Latest Publications

Share:

Zooming in on AI – #4: What is the interplay between “Deployers” and “Providers” in the EU AI Act?

One of the key aspects of the EU AI Act (“AI Act”)[1] is linked to the qualification of providers and deployers and the nuances which help distinguish between the two categories of stakeholders. What would this mean in...more

Zooming in on AI – #2: AI System vs AI models

The Artificial Intelligence Act (AI Act) entered into force on 1 August 2024 and is the world's first comprehensive legal framework for AI regulation. As companies start incorporating AI tools into their business, products...more

Zooming in on AI: When will the AI Act apply?

EU Regulation 2024/1689, also known as the Artificial Intelligence Act (AI Act), enters into force as of 1 August 2024. But when will it become applicable? The AI Act sets out a harmonized legal framework for the...more

Desire to harness potential of generative AI drives rising interest in data as an asset

Investors are targeting AI developers and buying proprietary data sets to build new AI businesses. Here we explain how to manage risk in this fast-evolving space. When MIT named generative AI as one of its breakthrough...more

Global M&A Insights: Deal-making predictions for 2024

Welcome to our year-end edition of M&A Insights, where we preview some of the themes we expect to shape deal-making over the next 12 months. Continued volatility in the debt markets has resulted in another subdued year for...more

EU Digital Markets Regulation Round-up - November 2023

We are delighted to present our view of the most important developments in EU digital market regulation. We present our perspective on those developments as a snapshot of the current state of regulatory progress, and it will...more

EU privacy regulators adopt opinion on the proposed Regulation on the digital euro

On 17 October 2023, the European Data Protection Board (EDPB) and the European Data Protection Supervisor (EDPS) adopted a joint opinion on the proposed Regulation on the digital euro (the Proposal) as a central bank digital...more

EU-U.S. Data Privacy Framework: adequacy decision adopted, the framework becomes operational

On 10 July 2023, the European Commission adopted the adequacy decision for the EU-U.S. Data Privacy Framework (DPF). This decision enables the free flow of personal data from the EU and three EEA countries (Iceland,...more

EU Supervisory authorities launch consultation on the first batch of ICT security documentation under DORA

The European Banking Authority (EBA), the European Securities and Markets Authority (ESMA) and the European Insurance and Occupational Pensions Authority (EIOPA) (together the European Supervisory authorities or ESAs)...more

Amended CRS Law

A new requirement to inform individuals of the exact personal data to be shared with the Administration des Contributions Directes. The Luxembourg law of 18 December 2015 on the automatic exchange of financial account...more

The ransomware hostage’s dilemma - should you pay the price?

Paying a cyber ransom will, allegedly, secure your data and give you back control of your systems. But there are legal, operational and ethical risks to consider....more

Happy birthday, GDPR – five lessons from five years of EU data protection law

In the five years since the European Union’s General Data Protection Regulation came into force, what have been the main learnings for business, and what will the future hold?...more

EU Digital Markets Regulation Round-up

Read the latest updates on the progress of legislation and regulation in the EU relating to technology, data, digital markets and cybersecurity....more

When transparency clashes with fundamental rights: EU court curbs public access to beneficial owner registers – what does this...

By a decision rendered on 22 November 2022, the European Court of Justice (the Court) invalidates the provision of the anti-money laundering directive (AMLD) whereby the information on the beneficial owners of corporate and...more

EU – EDPB comments on the upcoming EU-US Trans-Atlantic Data Privacy Framework

On 6 April 2022, following the announcement of the political agreement on a new EU-US Trans-Atlantic Data Privacy Framework having been reached between the European Commission and the United States on 25 March 2022, the...more

CNIL concludes that data transfers to the US through the use of Google Analytics violate GDPR

On 10 February 2022, the French supervisory data protection authority (CNIL) announced that it issued a formal notice to a website operator to bring its data processing in relation to audience measurement and analysis in...more

Soon there will be legal protection for whistleblowers. What are the employer’s obligations?

The Grand Duchy of Luxembourg has just tabled a bill aimed at transposing the European Directive on whistleblowers. Even if the bill has to go through the entire legislative process, and will most certainly see its text...more

DORA – Enhancing digital resilience for the financial sector and its ICT service providers is more important than ever

The future of finance is digital. The increased reliance on technology in finance heightens the vulnerability of ICT systems and worsens the impact of a potential cyberattack. To this end, the European Commission (the...more

Cookies consent does not escape the GDPR: The CJEU issued its decision in the Planet49 case

On 1 October 2019, the Court of Justice of the European Union (CJEU) issued its long-awaited decision in the case Planet49 (Case C-673/17). The decision clarifies the requirements for valid cookie consent under Directive...more

Luxembourg Cloud computing rules for investment fund managers: a reminder of the obligations 6 months before their Cloud Register...

Last year, investment fund managers (IFMs) were caught by surprise with the immediate application of Circular 17/654 on IT outsourcing relying on a cloud computing infrastructure (the Cloud Circular), but every cloud has a...more

CNPD list of processing activities requiring a DPIA

The Luxembourg data protection authority (CNPD) has published a list of processing activities triggering a mandatory data protection impact assessment (DPIA) following review by the European Data Protection Board (EDPB)....more

The new law of 1 August 2018 clarifies data protection in Luxembourg

Just before summer recess, Luxembourg Parliament has adopted the law of 1 August 2018 which implements certain parts of the General Data Protection Regulation (GDPR) and repeals the former data protection law of 2 August...more

Luxembourg bill complementing the GDPR published

On 12 September 2017, the Luxembourg Government introduced a bill of law (the Bill) to complement the General Data Protection Regulation EU) 2016/679 (the GDPR). The Bill is planned to enter into force simultaneously with the...more

Introduction of new tax incentives for intellectual property

The Luxembourg Government has, on 4 August 2017, submitted a bill1 to Parliament for the reintroduction of a regime of taxation of intellectual property (IP) rights in Luxembourg. The new regime is intended to replace the...more

Use of e-banking secured mailbox to provide information on durable medium

By a decision held on 25 January 2017 (C-375/15), the Court of Justice of the European Union (CJEU) clarified the question of information (in electronic format) that payment service providers (such as banks) convey to their...more

33 Results
 / 
View per page
Page: of 2

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
- hide
- hide