On 1 October 2025, the General Court of the European Union (GCEU) held the EU liable for non‑material damage caused by the unlawful processing of personal data by an EU body. In OC v. Commission (T ‑384/20 RENV),1 which...more
11/5/2025
/ Damages ,
Data Privacy ,
Data Protection ,
Defense Strategies ,
EU ,
European Commission ,
General Court of the European Union (GCEU) ,
General Data Protection Regulation (GDPR) ,
Litigation Strategies ,
Personal Data ,
Privacy Laws
While the case is likely to be mentioned in upcoming non-material damages claims, its unique circumstances mean defence arguments remain robust....more
11/3/2025
/ Damages ,
Data Privacy ,
Data Protection ,
Defense Strategies ,
Enforcement Actions ,
EU Data Protection Laws ,
European Commission ,
General Court of the European Union (GCEU) ,
General Data Protection Regulation (GDPR) ,
Personal Data ,
Privacy Laws
The draft provides further detail on the reporting obligations under Article 73 of the EU AI Act; companies may submit comments until 7 November 2025....more
10/29/2025
/ Artificial Intelligence ,
Comment Period ,
Corporate Counsel ,
Draft Guidance ,
EU ,
European Commission ,
New Guidance ,
New Legislation ,
Regulatory Oversight ,
Regulatory Requirements ,
Reporting Requirements
In this episode of our Connected With Latham podcast, London partner Gail Crawford and Frankfurt partner Tim Wybitul discuss the EU Data Act, and what this means for data privacy and cybersecurity practices.
Learn more:...more
The CJEU rules that personal data can be pseudonymous in the hands of one party and anonymous in the hands of another....more
9/16/2025
/ Anonymization ,
Corporate Counsel ,
Court of Justice of the European Union (CJEU) ,
Data Privacy ,
Data Protection ,
Data Transfers ,
Data-Sharing ,
EDPS ,
EU ,
General Data Protection Regulation (GDPR) ,
Personal Data ,
Transparency
The Act presents a significant overhaul of European data law, affecting most companies that handle digital products and connected services, and data processing services, in the EU....more
9/15/2025
/ Class Action ,
Cloud Service Providers (CSPs) ,
Contract Terms ,
Data Management ,
Data Privacy ,
Data Processors ,
Data Protection ,
Digital Platforms ,
Digital Services ,
EU ,
General Data Protection Regulation (GDPR) ,
Information Technology ,
New Legislation ,
Regulatory Requirements
EU General Court confirms United States ensured an adequate level of protection for EU personal data transfers to the US. ...more
9/9/2025
/ Court of Justice of the European Union (CJEU) ,
Data Privacy ,
Data Protection ,
Data Security ,
EU ,
European Commission ,
Executive Orders ,
General Data Protection Regulation (GDPR) ,
International Data Transfers ,
National Intelligence Agencies ,
Privacy Framework ,
Schrems I & Schrems II ,
United States
The code covers transparency, copyright compliance, and management of systemic risks for providers of GPAI models....more
9/5/2025
/ AI Act ,
Algorithms ,
Artificial Intelligence ,
Copyright ,
EU ,
EU Directive ,
Machine Learning ,
Regulatory Oversight ,
Regulatory Requirements ,
Risk Management ,
Transparency
In the rapidly evolving landscape of European tech regulation, the Data Act introduces changes with the potential to reshape established market dynamics, presenting significant challenges and opportunities for affected...more
8/20/2025
/ Cloud Service Providers (CSPs) ,
Data Privacy ,
Data Processing Rules ,
Data Processors ,
Data Protection ,
Digital Assets ,
EU ,
New Legislation ,
Regulatory Requirements ,
Service Contracts ,
Technology ,
Technology Sector
The technology and digital regulatory environment in the EU and the UK is experiencing significant evolution in 2025 and beyond. These legal developments present both significant opportunities and complex compliance...more
7/17/2025
/ AI Act ,
Artificial Intelligence ,
Cybersecurity ,
Data Privacy ,
EU ,
New Legislation ,
Online Safety for Children ,
Popular ,
Regulatory Agenda ,
Regulatory Requirements ,
Risk Management ,
Technology ,
Technology Sector ,
UK
Advocate General Spielmann opines that personal data can be pseudonymous in the hands of one party and anonymous in the hands of another....more
