Debevoise Data Blog

APRIL 29, 2022

On March 24, 2022, Utah enacted a comprehensive consumer privacy law, the Utah Consumer Privacy Act (“UCPA”). The UCPA, effective on December 31, 2023, is largely consistent with other comprehensive state privacy laws, but includes several key differences. The UCPA has a narrower applicability than the State Privacy Laws.

Law 52

Law Law Data protection Attorney 52

Berkley Technology Law Journal

JANUARY 24, 2025

Candidate, 2025 No one wants to be left holding the bag after a break-in, but for chief information security officers (CISOs), the risk of liability is ever-present. They are responsible for overseeing an organizations data protection measures, risk management strategies, overall security infrastructure, among other critical responsibilities.

Failure-to-appear 52

Failure-to-appear Court Judge Data protection 52

Debevoise Data Blog

MAY 23, 2022

Connecticut’s Governor signed the state’s comprehensive privacy law into effect on May 10, 2022, adding yet another category of state privacy law. We also provide an overview of the CTPA’s enforcement mechanisms and explain how the CTPA modifies prior laws’ safe harbor with a nod towards prosecutorial discretion.

Law 40

Law Law Compliance Attorney 40

Inside Privacy

FEBRUARY 1, 2024

While the EU GDPR regulates the international transfer of personal data, several recently enacted EU laws regulate the international transfer of non-personal data, which is any data that is not “personal data” under the GDPR. This is borne out by the provisions in the proposed EHDS, as discussed below.

Intellectual Property 72

Intellectual Property State law Court Compliance 72

Debevoise Data Blog

FEBRUARY 22, 2024

The UK’s approach is therefore an important reminder that while there is often significant public attention on new AI laws, such as the EU AI Act, the use of AI is already subject to a wide variety of existing legal requirements under other technology-neutral laws, including data protection and equalities legislation.

Data protection 52

Data protection Law Law Compliance 52

Technology Law Dispatch

NOVEMBER 22, 2023

Nov 2023 – Consultation on illegal content Dec 2023 – Consultation on child safety, pornography, and protecting women and girls Spring 2024 – advice to the Secretary of State on categorization End of 2024 – publishing a register of categorized services Early to mid-2025 – codes of practice on fraudulent advertising and transparency notices

Compliance 52

Compliance Data protection 52

Technology Law Dispatch

FEBRUARY 23, 2023

Organisations operating in the defence, national security, public security, and law enforcement industries are expressly excluded. Next steps NIS2 must be transposed into EU member state national law by 17 October 2024. Member States must also establish a list of essential and important entities by 17 April 2025.

Data protection 52

Data protection Law Law 52

Percipient

JANUARY 23, 2025

By 2025, its expected that nearly half of all contract-related tasks will be handled by technology. This kind of solution is a great fit for businesses or law firms dealing with lots of agreements and needing a faster, more reliable way to get things donewithout sacrificing quality. But theres a better way. How Does It Work?

Time-tracking 52

Time-tracking Software Compliance Contract management 52

Debevoise Data Blog

OCTOBER 31, 2023

The UK’s Approach to AI Regulation As set out in the government’s white paper on AI , the UK, unlike the EU, does not intend to implement AI-specific laws or regulations. There is strong appetite for any future regulations to align with existing domestic and international laws and regulations.

Compliance 52

Compliance Due diligence Machine learning Data protection 52

Debevoise Data Blog

FEBRUARY 27, 2024

GDPR one-stop-shop: Businesses wishing to take advantage of the GDPR one-stop-shop system should take note of a new digest, published by the European Data Protection Board, which analyses the decisions made by so-called Lead Supervisory Authorities in this context.

Data protection 52

Data protection Compliance e-records Court 52

Technology Law Dispatch

APRIL 19, 2023

On 4 April 2023, the Personal Information Protection Commission of Japan (PPC) and European Commissioner for Justice issued a joint Press Statement on the conclusion of the first review of the Japan-EU Mutual Adequacy Decision.

Data protection 52

Data protection 52

Inside Privacy

JANUARY 29, 2024

332 (“the Act”), which was signed into law on January 16, 2024. The Act omits several exemptions present in other state comprehensive privacy laws, including exemptions for nonprofit organizations and information covered by the Family Educational Rights and Privacy Act. Below is a summary of key takeaways.

Data protection 61

Data protection Attorney Law Law 61

Debevoise Data Blog

JULY 9, 2021

Colorado has just adopted a brand-new data privacy law and Nevada has just significantly amended its law. further in the direction of European-style privacy law. This cure provision will expire on January 1, 2025. These changes add rights for consumers, and compliance obligations for businesses, that take the U.S.

Data protection 40

Data protection Attorney Compliance State law 40

Debevoise Data Blog

MAY 2, 2023

New York City’s Automated Employment Decision Tool Law (“NYC AEDT”) requires covered employers to perform annual independent bias audits and to post public summaries of those results.

Compliance 52

Compliance Time-tracking Data protection Law 52

Debevoise Data Blog

DECEMBER 17, 2023

If this timeline is met, the first provisions of the Act to come into force (the prohibition on “unacceptable risk” AI systems) will take effect in late 2024, followed by the requirements related to “high risk” systems in early 2025, and the remaining provisions in 2026. How to prepare. Conduct a preliminary review of current AI systems.

Data protection 64

Data protection Compliance Time-tracking Law 64

Debevoise Data Blog

JANUARY 16, 2025

DOJ cautioned that even anonymized data presents significant threats, as adversaries can analyze patterns of life, identify vulnerabilities within populations and extract broader insights for exploitation. company and its foreign subsidiaries and transactions required by federal law or international agreements.

Compliance 52

Compliance Due diligence e-records Time-tracking 52