Debevoise Data Blog

DECEMBER 22, 2023

For example, the Garante notes the need to incorporate data protection by design and by default principles within any AI systems used in the healthcare space. In particular, the paper recommends the use of internal data access controls, regular auditing of data security measures, and the use of data protection impact assessments.

Data protection 52

Data protection Time-tracking Compliance Machine learning 52

Debevoise Data Blog

NOVEMBER 21, 2023

Data protection & AI: In particular: (i) the French CNIL published its first set of guidance on GDPR compliance when developing AI tools; and (ii) the UK ICO issued a preliminary enforcement notice against Snap over its AI chatbot, alleging that Snap had not adequately assessed the privacy risks posed to child users of the tool.

Data protection 52

Data protection Compliance Failure-to-appear e-records 52

Debevoise Data Blog

MARCH 26, 2023

As multi-jurisdiction data protection concerns expand and opportunities to rely on a lead supervisory authority may narrow , the EDPB is emphasising consistency of decisions between national supervisory authorities through, among other measures, the development of approval procedures that require a cooperation phase and the creation of task forces.

Data protection 52

Data protection Compliance Court Law 52

Debevoise Data Blog

APRIL 14, 2025

Given that AI models require large swathes of data to operate, the GDPRs expansive definition of personal data means that many applications of AI involve complex data protection issues especially where those datasets are obtained from third-party sources.

Compliance 52

Compliance Due diligence Data protection Defendant 52

Legal IT Group

JANUARY 22, 2024

With this regard, it is essential to know about the privacy legislation of this country since, nowadays, most internet businesses process the personal data of their clients, and they should do it in compliance with data protection laws. ” Thus, the Australian Privacy Act also aims to have a GDPR level of data protection.

Data protection 130

Data protection Compliance Litigator Litigation 130

Legal IT Group

FEBRUARY 23, 2023

Introduction In our previous articles , we have already drawn your attention to the Brazilian data protection legislation which is quite similar to the General Data Protection Regulation (GDPR). Also, the company’s representative or the data protection officer may send this report on behalf of the data controller.

Data protection 130

Data protection Compliance e-filing Law 130

Legal IT Group

SEPTEMBER 29, 2023

Brazil’s Lei Geral de Proteção de Dados Pessoais (or LGPD), similar to GDPR, CCPA and PIPEDA, regulates personal data protection. If the company does not process personal data in Brazil but still processes data to offer or supply goods or services to Brazil, the LGPD also applies in this case. Apparently not.

Data protection 130

Data protection Compliance Court Law 130

Eric Goldman

MARCH 17, 2025

Last year, the Ninth Circuit struck down a key part of the AADC that required businesses to prepare Data Protection Impact Assessments (“DPIAs”) about their offerings and share those with the state AG. ” EVERY SEGREGATE-AND-SUPPRESS LAW DOES THIS BY DEFINITION. Newsom didn’t care.

Court 52

Court Data protection Judge Law 52

Legal Talk Network

MARCH 8, 2019

If you’re an aspiring author, you should definitely tune in. ABA TECHSHOW 2019: Trending: GDPR and Data Privacy Laws? Our #ABATECHShow coverage continues with a conversation about privacy and data. ABA TECHSHOW 2019: Get Your Mobile Ninja On – Top iOS Tips, Apps, and Gear.

Hearing 242

Hearing Judge Attorney Software 242

Legal IT Group

OCTOBER 24, 2023

The Attorney General has the right to file an administrative lawsuit against brokers who fail to register or violate the requirements of applicable personal information protection laws and to order them to pay appropriate fines and other costs. What to prepare for now?

Data protection 130

Data protection Federal law Attorney Lawsuit 130

Inside Privacy

JUNE 15, 2023

It would define consumer health data as “any personal data that a controller uses to identify a consumer’s physical or mental health condition or diagnosis, and includes, but is not limited to, gender-affirming health data and reproductive or sexual health data.” Consumer Health Data Requirements.

Data protection 119

Data protection 119

Inside Privacy

MAY 30, 2023

Under the Act, processors must assist controllers in meeting their obligations, including responding to consumer requests and conducting data protection assessments. The Act also requires controllers to implement opt-out preference signals by January 1, 2025.

Data protection 74

Data protection Attorney Law Law 74

Inside Privacy

APRIL 12, 2023

These requirements cover a wide range of issues that are frequently debated in relation to the governance of generative AI globally, such as data protection, non-discrimination, bias and the quality of training data. This blog post identifies a few highlights of the draft Measures.

