Search results
625 results ordered by
Part 2 - AI regulation in the EU
The EU AI Act, the main elements of which are covered in our previous article, entered into force on 1 August 2024. Most provisions apply from August 2026 but some apply earlier, or later.
Read morePart 1 - UK AI regulation
There has been consistent messaging from the UK Conservative-led government that the UK has decided to adopt a light touch approach to regulating AI. This was evident in the AI white paper published in March 2023 which outlined a principles based framework (see ['The Ethics of AI – the Digital Dilemma'] for more information about the principles themselves and see here for additional coverage of the AI white paper). The UK government held a consultation on the AI white paper in 2023 and published a response on 6 February 2024 that adds slightly more flesh to the bones of the UK framework.
Read moreRegulation of AI - raising the trillion dollar bAIby - introduction
As with any new technology, existing data protection and privacy, intellectual property, competition, product liability, data security and consumer laws apply to its application in each jurisdiction. This has thrown up a number of important and newsworthy issues and considerations for AI developers and providers, legislators, consumers and rights holders. There are also several sets of high profile legal proceedings both decided and ongoing in several jurisdictions. These issues and legal proceedings are discussed in other sections of this AI Guide.
Read morePart 4 – AI Regulation in Asia
This is Part 4 of 'Regulation of AI – raising the trillion dollar bAIby'
Read more“Consent or pay” models under scrutiny in UK and EU
Are “consent or pay” business models compliant with data protection law?
Read moreICO forces Serco Leisure to stop using facial recognition technology for employees
In what circumstances can facial recognition technology (FRT) be acceptable to monitor employees in the workplace?
Read moreOfcom and ICO to collaborate on Online Safety and Data Protection
How are the data protection and broadcasting regulators collaborating to regulate online services from a safety and privacy perspective, and what does this mean for businesses and services regulated by both bodies?
Read moreICO publishes guidance on content moderation
What steps should businesses operating content moderation systems in the UK be taking to comply with new guidance published by the UK’s Information Commissioner (ICO)?
Read moreThe ICO’s strategic approach to regulating AI
How can the ICO’s recently published AI strategy paper help businesses navigate the evolving AI regulatory landscape, particularly in respect of data protection principles?
Read moreNew development: DPDI Bill fails to become law
The Data Protection and Digital Information Bill (DPDIB), the proposal for post-Brexit data protection laws in the UK, did not pass through Parliament before its dissolution on 24 May 2024 ahead of the general election on 4 July 2024. This means that the DPDIB has failed to become law and any proposals for data reform in the UK will largely need to start afresh in the new Parliament.
Read moreThe Role of AI in Disputes
While lawyers have had various forms of AI available to them for years, it is generative AI and the development of large language models (LLMs) which is likely to represent a fundamental shift for dispute resolution. This technology now offers language capabilities that have never been seen before, and is likely to transform the way lawyers conduct proceedings.
Read moreThe Ethics of AI - The Digital Dilemma
This is Part 6 of 'Regulation of AI – raising the trillion dollar bAIby'
Read moreWhat is AI and why is it topical?
Whilst there is no universal definition of what constitutes artificial intelligence, at its core, AI refers to the simulation of human intelligence in machines that are programmed to think and learn like humans. This encompasses the ability to reason, learn from experience, understand complex concepts, interact with their environment and look to solve problems.
Read moreDepartment for Science, Innovation and Technology consults on proposed data infrastructure statutory framework
What statutory obligations could the Department for Science, Innovation and Technology’s (DSIT) proposed statutory framework impose on UK data centre providers?
Read moreICO publishes updates to its guidance on Transfer Risk Assessments
How will recent updates to the Information Commissioner’s Office’s (ICO) guidance on Transfer Risk Assessments (TRAs) affect how UK organisations conduct their TRAs?
Read moreNew ICO guidance on content moderation and data compliance
How can organisations using content moderation technologies and processes best comply with data protection laws?
Read moreICO launches consultation series on generative AI and data protection
What is the Information Commissioner’s Office’s (ICO) intended approach to developing guidance on how data protection law should be applied to the development and use of generative AI?
