Companies should be ready to comply with European AI regulations because the EU AI Act will influence U.S. regulation just as the GDPR did, attorneys at Marashlian & Donahue said during a Tuesday webinar.
GDPR
The General Data Protection Regulation (GDPR) is the European Union’s landmark privacy law governing how organizations collect, process and protect personal data. In effect since 2018 it applies to any entity handling EU residents’ information regardless of where the company is based and imposes strict requirements around consent, transparency, data minimization and user rights. GDPR enforcement has led to billions in fines against global companies setting a high bar for compliance frameworks worldwide and influencing privacy legislation in the U.S. and other regions.
With targeted political advertising in Europe now governed by new rules that complement the GDPR, French watchdog CNIL published practical guides Tuesday to make sure that data processing done in the course of political communications is privacy-compliant.
The European Parliament voted 533-43 to back rules to speed up cross-border GDPR enforcement, it announced Tuesday.
Emphasizing fundamentals and ensuring staff working with AI understand its risks are keys to protecting privacy, said panelists at a privacy risk event Tuesday. Later, another panel emphasized issues surrounding compliance with global rules that regulate AI. DataGrail, a compliance vendor, sponsored the event.
Higher education institutions face new data security challenges, including increased “global regulatory requirements on data privacy,” JacksonLewis attorneys blogged Friday.
The job applicant at the center of a German GDPR case decided in June was seeking an administrative position at the law school (see 2510100030).
French DPA CNIL will host a GDPR Day on Dec. 9 in Nantes, it announced Monday. Aimed at professionals, academics and students, the event will focus on updates in data protection, tools for data protection officers, CNIL audits and cybersecurity.
Most changes to the U.K.'s data protection regime will ease data flows between the U.K. and EU, but some should be clarified and monitored, the European Data Protection Board (EDPB) said Monday.
Whether age-gating measures truly protect children online or just raise other legal concerns is unclear, speakers said during Hogan Lovells' The Data Chronicles podcast Thursday, which focused on age assurance in the U.S. and U.K.
European DPAs will focus their next coordinated enforcement action on compliance with the GDPR's transparency and information requirements, the European Data Protection Board (EDPB) announced Tuesday. The push will launch in 2026.