Search results
80 results ordered by RelevanceRelevanceDate (Asc)Date (Desc)A-ZZ-A
UK Data (Use and Access) Act comes into force
What are the key elements of the UK’s new Data (Use and Access) Act (DUAA)?
Read moreICO publishes new guidance on anonymisation and pseudonymisation
What are the ICO's latest key recommendations for effective anonymisation and pseudonymisation of personal data?
Read moreEncryption under scrutiny: what the ICO’s new guidance means for your business
What is the ICO's current thinking around encryption practices where organisations are subject to the UK GDPR?
Read more€530m TikTok fine highlights the importance of effective international data transfer mechanisms
What were the missing compliance elements in TikTok's international data transfers to China and why did these result in such a significant fine?
Read moreSnapshots Summer 2025
A roundup of key legal developments for the modern commercial lawyer.
Read moreHigh Court rules against Sky Betting’s targeted marketing
What constitutes valid consent under UK data protection law, particularly in the context of targeted marketing to vulnerable individuals?
Read moreStatus update on the UK’s new Data (Use and Access) Bill
The UK’s new Data (Use and Access) Bill (DUA Bill) is on its way, but where is it in the legislative process? And what are proving the sticking points?
Read moreDeveloping responsible GenAI – the UK and EU regulatory view
What is the UK and EU data protection authorities’ view on ensuring responsible generative AI (GenAI) development and deployment?
Read moreEuropean Data Protection Board adopts statement on age assurance technologies
How is the European Data Protection Board (EDPB) proposing to address the benefits and risks of age assurance technologies?
Read moreNew ICO guidance for “consent or pay” online ads
What is the view of the UK Information Commissioner’s Office (ICO) on whether “consent or pay” online advertising models are compliant with UK data protection law?
Read moreSnapshots Spring 2025
A roundup of key legal developments for the modern commercial lawyer.
Read moreSnapshots Winter 2024
A roundup of key legal developments for the modern commercial lawyer.
Read moreSnapshots Autumn 2024
A roundup of key legal developments for the modern commercial lawyer.
Read moreSnapshots Summer 2024
A roundup of key legal developments for the modern commercial lawyer.
Read moreSnapshots Spring 2024
A roundup of key legal developments for the modern commercial lawyer.
Read moreSnapshots Winter 2023
A roundup of key legal developments for the modern commercial lawyer.
Read moreSnapshots Autumn 2023
A roundup of key legal developments for the modern commercial lawyer.
Read moreSnapshots Summer 2023
A roundup of key legal developments for the modern commercial lawyer.
Read moreSnapshots Spring 2023
A roundup of key legal developments for the modern commercial lawyer.
Read moreSnapshots Winter 2022
A roundup of key legal developments for the modern commercial lawyer.
Read moreOfcom publishes children's online safety codes and risk assessment guidance
What measures must in-scope service providers undertake following the introduction of Ofcom's Protection of Children Codes and Guidance (the Codes)?
Read moreNew UK Software Security Code of Practice
What impact will the new voluntary Software Security Code of Practice have on UK organisations?
Read moreNavigating the AI Act: The GPAI Code of Practice and Guidelines
What does the European Commission’s GPAI Code of Practice and Guidelines mean for providers of General Purpose AI models?
Read moreFirst fines issued under the EU Digital Markets Act
How have obligations under the Digital Markets Act (DMA) been enforced recently and what are the ramifications for a lack of compliance?
Read moreEU Commission's call for evidence on European Business Wallet
What is the new European Business Wallet and how could businesses benefit from it?
Read moreEU Commission seeks feedback on guidelines for the protection of minors online under the Digital Services Act
What might the change in the Digital Services Act (DSA) guidelines mean for providers of online platforms that can be used by minors?
Read moreGenerative AI – addressing copyright
When it comes to the interaction of AI and IP rights, most attention and litigation has been focussed on copyright. The three main issues are whether: (1) the way FMs are trained using works from the internet infringes the copyright in the works of content creators such as authors, artists and software developers; (2) the outputs of FMs infringe the copyright of content creators; and (3) AI generated works are protectable.
Read morePart 1 - UK AI regulation
There has been consistent messaging from the UK Conservative-led government that the UK has decided to adopt a light touch approach to regulating AI. This was evident in the AI white paper published in March 2023 which outlined a principles based framework (see ['The Ethics of AI – the Digital Dilemma'] for more information about the principles themselves and see here for additional coverage of the AI white paper). The UK government held a consultation on the AI white paper in 2023 and published a response on 6 February 2024 that adds slightly more flesh to the bones of the UK framework.
Read moreThe Role of AI in Disputes
While lawyers have had various forms of AI available to them for years, it is generative AI and the development of large language models (LLMs) which is likely to represent a fundamental shift for dispute resolution. This technology now offers language capabilities that have never been seen before, and is likely to transform the way lawyers conduct proceedings.
Read moreAI and Privacy – 10 Questions to Ask
We set out in this section 10 key questions to ask yourself at the outset when developing or deploying AI solutions in your business.