Read moreCJEU rules on what constitutes “automated decision-making” under the GDPR
Does the production of a credit score constitute “automated decision-making” for the purposes of Article 22 of the EU General Data Protection Regulation (GDPR)? What wider impact will this have for AI technologies?
Read moreEDPB adopts opinion on “main establishment” of a controller in the EU
What is meant by “main establishment” under article 4(16)(a) of the GDPR for the purposes of determining the application of the one-stop-shop mechanism?
Read moreICO warns UK’s most visited websites to improve cookie choices
What steps is the ICO taking to ensure that website cookie banners are compliant with law?
Read moreNew Development: EU Data Act published in Official Journal
The EU Data Act (the Act) came into force on 11 January 2024. The Act sets out rules regarding the fair access to and use of data, aiming to enhance the data economy for individuals and businesses by overcoming barriers to data sharing and establishing frameworks around data access and use.
Read moreICO fines HelloFresh £140,000 after 7-month spam marketing campaign
Where did HelloFresh go wrong with their email and text marketing campaign and what lessons can be learned from the ICO’s investigation and subsequent fine?
Read moreICO issues preliminary enforcement notice against Snap for its “My AI” Chatbot
How can organisations who wish to join to the world of generative AI ensure that they adequately assess the risks from the perspective of the Information Commissioner’s Office (ICO)?
Read moreNew Development: EDPB provides clarification on tracking techniques covered by the ePrivacy Directive
On 14 November 2023, the European Data Protection Board (EDPB) adopted a set of new guidelines (the Guidelines) on the technical scope of Article 5(3) of the ePrivacy Directive (the ePD).
Read moreClearview AI cleared of £7.5m ICO fine for processing data outside the UK
Just how did the processing of personal data by Clearview AI (Clearview) fall outside the scope of UK GDPR?
Read moreICO publishes guidance to ensure lawful monitoring in the workplace
How can employers monitor their workers whilst maintaining their trust and complying with data protection regulation?
Read moreICO publishes its draft “Data Protection Fining Guidance” for public consultation
How will the Information Commissioner’s Office (ICO) calculate the amount of a fine under the UK GPDR and the Data Protection Act (DPA) 2018?
Read moreEU Advocate General’s opinion on data subjects’ rights to compensation for non-material damage under the GDPR
Does the theft of an individual’s sensitive personal data by a wrongdoer give rise to compensation for non-material damage under Article 82 EU General Data Protection Regulation (GDPR), if the wrongdoer has not used, or taken steps to use, the sensitive personal data for any purpose?
Read moreICO updates its guidance on AI and data protection
What are the key data protection principles which the Information Commissioner’s Office (ICO) expects organisations to follow when integrating AI into their product and service offerings?
Read moreThe right to know who has your personal data (RW v Österreichische Post AG (C-154/21))
In RW v Österreichische Post AG (C-154/21), the European Court of Justice ("ECJ") has provided clarification on the right of access to personal data and information relating to the processing of such data under Article 15(1) of the GDPR.
Read moreFCA consults on new reporting obligations for (i) incidents and (ii) third party arrangements
On 13 December 2024, the FCA published consultation paper CP24/28 (the CP) on proposals for firms to report on operational incidents and, separately, on material third party arrangements. The CP mirrors similar proposals put forward by the PRA and Bank of England on the same day and is designed to align with current international standards (e.g. the EU Regulation on digital operational resilience (DORA)).
Read moreTelecoms supply agreement excludes "loss of profit" claim under "anticipated profits" liability exclusion (EE v Virgin Mobile)
In line with a number of recent cases, in EE Limited v Virgin Mobile Telecoms Limited [2023] EWHC 1989 (TCC) the courts have shown that parties generally cannot avoid clear wording contained in exclusion clauses in order to recover losses that have been expressly excluded (in this case, loss of profits).