Intellectual Property 138

Intellectual Property Data protection Law Law 138

Technology Law Dispatch

APRIL 18, 2023

The UK government advocates for AI that is “trustworthy”, with proportionate controls on sensitive technology, and with data used responsibly. ICO’s updated guidance on AI and Data Protection The ICO issued updated its guidance on AI and Data Protection following requests to clarify requirements for fairness in AI.

Data protection 59

Data protection Compliance 59

Technology Law Dispatch

NOVEMBER 8, 2023

There is more clarity on the views of the UK data protection authority on whether a “Reject All” option in the first layer of a cookie consent management solution is required. This is more likely be compliant with data protection law, as firms will be better placed to demonstrate that the user has a genuine free choice.“

Data protection 59

Data protection Compliance Court Law 59

Inside Privacy

JANUARY 4, 2024

In late December 2023, the Federal Communications Commission (“FCC”) published a Report and Order (“Order”) expanding the scope of the data breach notification rules (“Rules”) applicable to telecommunications carriers and interconnected VoIP (“iVoIP”) providers. state data breach notification laws, which have a similar good faith exceptions.

Data protection 79

Data protection Federal law State law Attorney 79

Inside Privacy

OCTOBER 13, 2023

The implementation of the AESIA will not replace the role currently played by the AEPD (Spain’s Supervisory Authority for data protection) with respect to AI. Covington’s Data Privacy and Cybersecurity Team regularly advises clients on the laws surrounding AI and we will continue to monitor developments in the field of AI.

Data protection 65

Data protection Law Law 65

Lawyerist

MARCH 2, 2023

This year, sites spanned Data Protection, Mergers & Acquisitions, Family Law, and Personal Injury, and more. Cybernetic Law Designer: G Digital Cybernetic Law definitely has its ideal client in mind with the design. The Best Law Firm Websites Contest of 2023 saw entrants from all over the world and practice areas.

Law firm 98

Law firm Law Law Data protection 98

Inside Privacy

APRIL 18, 2023

5 limits its definition of “profiling” to “solely automated processing.” Sensitive Data: Controllers must obtain consent before processing a consumer’s sensitive data. Notably, S.B. identifies a consumer within a radius of 1,750 ft.). Controller & Processor Contracts: S.B. 5 uses the terms “controller” and “processor.”

Data protection 74

Data protection Attorney Law Law 74

Inside Privacy

NOVEMBER 8, 2023

On October 12, 2023 the Italian Data Protection Authority (“Garante”) published guidance on the use of AI in healthcare services (“Guidance”). Accountability, definition of roles and privacy by design and by default The Garante stresses the importance of the principles of privacy by design and by default, connected with accountability.

Data protection 65

Data protection Case law Law Law 65

Legal IT Group

JANUARY 30, 2023

Let’s talk about each of them: The first title describes the subject-matter of the regulation, the scope and the main definitions used in the text of the law. What will the AI Act regulate? Let us consider what the AI Act consists of. The proposed regulation contains 12 titles and 85 articles in them.

Data protection 130

Data protection Law Law Software 130

new tech law blog

MARCH 10, 2023

“Dark patterns” used by online platform providers have been controversial for some time, but recently there has been a growing buzz about them, in particular due to actions undertaken by EU and national data protection and consumer protection authorities. What are “dark patterns”?

Data protection 52

Data protection Compliance Law Law 52

3 Geeks and a Law Blog

JULY 11, 2023

And I think, really, really have to educate and continuously, you know, alert employees to this, you know, made sure there’s, you know, safe document destruction when data is done, you know, we all print out documents to read them as lawyers. So I definitely think data. I mentioned employee errors, but also insider threats.

Law firm 189

Law firm Time-tracking Due diligence Attorney 189

Debevoise Data Blog

NOVEMBER 22, 2022

The EU’s General Data Protection Regulation 2016 (the “GDPR”) changed the global privacy landscape, and has been called the “gold standard” for data protection regulation. When Are Data Protection Assessments Required? Recently, a number of U.S. Recently, a number of U.S.

Data protection 52

Data protection Law Law Compliance 52

Eric Goldman

OCTOBER 16, 2023

If you really care about the kids, shouldn’t the protections be ubiquitous? Because the AADC adopts the same definition of “business” as the CCPA/CPRA, this ruling highlights that any speech restrictions in those laws remain vulnerable to a constitutional attack. Means-Fit The law falls apart on the means-fit analysis.

