AI – the threats it poses to reputation, privacy and cyber security, and some practical solutions to combating those threats
Disclaimer: This article was written with the help of AI but also by Michael Yates, Andi Terziu and Alisha Persaud.
More
Cyber security – weathering the cyber storms
With AI helping to exacerbate cyber threats, legislators in the EU and UK are acting to stem the tide. Significant legislation is either newly in place or on the horizon, and complying with new obligations while preparing for or handling cyber incidents is becoming increasingly challenging. In this edition, we look at the impact of AI on the cyber threat landscape and how to mange risks. We also look at relevant legislative developments (including relating to the UK's PSTIA and the EU's AI Act, revised PLD, DORA and NIS2 implementation). We're nothing if not a full service law firm so we cover how to prepare for and weather the emotional fallout of a cyber attack – it's all part of the service.
Withstanding the cyber storm – the vital importance of emotional and institutional resilience for victims of cyber crime
Jo Joyce provides legal and emotional counsel to those who've suffered or may suffer a cyber attack.
MoreIoT and new EU cyber security obligations and liabilities
Martijn Loth and Dominique Lensink look at incoming EU cyber security rules for connected devices.
MoreNew rules for security of connected products in the UK and EU
Prachi Vasisht and Debbie Heywood compare the UK's Product Security and Telecommunications Infrastructure Act with the EU's draft Cyber Resilience Act.
MoreHow will the EU's DORA impact UK businesses?
Nicholas Crossland and Charlotte Witherington look at what the EU's Digital Operational Resilience Act means for UK businesses and at similar UK initiatives.
MoreNIS 2 Implementation and Cybersecurity Strengthening Act: Germany tightens IT security requirements
Paul Voigt and Alexander Schmalenberger look at Germany's progress on NIS2 implementation.
MoreChildren's data and online harms
Facial recognition technology, biometrics and monitoring
Financial data
AI and data - what does the UKs approach to regulating AI mean in the context of data protection and cyber security?
International update 2023
Digital advertising and data privacy
GDPR enforcement
Cyber security
The UK's Data Protection and Digital Information Bill
Managing HR data
Managing HR data is an ongoing exercise for employers. We look at data protection requirements for HR data in light of current and incoming law and in the context of recent developments, covering SARs, the EU Whistleblowing Directive, employee monitoring and data breaches as well as top tips for employers.
MoreData sharing
Data exports continue to be high on the agenda but data sharing (of personal and non-personal data) is being looked at much more widely by the EU and the UK in the context of providing individuals with control over their data, opening up the potential of big data, and breaking down barriers to competition. We look at incoming EU legislation relating to data sharing with particular focus on the draft Data Act, as well as at the ICO's Code of Practice on Data Sharing, Privacy Shield 2.0 and data sharing requirements for the UK's Pensions Dashboard.
MoreHealth data – getting the right balance between innovation and data protection
Personal health data attracts special protection but also benefits from exemptions under UK and EU data protection law. Have legislators and regulators got the balance between innovation and privacy right or do the rules overly restrict advances in healthcare provision and research?
MoreData protection, freedom of expression, journalism and the media
We look at the UK's implementation of the GDPR journalistic exemption, at the ICO's recently published draft Code of Practice on journalism, the use of data protection law in media cases, and at the tensions between the right to privacy and to freedom of expression.
MoreInternational update – it's not all about GDPR
Update
Data transfers – a clearer picture?
Data breaches
Data exports
UK and EU data policy
Health data
Data transfers after Schrems II and Brexit transition
HR data: an update
Processing personal data associated with the COVID-19 pandemic
Data protection by design and default
Digital Legislation Tracker
To help you stay on top of developments we've built a high-level legislation tracker looking at areas relevant to digital businesses across the EU, UK and Germany.
Access Tracker
Webinars
Our international team of experts discuss key data privacy issues and developments. Listen to our latest webinars and access our full library.
View recordingsTools
Digital Legislation Tracker SCC generator Draft EU ePrivacy Regulation – preliminary guidance and commentaryInsights by sector & service
GDPR compliance Cyber security & data breaches Data governance HR data Health data Data exports New digital products & data Policy agreements & transactions Data subject rights Dealing with DPAs ePrivacy (cookies) Marketing & dataInsights by location
China England & Wales EU France Germany UAEAll insights
Global Data Hub - Health data
Click here to find out more
Updating the Caldicott Principles
Sally Annereau looks at the proposed changes to the Caldicott Principles which aim to maintain future relevance
1 December 2020
5 of 5 Insights
Global Data Hub - Health data
Click here to find out more
Medical devices in the UK – the data protection angle
Mary Rendle looks at the regulatory framework for medical devices processing NHS health data.
1 December 2020
by Mary Rendle
1 of 5 Insights
Global Data Hub - Data transfers after Schrems II and Brexit transition
Click here to find out more
Schrems II – what next for data transfers?
Vin Bange and Debbie Heywood look at the impact of the Schrems II decision on the future of international data transfers, particularly from the EEA and the UK to the USA.
30 October 2020
3 of 4 Insights
Global Data Hub - Data transfers after Schrems II and Brexit transition
Click here to find out more
Data flows to and from the UK after the end of Brexit transition
Debbie Heywood looks at the impact of the end of the Brexit transition period on data transfers to and from the UK.
30 October 2020
1 of 4 Insights
Global Data Hub - Data transfers after Schrems II and Brexit transition
Click here to find out more
The future of Binding Corporate Rules after Schrems II and in light of Brexit
We re-examine the benefits of BCRs in the aftermath of Schrems II and ahead of the end of the Brexit transition period.
30 October 2020
4 of 4 Insights
Global Data Hub - Data transfers after Schrems II and Brexit transition
Click here to find out more
GDPR EU-Representative - For companies without EU establishments
Axel von dem Bussche and Paul Voigt look at the requirement on non-EU established organisations to appoint an EU representative under the GDPR.
30 October 2020
by Dr. Paul Voigt, Lic. en Derecho, CIPP/E and Dr. Axel Frhr. von dem Bussche, LL.M. (L.S.E.), CIPP/E
2 of 4 Insights
Global Data Hub - HR data
Click here to find out more
Employee monitoring in the context of COVID-19
Sally Annereau looks at issues to consider when contemplating return to work or remote work monitoring.
10 July 2020
2 of 6 Insights
Global Data Hub - HR data
Click here to find out more
Processing employee fingerprint data
Debbie Heywood looks at processing employee biometric data in light of a recent fine imposed by the Dutch Data Protection Authority.
10 July 2020
3 of 6 Insights
Global Data Hub - HR data
Click here to find out more
Consent and personal data in an employment setting
Elaine Fletcher and Mary Rendle look at the difficulties with using consent as a lawful basis for processing HR data and consider the alternatives.
10 July 2020
by Mary Rendle
1 of 6 Insights