What are we really talking about and what are the legal implications under the EU AI Act?
The rapid evolution of artificial intelligence (AI) has led to significant opportunities and challenges, especially in the realm of...more
Given the rapid speed of development in the field of AI, it is increasingly important that businesses develop effective governance to address the regulatory framework governing the development, training, use and deployment of...more
2/20/2025
/ Artificial Intelligence ,
Compliance ,
Data Privacy ,
Data Protection ,
EU ,
General Data Protection Regulation (GDPR) ,
Regulation ,
Regulatory Agenda ,
Regulatory Requirements ,
Risk Management ,
Technology Sector
Companies deploying high-risk artificial intelligence (AI) systems must prepare to conduct Fundamental Rights Impact Assessment (FRIA) by 2 August 2026. In this edition of our “Zooming in on AI” series we explain what this...more
The EU Artificial Intelligence Act (“AI Act”) exemplifies a highly advanced risk-based approach to European regulation. One of its distinguishing features is the detailed classification of various risk levels associated with...more
11/12/2024
/ Artificial Intelligence ,
Digital Services ,
EU ,
European Commission ,
General Data Protection Regulation (GDPR) ,
Machine Learning ,
Privacy Laws ,
Regulatory Agenda ,
Regulatory Requirements ,
Risk Management ,
Technology Sector ,
Transparency
Companies deploying high-risk artificial intelligence (AI) systems must prepare to navigate a complex landscape of new obligations by August 2, 2026. In this post we explain the key obligations for providers and deployers of...more
10/30/2024
/ Artificial Intelligence ,
Automated Systems ,
Data Protection ,
Distributors ,
EU ,
EU Data Protection Laws ,
General Data Protection Regulation (GDPR) ,
Importers ,
Regulatory Agenda ,
Regulatory Oversight ,
Regulatory Requirements ,
Reporting Requirements ,
Risk Management ,
Technology Sector ,
Transparency
This series of blogs rounds up some of the key data protection regulatory trends we have seen during 2024, focused on the EU and UK.
2024 has seen behavioural advertising and cookies continue to dominate the agenda of...more
10/21/2024
/ Artificial Intelligence ,
Biometric Information ,
Data Protection ,
Data Protection Authority ,
EU ,
EU-US Privacy Shield ,
European Data Protection Board (EDPB) ,
General Data Protection Regulation (GDPR) ,
Initial Coin Offering (ICOs) ,
International Data Transfers ,
Personal Data ,
Privacy Laws ,
Regulatory Agenda ,
Regulatory Requirements ,
Technology Sector ,
UK
This series of blogs rounds up some of the key data protection regulatory trends we have seen during 2024, focused on the EU and UK.
2024 has seen behavioural advertising and cookies continue to dominate the agenda of data...more
10/18/2024
/ Artificial Intelligence ,
Biometric Information ,
Employee Monitoring ,
Employer Liability Issues ,
EU ,
EU Data Protection Laws ,
European Data Protection Board (EDPB) ,
General Data Protection Regulation (GDPR) ,
Information Commissioner's Office (ICO) ,
Machine Learning ,
Personal Data ,
Privacy Laws ,
Regulatory Agenda ,
Risk Management ,
UK
This series of blogs rounds up some of the key data protection regulatory trends we have seen during 2024, focused on the EU and UK.
2024 has seen behavioural advertising and cookies continue to dominate the agenda of data...more
10/17/2024
/ Artificial Intelligence ,
Biometric Information ,
Bots ,
Court of Justice of the European Union (CJEU) ,
Employee Monitoring ,
Employer Liability Issues ,
EU ,
EU Data Protection Laws ,
European Data Protection Board (EDPB) ,
General Data Protection Regulation (GDPR) ,
Information Commissioner's Office (ICO) ,
Machine Learning ,
Personal Data ,
Privacy Laws ,
Regulatory Agenda ,
Risk Management ,
UK
This series of blogs rounds up some of the key data protection regulatory trends we have seen during 2024, focused on the EU and UK.
2024 has seen behavioural advertising and cookies continue to dominate the agenda of data...more
10/17/2024
/ Artificial Intelligence ,
Consent ,
Cookies ,
EU ,
EU Data Protection Laws ,
European Commission ,
European Data Protection Board (EDPB) ,
General Data Protection Regulation (GDPR) ,
Information Commissioner's Office (ICO) ,
Internet ,
Machine Learning ,
Privacy Laws ,
Regulatory Agenda ,
Technology Sector ,
Tracking Systems ,
UK
Alongside the recent CJEU judgment on automated decision making in Schufa (see the Allen & Overy blog ) there are a range of developments related to ADM in other jurisdictions.
UK developments -
The UK Parliament is...more
On 7 December 2023, the Court of Justice of the European Union (CJEU) issued a landmark judgment on Article 22 of the General Data Protection Regulation (GDPR), focused on decision making based solely on automated processing...more
In joined Cases C‑26/22 and C‑64/22, related to the German Credit Reference Agency Schufa (see A&O blog on the automated decision making case), the CJEU considered the retention of personal data regarding individuals who had...more
ust over a year ago, on 21 April 2022, the seven economies (Canada, Japan, the Republic of Korea, the Philippines, Singapore, Taiwan, and the USA) participating in the Asia-Pacific Economic Cooperation (APEC) Cross-Border...more
7/19/2023
/ APEC ,
Court of Justice of the European Union (CJEU) ,
Cross Border Privacy Rules (CBPR) ,
Cross-Border ,
Data Collection ,
Data Privacy ,
Data Protection ,
Data Security ,
European Commission ,
European Data Protection Board (EDPB) ,
General Data Protection Regulation (GDPR) ,
International Data Transfers ,
Personal Information ,
Popular ,
UK
In the five years since the European Union’s General Data Protection Regulation came into force, what have been the main learnings for business, and what will the future hold?...more
The first week of May 2023 saw further EU case law emerge on the right to compensation under the GDPR, and in this blog we analyse the implications of these latest rulings and consider what may be coming next....more
The story so far -
In July 2022 the Data Protection and Digital Information Bill (the original Bill) was introduced into Parliament and we finally got sight of the UK Government’s intended direction for data protection...more
We’re now approaching the five-year anniversary of the General Data Protection Regulation (GDPR) taking full effect.
In the run-up to 2018 and the period afterwards, there were many predictions about the likely direction of...more
The 13 December 2022 marked a further stage in restoring greater stability for transatlantic personal data transfers, as the European Commission (the Commission) launched the process towards adoption of an adequacy decision...more
Another important milestone for UK data protection reform was reached this week with the proposed legislative change revealed in the Data Protection and Digital Information Bill....more
Introduction -
The data protection landscape in the UK, and globally, continues to evolve. The pace and number of initiatives has continued into 2022. This requires a step back – to look for key trends and the most relevant...more