Read moreThe Ethics of AI - The Digital Dilemma
This is Part 6 of 'Regulation of AI – raising the trillion dollar bAIby'
Read morePart 6 – Practical Considerations
AI focussed actors and providers have been focussing on their forthcoming AI obligations and on governance for some time, but it is now prudent for the majority of organisations to assess how their use of AI will come within the scope of regulation in key territories and become familiar with each regime (and devise a means to keep up with the anticipated fast moving changes). Planning for the costs of compliance and for AI governance including systems and procedures for data retention and record keeping should also be part of current business strategy together with building expertise on AI internally and identifying trusted advisors from the "noise" of what is being offered externally.
Read morePart 5 – AI Regulation Globally
On 30 October 2023 the G7 published its international guiding principles on AI, in addition to a voluntary code of conduct for AI developers. The G7 principles are a non-exhaustive list of guiding principles aimed at promoting safe, secure and trustworthy AI and are intended to build on the OECD's AI Principles, adopted back in May 2019.
Read moreAI-as-a-service – key issues
Artificial Intelligence-as-a-Service (AIaaS), in the same vein as Software-as-a-Service and Infrastructure-as-a-Service, refers to cloud-based tools that allow businesses to gain access to an AI model hosted by a third party provider.
Read moreProcuring AI – commercial considerations checklist
Many companies will no doubt be considering using AI within their business to take advantage of the massive opportunities for increased productivity and cost efficiencies promised.
Read moreRegulation of AI - introduction
As with any new technology, existing data protection and privacy, intellectual property, competition, product liability, data security and consumer laws apply to its application in each jurisdiction. This has thrown up a number of important and newsworthy issues and considerations for AI developers and providers, legislators, consumers and rights holders. There are also several sets of high profile legal proceedings both decided and ongoing in several jurisdictions. These issues and legal proceedings are discussed in other sections of this AI Guide.
Read moreWhat is AI and why is it topical?
Whilst there is no universal definition of what constitutes artificial intelligence, at its core, AI refers to the simulation of human intelligence in machines that are programmed to think and learn like humans. This encompasses the ability to reason, learn from experience, understand complex concepts, interact with their environment and look to solve problems.
Read morePart 3 - AI regulation in the US
Back in October 2022, the White House published federal guidance – a Blueprint for an AI Bill of Rights identifying five principles aiming to guide the design, use, and deployment of automated systems. It was designed to operate as a roadmap to protect the public from AI harms and was followed in October 2023 by the US President's Executive Order on the Safe, Secure, and Trustworthy Development and Use of Artificial Intelligence. The Executive Order sets out eight "guiding principles and priorities", detailing how those principles and priorities should be put into effect, and reporting requirements
Read morePart 2 - AI regulation in the EU
The EU AI Act, the main elements of which are covered in our previous article, entered into force on 1 August 2024. Most provisions apply from August 2026 but some apply earlier, or later.
Read moreNew Standard Contractual Clauses for data importers outside the EAA but subject to the GDPR
Are the EU’s Standard Contractual Clauses (SCCs) needed if a data importer is located outside the European Economic Area (EEA) and already directly subject to the EU General Data Protection Regulation (EU GDPR)? In other words, where third party controllers and processors are based outside the EAA but subject to the GDPR, do you still need the SCCs to enable a lawful international transfer to them?
Read moreThe UK’s new Data (Use and Access) Bill
What does the UK’s new Data (Use and Access) Bill (the Data Bill) mean for businesses?
Read moreIrish DPC fines LinkedIn €310m for behavioural analysis and targeted advertising breaches
How certain do data controllers need to be of their lawful basis for processing personal data when engaging in behavioural analysis and targeted advertising, and how clearly must this be reflected in a privacy policy?
Read moreEDPB’s new publications on the ePrivacy Directive, processors and legitimate interests
What are the key takeaways for organisations processing personal data set out in the recent Guidelines and Opinions adopted by the European Data Protection Board (EDPB)?
Read moreICO reprimands Sky Betting and Gaming for using non-essential cookies without users’ consent
What proactive steps should website operators take to ensure that their use of cookies complies with UK data protection law? Put another way, are you sure personal data is not being collected by your website’s advertising cookies before users have consented to their deployment?
Read moreICO Statement on Generative AI Model Training
What position does the Information Commissioner’s Office (ICO) continue to take on Generative AI Model training?
Read moreUK's new AI Cyber Security Code of Practice
What is the UK's proposed AI Cyber Security Code of Practice?
Read moreEU AI Act into force 1 August 2024
The EU AI Act came into force across all 27 EU member states on 1 August 2024. The aim of the legislation is to ensure AI systems used in the EU are safe and transparent.
Read moreThe UK's Digital Information and Smart Data Bill
What can we expect from the new Digital Information and Smart Data Bill (the DISD Bill)?
Read moreStay connected and subscribe to our latest insights and views
Subscribe Here