2/20/2025
/ Court of Justice of the European Union (CJEU) ,
Data Privacy ,
Data Protection ,
Data Security ,
Data-Sharing ,
EDPS ,
EU ,
General Data Protection Regulation (GDPR) ,
Legal Opinion ,
Personal Data ,
Privacy Acts ,
Privacy Laws ,
Transparency
The CJEU has decided that the maximum thresholds for GDPR fines should be calculated using the global turnover of the broader corporate group, not solely the infringing entity....more
2/20/2025
/ Affiliates ,
Civil Monetary Penalty ,
Corporate Fines ,
Court of Justice of the European Union (CJEU) ,
Data Privacy ,
Data Protection ,
Enforcement Actions ,
EU ,
General Data Protection Regulation (GDPR) ,
Multinationals ,
Personal Data ,
Privacy Laws
Welcome to our Litigation 2024 Year in Review and 2025 Outlook. In this report, we examine the legal trends that have shaped the commercial landscape in Europe and the UK and explore how these developments are likely to...more
2/11/2025
/ Arbitration ,
Class Action ,
Competition ,
Contract Disputes ,
Corporate Governance ,
Cryptocurrency ,
Data Privacy ,
Enforcement Actions ,
Environmental Social & Governance (ESG) ,
EU ,
European Commission ,
Financial Institutions ,
Insolvency ,
Litigation Strategies ,
Mergers ,
Regulatory Reform ,
UK ,
Whistleblower Protection Policies ,
Whistleblowers
The EU AI Act came into effect on 1 August 2024, and the first obligations under the Act will become applicable from 2 February 2025. Providers and deployers of AI systems must ensure that their employees and contractors...more
The Directive expands the scope of liability to digital products (including AI systems), fulfilment service providers, and online platforms, while reducing the burden of proof for claimants.
On 9 December 2024, the new...more
The Draft Code sets out various obligations relating to transparency, copyright compliance, and management of systemic risks for providers of GPAI models....more
The draft guidelines provide further clarification to the EDPB’s interpretation of legitimate interests, and suggest a potential divergence with the UK ICO....more
11/25/2024
/ Court of Justice of the European Union (CJEU) ,
Data Controller ,
Data Processors ,
Draft Guidance ,
EU ,
European Data Protection Board (EDPB) ,
General Data Protection Regulation (GDPR) ,
Information Commissioner's Office (ICO) ,
Marketing ,
Multi-Factor Test ,
Personal Data ,
UK
Now that the EU AI Act has come into force, companies deploying high-risk artificial intelligence (AI) systems in the European Union (EU) must prepare to navigate a complex landscape of new obligations by 2 August 2027. This...more
The EU AI Office has just published a consultation on the topics that should be covered by the first general-purpose AI (GPAI) Code of Practice and a call for interest to participate in drafting the Code....more
Today marks a significant milestone in the regulation of artificial intelligence (AI) as the European Union (EU) AI Act is published in the EU Official Journal. This landmark legislation establishes the world’s first...more
After three years of legislative debate, the Council of the European Union cast its final vote on the European Union (EU) Artificial Intelligence (AI) Act on 21 May 2024. Once published in the EU Official Journal in June, the...more
EU-Parlament soll im Februar 2024 über Neuregelung zur Sanktionierung von DSGVO-Verstößen entscheiden -
Die geplante Neuregelung soll im Februar im EU-Parlament verabschiedet werden. Sie wäre sehr nachteilig, wenn ihr...more
Die Verhängung von Geldbußen nach Art. 83 DS-GVO nimmt in der Praxis eine immer wichtigere Stellung ein. Deutsche und andere europäische Aufsichtsbehörden verhängen immer mehr und höhere Bußgelder wegen Datenschutzverstößen. ...more
Europäische Datenschutzbehörden verhängen immer höhere Geldbußen. Dementsprechend nimmt auch die Bedeutung einer effektiven Verteidigung von Unternehmen in Bußgeldverfahren wegen DS-GVO-Verstößen stetig zu.
Ursprünglich...more
Cybersecurity incidents pose legal challenges for in-house counsel, alongside their technical implications. This overview highlights key aspects that legal departments must know when reacting to data breaches.
...more