial intelligence in big data environments in the face of growing cybersecurity risks.The research for this article was funded by the project "CYNAMON-Cybersecurity, Network Analysis and Monitoring for the Next Generation Internet", sponsored by "Programas de Actividades de I+D entre grupos de investigación de la Comunidad de Madrid en tecnologías 2018" (P2018/TCS-4566; B. O. C. M. Núm. 304; 21 December 2018).Peer reviewe