article thumbnail

European Data Protection Roundup – Q4 2024

Debevoise Data Blog

Our top-eleven European data protection developments for the end of 2024 are: EU Cyber Resilience Act: The Council of the European Union approved the Cyber Resilience Act , introducing cybersecurity requirements for digital products sold in the EU. The UK Upper Tribunal did not consider the provisions under the UK GDPR.

article thumbnail

New York Becomes First State to Mandate CLE in Cybersecurity, Privacy and Data Protection

LawSites

state to mandate that attorneys take continuing legal education courses in cybersecurity, privacy and data protection. New York has become the first U.S. The order creates two types of cybersecurity training, one focused on ethics and the other on practice.

professionals

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

European Data Protection Roundup – July 2024

Debevoise Data Blog

Building on prior European guidance , the French and Irish DPAs published guidance on the deployment of generative AI, large language models and data protection. To that end, the EDPB proposed designating DPAs as the “national competent authorities” under the AI Act to create a single point of contact.

article thumbnail

The UK Information Commissioner’s Data Protection Practioner’s Conference 2023 on Cybersecurity

Technology Law Dispatch

On 3 October 2023, the UK Information Commissioner’s Office organised its annual Data Protection Practioner’s Conference 2023 (DPPC 2023). Here are the takeaways from the DPPC 2023 (the event sessions available here ). This year its focus was on Cybersecurity – a topic that concerns organisations across the board.

article thumbnail

European Data Protection Roundup – March 2023

Debevoise Data Blog

UK ICO updates guidance to clarify requirements for fairness in AI What happened : The UK ICO has updated its existing Guidance on AI and data protection following requests from industry to clarify requirements for fairness in AI. Norwegian Data Protection Authority fines medical device company c.$240,000

article thumbnail

European Data Protection Roundup – August

Debevoise Data Blog

The court also struck out the claimant’s negligence claim on the grounds that: (i) case law has established that negligence cannot be pleaded alongside Data Protection Act claims; and (ii) “distress” does not constitute damage, as required for a successful negligence claim.

article thumbnail

European Data Protection Roundup – February 2021

Debevoise Data Blog

There were a few European data protection developments in February that companies may want to have on their radar. What to do: Nothing right now other than monitor progress and, in the unlikely event that the adequacy decision is not finalised, put in place an alternative transfer mechanism for EU-UK transfers.