The European Union has significantly overhauled its product liability regime with a new directive concerning liability for defective products (Product Liability Directive). EU member states have until December 9, 2026, to...more
2/18/2025
/ Artificial Intelligence ,
Compliance Dates ,
Consumer Protection Laws ,
Cybersecurity ,
EU ,
EU Directive ,
Liability ,
Manufacturers ,
Member State ,
Product Defects ,
Risk Management ,
Software ,
Technology Sector
The EU AI Act, which went into force on August 1, 2024, introduces specific rules for artificial intelligence (AI) systems, especially those deemed “high risk.”
Medtech devices, products, and services — such as...more
The act’s rules kick in on a rolling basis over the next few years, with the first set of prohibitions coming into effect in February 2025.
The European Union's Artificial Intelligence (AI) Act is the first comprehensive...more
The European Union (EU) Artificial Intelligence Act (AI Act), Regulation (EU) 2024/1689 of the European Parliament and of the Council of 13 June 2024 laying down harmonised rules on artificial intelligence and amending...more
8/12/2024
/ Amended Regulation ,
Artificial Intelligence ,
Broker-Dealer ,
Brokers ,
Compliance Dates ,
Effective Date ,
EIOPA ,
EU ,
EU Directive ,
European Banking Authority (EBA) ,
European Commission ,
European Supervisory Authorities (ESAs) ,
Extraterritoriality Rules ,
Financial Services Industry ,
Insurance Brokers ,
International Harmonization ,
Investment Adviser ,
Lenders ,
Member State ,
Nonbank Firms ,
Retail Investors ,
Third-Party Service Provider
The EU Artificial Intelligence (AI) Act is set to become the world’s first comprehensive regulation on AI. After extensive negotiations, the European Parliament, Commission, and Council reached a political agreement on the AI...more
7/19/2024
/ Artificial Intelligence ,
Compliance ,
Educational Institutions ,
Effective Date ,
EU ,
European Commission ,
European Council ,
European Parliament ,
Immigration Procedures ,
Infrastructure ,
Member State ,
New Legislation ,
Public Servants ,
Risk Mitigation
The new EU Artificial Intelligence Act (“AI Act”) is a risk-based framework, ranging from outright prohibitions on certain types of systems to light regulation of others. The AI Act sets out to define AI systems, their levels...more
Yesterday, March 13, 2024, the European Parliament approved the EU Artificial Intelligence Act (“AI Act”), a sweeping AI governance framework which presents the first comprehensive law in the world aimed at ensuring AI...more
3/15/2024
/ Artificial Intelligence ,
Compliance ,
Compliance Dates ,
Digital Services ,
EU ,
European Commission ,
European Parliament ,
Exceptions ,
General Data Protection Regulation (GDPR) ,
Machine Learning ,
Member State ,
Multinationals ,
Penalties ,
Regulatory Authority ,
Risk-Based Approaches ,
Technology
The EU Parliament’s committees for internal market and civil liberties overwhelmingly adopted the final text of the Artificial Intelligence Act (AI Act). The European Parliament will now vote on the AI Act in a formality that...more
Generative AI (GenAI) surged to the forefront of corporate agendas and public policy debates last year, promising to boost productivity and innovation. What’s in store for AI in 2024?...more
1/17/2024
/ Artificial Intelligence ,
Authors ,
Authorship ,
Copyright ,
Copyright Infringement ,
Data Privacy ,
EU ,
General Data Protection Regulation (GDPR) ,
Innovative Technology ,
Inventors ,
Investors ,
IP License ,
Machine Learning ,
Patents ,
Pharmaceutical Industry ,
Popular ,
Privacy Concerns ,
Regulatory Oversight ,
Software ,
Technology Sector
On 25 August 2023, the EU’s Digital Services Act (“DSA”) came into effect for very large online platforms and very large online search engines. The DSA becomes fully applicable to other entities within its scope on 17...more
The European Union Artificial Intelligence Act, or EU AI Act, is expected to pass this year. It will come into force about two years after it is approved, potentially at the end of 2025 or early 2026....more
On July 10, 2023, the European Commission adopted an adequacy decision for the new EU-US Data Privacy Framework (“DPF”), the revamped transatlantic framework designed to support transfers of personal data from the EU to...more
7/19/2023
/ Adequacy Requirement ,
Binding Corporate Rules ,
Certification Requirements ,
Data Privacy ,
EU ,
Executive Orders ,
Framework Agreement ,
International Data Transfers ,
Personal Data ,
Privacy Framework ,
Standard Contractual Clauses ,
Switzerland ,
UK
The Digital Markets, Competition, and Consumers Bill (the DMCC) was introduced in the House of Commons on 25 April 2023, and the second reading was held on 17 May. The DMCC aims to cover two main topics: (a) digital markets...more
On 11 May 2023, the European Union’s landmark AI Act took a giant leap forward as the EU Parliament's Internal Market Committee and the Civil Liberties Committee (EU Parliament) approved their compromise text. The draft AI...more
