The U.S. Federal Bureau of Investigation has published the FBI Cyber Strategy, which “provides a roadmap for defending the American people and the nation’s critical infrastructure in cyberspace.” This blog provides an overview of the key pillars: okt.to/pxg1tU

Illinois Governor JB Pritzker has signed into law SB 315, a frontier model safety act. We discuss the key provisions: okt.to/EgQ8ze

The European Commission has published draft guidelines on the implementation of the transparency obligations under Article 50 of the EU AI Act,” opening a targeted consultation that runs until June 3, 2026. We summarize 10 takeaways: okt.to/cRXUuo

The UK Government plans to ban social media access for under-16s, alongside broader restrictions on features deemed harmful to children, marking another major shift in the UK’s online safety rules. Read the latest developments: okt.to/iMXpJw

The European Commission’s Digital Omnibus Legislative Package introduces sweeping changes that will reshape privacy and cybersecurity compliance across the EU. Join us to unpack what’s changing. Register now: okt.to/96gHYN

The European Commission has officially presented its Digital Omnibus Package, which represents a comprehensive update to the EU’s digital regulatory landscape. This blog summarizes the key proposals: okt.to/sK5O96

Brazil has enacted the Digital Statute of the Child and Adolescent, establishing a pioneering regulatory framework for protecting children and adolescents online. In this blog we discuss scope and definitions: okt.to/QgGfCK

The European Parliament has published a study entitled Artificial Intelligence and Civil Liability – A European Perspective. We discuss the study's key findings and proposals: okt.to/mtAcKa

The Court of Justice of the European Union has issued a ruling that clarifies the definition of personal data in the context of transfer of pseudonymized data to third parties. We provide an overview of the Court’s key findings: okt.to/GXT1Rj

In May 2025, the Court of Justice of the EU ruled on five cases applying EU consumer protection law. This blog provides an overview of the decisions: okt.to/Ih1wUG

The European Commission has published a Q&A on the AI literacy obligation under Article 4 of the AI Act. We discuss the key considerations: insideprivacy.com/artificial…

The European Commission has confirmed that it is considering simplifying the GDPR with a view to reducing the burden on smaller businesses. Read more: okt.to/l5Cp1A

The Norwegian Consumer Council asked the Norwegian Supervisory Authority to investigate a payment app provider for using consumers’ purchase history for targeted advertising. Read more: okt.to/MWhzSL

The Court of Justice of the European Union has issued a decision on the GDPR’s lawfulness and data minimization principles. We discuss the case and its implications: okt.to/f2SrFY

The European Commission published an action plan on the #cybersecurity of hospitals and healthcare providers, which sets out a series of EU-level actions intended to better protect the healthcare sector from cyber threats: okt.to/9mFeDq

In the final quarter of 2024, there have been significant developments in the EU cybersecurity legal landscape. We provide a summary: okt.to/iRjryq

The New York Department of Financial Services has issued an industry letter highlighting the cybersecurity risks arising from the use of artificial intelligence and providing strategies to address these risks. Here's what you should know: okt.to/pI217M

There have been significant developments relating to the “legitimate interests” legal basis under Article 6(1)(f) of the #GDPR. We set out five key takeaways: okt.to/IkENLw

The U.S. Department of Health and Human Services, Office for Civil Rights has announced that it had settled its cybersecurity investigation with Cascade Eye and Skin Centers, P.C., concerning a #ransomware attack. Read more: okt.to/Fb5yq3 #cybersecurity

The European Commission has announced that it will launch a public consultation on additional standard contractual clauses for international transfers of personal data to non-EU controllers and processors that are subject to the #GDPR extra-territorially: okt.to/2Th5QU