Court 110

Court Failure-to-appear Data protection Judge 110

Inside Privacy

APRIL 24, 2023

For example, in October 2022, the Bank of England and Financial Conduct Authority (“FCA”) jointly released a Discussion Paper on Artificial Intelligence and Machine Learning considering how AI in financial services should be regulated and, in March 2023, the ICO updated its Guidance on AI and Data Protection.

Intellectual Property 69

Intellectual Property Data protection Machine learning Compliance 69

Inside Privacy

NOVEMBER 20, 2023

On November 16, 2023, the European Data Protection Board (“EDPB”) issued draft Guidelines 2/2023 on Technical Scope of Art. 5(3) of ePrivacy Directive (“Guidelines”). Article 5(3) is the provision that requires consent before storing or accessing information on an end user’s device.

Time-tracking 57

Time-tracking Data protection Software Law 57

Debevoise Data Blog

MARCH 4, 2021

state with a comprehensive privacy law, with Governor Ralph Northam’s signing of the Virginia Consumer Data Protection Act (“VCDPA”) on March 2, 2021. law in the direction of its overseas cousin, the European Union’s General Data Protection Regulation (“GDPR”). What data is covered by VCDPA? It also pulls U.S.

Data protection 52

Data protection Law Law Compliance 52

Bigfork Tech

JUNE 25, 2024

Single Sign-On (SSO) : Prioritizing security, ALOE integrates seamlessly with Single Sign-On (SSO) systems, enhancing data protection and user authentication processes. This feature ensures standardization across documents while saving time typically spent on repetitive drafting tasks. Why Choose ALOE?

Contract management 52

Contract management Time-tracking Software Data protection 52

Legal Tech Monitor

MAY 3, 2023

To truly safeguard our digital assets, we need to employ multiple layers of data protection But [having strong passwords] is not enough. Hackers are becoming more sophisticated in their tactics, and relying solely on passwords for protection is like leaving your front door unlocked in a high-crime area.

Lawyer 59

Lawyer Data protection Time-tracking 59

TechLaw Crossroads

MAY 3, 2023

To truly safeguard our digital assets, we need to employ multiple layers of data protection But [having strong passwords] is not enough. Hackers are becoming more sophisticated in their tactics, and relying solely on passwords for protection is like leaving your front door unlocked in a high-crime area. It’s just an illusion.

Lawyer 59

Lawyer Data protection Time-tracking 59

Debevoise Data Blog

OCTOBER 31, 2023

Seven Takeaways from the Response Paper The definition of AI is a key gating question. The definition of “artificial intelligence” has been a contentious point in multiple AI legislative processes – including the draft EU AI Act – and it appears that the UK Financial Authorities could face similar challenges.

Compliance 52

Compliance Due diligence Machine learning Data protection 52

Debevoise Data Blog

FEBRUARY 6, 2023

Under ColoPA, “publicly available” information is excluded from its definition of personal data. We recently noted this provision echoes similar consent requirements in the General Data Protection Regulation (“GDPR”). Additionally, consumers must be able to withdraw consent at any given time. Dark Patterns Forbidden.

Hearing 52

Hearing Data protection Law Law 52

Debevoise Data Blog

APRIL 29, 2022

In prior posts, we have written about the evolving state privacy law landscape, including how to prepare for state privacy laws coming into effect in 2023 here ; various aspects of the CCPA and CPRA, including here and here ; and the Virginia Consumer Data Protection Act (“VCDPA”) here. UCPA § 13-61-103(31)(b)(iii).

Law 52

Law Law Data protection Attorney 52

Debevoise Data Blog

SEPTEMBER 19, 2022

Governor Newsom stated that he is “thankful to Assemblymembers Wicks and Cunningham and the tech industry for pushing these protections and putting the wellbeing of our kids first.” Notable affirmative obligations include: Data Protection Impact Assessments (“DPIAs”). Definition of “Child” Under age 18. Under age 18.

Data protection 52

Data protection Compliance Time-tracking Attorney 52

Wisblawg

JANUARY 2, 2024

Microsoft recently announced that Copilot with commercial data protection will be available to all faculty and higher education students ages 18 and above. This looks especially intriguing for productivity improvement but at $30 per month is definitely not free.

Data protection 40

Data protection 40

Inside Privacy

MAY 15, 2023

3) Does the definition of “processing” provided in Article 4(2) GDPR cover a situation where personal data are used during the test phase of a mobile application? The definition of “processing” covers using personal data to test a mobile application.

Court 52

Court Data protection 52