Skip to content

menu

Data Protection Report logo
HomeAboutContact
Search
Close
Compliance and risk managementRegulatory responseData breachCybersecurity
View topics Archives
Subscribe

Data Protection Report

Data protection legal insight at the speed of technology

Privacy law

Subscribe to Privacy law via RSS
Motherboard Circuit Background. Virus detected over circuit board. Worm, cyber attack, antivirus, firewall alert and danger warning concept. Futuristic PCB. 3D render

Lessons on international transfers to the US to organisations caught by the GDPR

Photo of Jurriaan JansenPhoto of Naomi SchuitemaPhoto of Marcus Evans (UK)Photo of Rosie Nance
By Jurriaan Jansen, Naomi Schuitema, Marcus Evans (UK) & Rosie Nance on September 11, 2024

The Dutch data protection authority, the Autoriteit Persoonsgegevens (AP) announced a fine of €290 million on Uber Technologies Inc. (UTI) and Uber B.V.,(UBV) (together Uber) with press releases in Dutch and English.  The fine relates to the transfer of…

Digital jpg-AdobeStock_207493167

Recent regulatory developments in training AI models under the GDPR

Photo of Marcus Evans (UK)Photo of Rosie NancePhoto of Olivia Wint
By Marcus Evans (UK), Rosie Nance & Olivia Wint on August 22, 2024

In 2024, many organisations have been eager to look at how they can use the data they hold to debut or build on their artificial intelligence (AI) programme.  Many are looking to use that data to train AI models, or…

EDPB opines on the use of facial recognition in airports

Photo of Marcus Evans (UK)Photo of Shiv Daddar (UK)
By Marcus Evans (UK) & Shiv Daddar (UK) on July 18, 2024

Co-written by Swaathi Balajawahar, Trainee Solicitor

Introduction

On 23 May 2024, the European Data Protection Board (EDPB) issued Opinion 11/2024 on the use of facial recognition to streamline airport passengers’ flow (the Opinion). The Opinion considered the use of facial…

Minnesota enacts comprehensive privacy law

Photo of Susan Ross (US)Photo of David Kessler (US)Photo of Amelia Klitenic (US)Photo of Kelly Atherton (US)Photo of Rachel Cooper (US)
By Susan Ross (US), David Kessler (US), Amelia Klitenic (US), Kelly Atherton (US) & Rachel Cooper (US) on June 24, 2024

On May 24, 2024, the Minnesota Governor signed the Minnesota Consumer Data Privacy Act (“MCDPA”), making Minnesota the eighteenth state to enact a comprehensive privacy law.  The new law takes effect on July 31, 2025, for most regulated entities, with…

Subscribe to Data Protection Report

Subscribe to this publication

Executive Order on access to Americans’ bulk sensitive data and Attorney General proposed regulations – Part 2

Photo of Susan Ross (US)Photo of David Kessler (US)
By Susan Ross (US) & David Kessler (US) on March 7, 2024

Approximately at the same time as the Executive Order that we described in Part 1 was issued, the Attorney General (AG) unofficially released 90 pages of Advanced Notice of Proposed Rulemaking (ANPRM), which will become official once published in the…

Executive Order on access to Americans’ bulk sensitive data – Part 1

Photo of Susan Ross (US)Photo of David Kessler (US)
By Susan Ross (US) & David Kessler (US) on March 7, 2024

On February 28, 2024, the White House issued an Executive Order on Preventing Access to Americans’ Bulk Sensitive Data and United States Government-Related Data by Countries of Concern.  The 17-page Executive Order pointed out that “countries of concern” could use…

Digital jpg-AdobeStock_207493167

Singapore proposes Governance Framework for Generative AI

Photo of Marcus Evans (UK)Photo of Wilson AngPhoto of Jeremy LuaPhoto of Jeremiah Chew
By Marcus Evans (UK), Wilson Ang, Jeremy Lua & Jeremiah Chew on February 4, 2024

On 16 January 2024, Singapore’s Infocomm Media Development Authority (IMDA), in collaboration with the AI Verify Foundation, announced a public consultation on its draft Model AI Governance Framework for Generative AI (Draft GenAI Governance Framework), showing…

Motherboard Circuit Background. Virus detected over circuit board. Worm, cyber attack, antivirus, firewall alert and danger warning concept. Futuristic PCB. 3D render

Thailand – The Regulation with respect to Cross-border Transfer of Personal Data

Photo of Teerin VanikietiPhoto of Thanthiti Seneewong Na AyudhayaPhoto of Patcharapol Sudsakorn
By Teerin Vanikieti, Thanthiti Seneewong Na Ayudhaya & Patcharapol Sudsakorn on January 16, 2024

On 25 December 2023, the Personal Data Protection Committee (PDPC) published two notifications detailing regulations for cross-border transfers of personal data under Sections 28 and 29 (Notifications) of the Personal Data Protection Act B.E. 2562 (2019)…

ICYMI –December in privacy and cybersecurity

Photo of Susan Ross (US)Photo of David Kessler (US)
By Susan Ross (US) & David Kessler (US) on January 4, 2024

December tends to be a busy time for everyone, so you may have missed a privacy update or two.  We have set out some updates in the form of questions, with links in the answers where you can find more…

AI

California proposes rules for automated decision-making

Photo of Susan Ross (US)Photo of David Kessler (US)Photo of Gerar Mazarakis (US)
By Susan Ross (US), David Kessler (US) & Gerar Mazarakis (US) on November 29, 2023

On November 27, 2023, the California Privacy Protection Agency (“CPPA”) released a first draft of rules for automated decision-making technologies under California’s privacy law. The proposed rules revolve around providing notice of the technology’s use, opting out, and consumer access…

Post navigation

 Newer PostsOlder Posts 

Data Protection Report

Facebook Twitter RSS LinkedIn YouTube
Published by
Norton Rose Fulbright LLP logo
DisclaimerPrivacy policy

About

More than a news source, the Data Protection Report provides thought leadership on emerging privacy, data protection and cybersecurity issues, and helps its readers proactively address risks and anticipate next steps in this crucial emerging field.

Read more

Topics

Archives

Copyright © 2026, Norton Rose Fulbright LLP. All rights reserved.