Read moreRolls-Royce entitled to hit the brakes in dispute over termination of a software services agreement (Topalsson v Rolls-Royce)
In Topalsson GmbH v Rolls-Royce Motor Cars Limited [2023] EWHC 1765 (TCC), the High Court has provided useful guidance on how to determine whether a software implementation timeline agreed by the parties is binding, when implementation is considered complete and in what circumstances failing to complete implementation by the contractual deadlines entitles the customer to terminate the contract.
Read moreA narrow escape – software services provider entitled to rely on single aggregate liability cap (Drax v Wipro)
When it comes to bespoke software development projects, a lot can go wrong. There's risk for the customer such as project delays, software defects, functionality issues and a lack of meeting of minds in terms of project requirements.
Read moreEU publishes draft Code for general-purpose AI models
What measures are proposed by the EU AI Office to regulate general-purpose AI (GPAI) models?
Read moreOfcom rolls out implementation phases for compliance with the Online Safety Act
What is Ofcom’s timeframe for implementation of the Online Safety Act (OSA) and what actions will in-scope services need to take to ensure compliance?
Read moreNew Safer Phones Bill aims at “making social media less addictive” for young people
How does the Safer Phones Bill intend to protect young people online?
Read moreTwo years on from the Digital Services Act
How has the European Commission (Commission) enforced the Digital Services Act (DSA) since its inception?
Read moreUK’s Digital Regulation Co-operation Forum announces new AI and Digital Hub Pilot
What is the AI and Digital Hub and how can AI innovators use it?
Read moreEU designates Apple a gatekeeper for iPadOS but not for iMessage
Can a business avoid being designated a “gatekeeper” under the Digital Markets Act (DMA) even if it satisfies the quantitative criteria under the DMA?
Read moreOnline Safety Act: Ofcom consults on draft codes to protect children online
What must businesses do to ensure online safety for children under the latest codes of practice published by Ofcom?
Read moreWhat in the AI is going on… April to June 2024
Meta launched its newest generation of its open-source LLM (large language model), Llama 3, which is the technology that powers its AI systems. The launch of Llama 3 signals a step closer to human-like AI that can reason and bestow a memory. OpenAI also discussed plans for its next AI model, GPT-5. Like Llama 3, GPT-5 will see improvements to the model’s planning and reasoning capabilities, going beyond its current capability to deal with discrete tasks. GPT-5 is expected to be released later in the year.
Read moreEU AI Act is signed!
What are the core elements of the EU’s Artificial Intelligence Act and how does it impact the regulation of AI systems?
Read moreCMA publishes update paper on AI Foundation Models
What is the state of play for the market of AI Foundation Models (FM) and what issues in the market is the Competition and Markets Authority (CMA) most concerned about?
Read moreNew EU guidelines on mitigating risks for electoral
What are the European Commission’s new guidelines and how do they protect the integrity of electoral processes?
Read moreFines for PDPA Breaches: How Clear is the Crystal Ball?
The Singapore Personal Data Protection Commission ("PDPC") has recently issued a number of new enforcement decisions.
Read moreProperty Digital Rights – A New Revenue Stream in a Digital World
Advances in technology are opening up exciting new frontiers for property owners and managers. Almost two billion people globally use augmented reality (AR) on their mobile phones and nearly 400 million engage in a virtual metaverse reality.
Read moreLegislation Empowering the CMA's Digital Markets Unit Introduced into Parliament
The long-anticipated Digital Markets, Competition and Consumers Bill (the Bill) has now begun its parliamentary journey following its introduction on 25 April 2023. Described as a "flagship bill" by the CEO of the Competition and Markets Authority (the CMA), the Bill not only introduces major landscape reforms to the UK's consumer protection regime and significant enhancements to the CMA's competition law powers, it also ushers in a new regime for digital markets. The Bill has the potential to be a "watershed moment" in how UK digital markets are regulated.
Read morePrivacy developments – looking back and looking forward
In this article, we give you a high-level snapshot of the key data protection and privacy developments in the UK and EU in 2024 as well as developments we anticipate for 2025.
Read moreStay connected and subscribe to our latest insights and views
Subscribe Here