Last year, the European Union passed a number of important EU legislative acts relating to the regulation of technology. Further legislative acts and proposals affecting technology are on the agenda for 2023, including the...more
2/7/2023
/ Artificial Intelligence ,
Corporate Counsel ,
Cybersecurity ,
Digital Markets Strategy ,
Digital Services ,
Electronic Devices ,
EU ,
Internet of Things ,
Popular ,
Regulatory Oversight ,
Regulatory Requirements ,
Smart Devices ,
Technology ,
Technology Sector
On June 4, 2021, the European Commission (the “EC”) abolished the old Standard Contractual Clauses (the “Old SCCs”) and published a new more flexible set of clauses (the “New SCCs”) for companies that wish to export personal...more
On 25 March 2022, President Biden and the President of the European Commission (“EC”) von der Leyen announced that the U.S. and EU reached an agreement in principle on a new Trans-Atlantic Data Privacy framework for...more
3/30/2022
/ Court of Justice of the European Union (CJEU) ,
Data Protection ,
EU ,
EU-US Privacy Shield ,
European Commission ,
European Court of Justice (ECJ) ,
European Data Protection Board (EDPB) ,
International Data Transfers ,
Personal Data ,
Schrems I & Schrems II ,
Standard Contractual Clauses
The European Securities and Markets Authority (“ESMA”) Final Report Guidelines on outsourcing to cloud service providers (“the Guidelines”) came into force on 31 July 2021 and apply to all cloud outsourcing arrangements...more
1/19/2022
/ Audits ,
Cloud Service Providers (CSPs) ,
EU ,
European Securities and Markets Authority (ESMA) ,
Exit Strategies ,
Financial Services Industry ,
Information Security ,
Investment Firms ,
Outsourcing ,
Termination ,
UK
The European Data Protection Board (EDPB) recently published Minutes of its last plenary meeting held in September, which sheds light on how the EDPB plans to address the biggest open issue of the new Standard Contractual...more
The dust has settled on the new EU standard contractual clauses for cross-border data transfers (“New SCCs”), but confusion still reins on how the New SCCs cover data transfers and what companies need to do to take advantage...more
8/27/2021
/ Court of Justice of the European Union (CJEU) ,
Data Controller ,
Data Privacy ,
Data Processors ,
Data Protection ,
Data Transfers ,
EU ,
European Data Protection Board (EDPB) ,
General Data Protection Regulation (GDPR) ,
Impact Assessments ,
Information Commissioner's Office (ICO) ,
International Data Transfers ,
Personal Data ,
Schrems I & Schrems II ,
Standard Contractual Clauses ,
UK
Risks of non-compliance with the GDPR keep increasing with data protection authorities (DPAs) now ordering suspension of transfers of personal data to the U.S. In March, the Bavarian DPA found there was an unlawful transfer...more
On 21 April 2021, the European Commission unveiled a proposal for an EU Artificial Intelligence Regulation (“Proposal”). The Proposal recognizes that AI offers significant benefits and opportunities for the EU market, but...more
4/27/2021
/ Artificial Intelligence ,
Cyber Incident Reporting ,
Cybersecurity ,
Data Privacy ,
Data Protection ,
Data Security ,
Distributors ,
EU ,
European Commission ,
Fines ,
Importers ,
Member State ,
Proposed Regulation ,
Recordkeeping Requirements ,
Registration Requirement ,
Regulatory Oversight ,
Transparency
Earlier this year, the European Data Protection Board (“EDPB”) issued additional guidance on the application of the General Data Protection Regulation (“GDPR”) in the area of scientific health research.
In key takeaways...more
3/5/2021
/ Consent ,
Data Protection ,
Data Protection Impact Assessments (DPIAs) ,
EU ,
European Commission ,
European Data Protection Board (EDPB) ,
General Data Protection Regulation (GDPR) ,
International Data Transfers ,
Member State ,
Personal Data ,
Scientific Research
On 15 January, 2021, the European Data Protection Board (“EDPB”) and the European Data Protection Supervisor (“EDPS”) adopted a joint opinion (“Joint Opinion”) on the draft new sets of Standard Contractual Clauses (“New...more
1/28/2021
/ Data Protection ,
EDPS ,
EU ,
EU Data Protection Laws ,
European Commission ,
European Data Protection Board (EDPB) ,
General Data Protection Regulation (GDPR) ,
International Data Transfers ,
Personal Data ,
Schrems I & Schrems II ,
Standard Contractual Clauses
On December 15, 2020, Ireland’s Data Protection Commission (“DPC”) announced its decision to fine Twitter International Company (“Twitter”) €450,000 for failing to notify the DPC promptly of a data breach affecting EU...more
1/20/2021
/ Cyber Incident Reporting ,
Cybersecurity ,
Data Breach ,
Data Controller ,
Data Processors ,
Data Protection ,
Data Protection Commissioner ,
Data Security ,
EU ,
Failure to Notify ,
General Data Protection Regulation (GDPR) ,
Personal Data ,
Policies and Procedures ,
Twitter