AI is accelerating digital transformation for companies and data governance is a key pillar in this change, enabling data strategies that unlock the potential of AI, and mitigate the risks associated with its use. Data...more
9/12/2024
/ Artificial Intelligence ,
Corporate Governance ,
Data Management ,
Data Privacy ,
Data Protection ,
EU ,
Information Governance ,
Machine Learning ,
Regulatory Agenda ,
Regulatory Requirements ,
Risk Management ,
UK
The Artificial Intelligence Act (AI Act) entered into force on 1 August 2024 and is the world's first comprehensive legal framework for AI regulation. As companies start incorporating AI tools into their business, products...more
Alongside the recent CJEU judgment on automated decision making in Schufa (see the Allen & Overy blog ) there are a range of developments related to ADM in other jurisdictions.
UK developments -
The UK Parliament is...more
On 7 December 2023, the Court of Justice of the European Union (CJEU) issued a landmark judgment on Article 22 of the General Data Protection Regulation (GDPR), focused on decision making based solely on automated processing...more
In joined Cases C‑26/22 and C‑64/22, related to the German Credit Reference Agency Schufa (see A&O blog on the automated decision making case), the CJEU considered the retention of personal data regarding individuals who had...more
2023 saw a surge in interest in the application of generative AI within business models. So, if AI and data protection was your favourite genre of 2023, or if you found it to be a broken record, this post consolidates and...more
This is the last post in our series on the UK Financial Conduct Authority (FCA) and Prudential Regulation Authority (PRA) proposals to introduce a new regulatory framework on diversity and inclusion (D&I) in the financial...more
12/22/2023
/ Banking Sector ,
Corporate Culture ,
Corporate Governance ,
Data Protection ,
Diversity ,
Diversity and Inclusion Standards (D&I) ,
Financial Conduct Authority (FCA) ,
Financial Services Industry ,
Prudential Regulation Authority (PRA) ,
Risk Management ,
UK
The latest post in our blog series looking at the UK Financial Conduct Authority and Prudential Regulation Authority proposals to improve diversity and inclusion (D&I) in the financial services industry focusses on data...more
11/27/2023
/ Banking Sector ,
Data Collection ,
Data Protection ,
Data Reporting ,
Disclosure Requirements ,
Diversity ,
Diversity and Inclusion Standards (D&I) ,
Financial Conduct Authority (FCA) ,
Financial Institutions ,
Financial Services Industry ,
New Regulations ,
Prudential Regulation Authority (PRA) ,
Regulatory Requirements ,
UK
ust over a year ago, on 21 April 2022, the seven economies (Canada, Japan, the Republic of Korea, the Philippines, Singapore, Taiwan, and the USA) participating in the Asia-Pacific Economic Cooperation (APEC) Cross-Border...more
7/19/2023
/ APEC ,
Court of Justice of the European Union (CJEU) ,
Cross Border Privacy Rules (CBPR) ,
Cross-Border ,
Data Collection ,
Data Privacy ,
Data Protection ,
Data Security ,
European Commission ,
European Data Protection Board (EDPB) ,
General Data Protection Regulation (GDPR) ,
International Data Transfers ,
Personal Information ,
Popular ,
UK
In the five years since the European Union’s General Data Protection Regulation came into force, what have been the main learnings for business, and what will the future hold?...more
The first week of May 2023 saw further EU case law emerge on the right to compensation under the GDPR, and in this blog we analyse the implications of these latest rulings and consider what may be coming next....more
The international community are continuing to take further steps toward data free flow with trust (DFFT) in 2023, building on recent developments such as the draft EU-US Data Privacy Framework and the expansion of the Global...more
The story so far -
In July 2022 the Data Protection and Digital Information Bill (the original Bill) was introduced into Parliament and we finally got sight of the UK Government’s intended direction for data protection...more
We’re now approaching the five-year anniversary of the General Data Protection Regulation (GDPR) taking full effect.
In the run-up to 2018 and the period afterwards, there were many predictions about the likely direction of...more
The OECD breaks new ground with historic declaration on government access to private sector data: Why is the declaration important and how can it help enable data free flow with trust?...more
Hailed as an alternative approach to the EDPB’s transfer impact assessment, the ICO, with its updated international transfer guidance and its new TRA tool, aims to empower innovation and growth whilst protecting personal...more
The 13 December 2022 marked a further stage in restoring greater stability for transatlantic personal data transfers, as the European Commission (the Commission) launched the process towards adoption of an adequacy decision...more
Another important milestone for UK data protection reform was reached this week with the proposed legislative change revealed in the Data Protection and Digital Information Bill....more
Introduction -
The data protection landscape in the UK, and globally, continues to evolve. The pace and number of initiatives has continued into 2022. This requires a step back – to look for key trends and the most relevant...more