Matt Fleischer-Black reported on the EU AI Act for Cybersecurity Law Report in a 3-part series available here (paywall access required). This detailed review summarizes the overview and procedural history of the EU AI Act, and then...

Enacted in 2022 and already partially in effect, the European Union’s (EU) Digital Services Act (“DSA”) will come fully into force on February 17, expanding the obligations of a broad range of online service providers doing business in...

The EU has once again beaten the rest of the world to the regulatory punch, this time on artificial intelligence. After six months of negotiations, the European Commission, the European Council, and the European Parliament have...

On Monday, July 17, 2023, the Department of Commerce launched a new website at https://www.dataprivacyframework.gov/s/ (“DPF Website”) providing more information about the new Data Privacy Framework covering EU, Swiss, and UK data transfers to the United States...

On July 10, 2023, the European Commission (“EC”) adopted its adequacy decision for the EU-U.S. Data Privacy Framework (“DPF”), ushering in a new era of transatlantic data flows. Key points: Adequacy Decision  The adequacy decision finds that,...

On December 13, 2022, the European Commission (the “Commission”) released a draft adequacy decision for the EU-U.S. Data Privacy Framework (“Framework”). The draft decision proposes the Framework as a new transfer mechanism for EU-U.S. data flows...

Today, the U.S. took a giant step toward resolving the “Schrems II” EU data transfer problem, possibly allowing the United States to earn a partial adequacy determination from the European Commission early next year. President...

On July 6, 2021, the European Parliament approved legislation allowing online service providers to continue scanning their services for child sexual abuse material (CSAM). The legislation creates a temporary exemption from provisions of Directive 2002/58/EC (the ePrivacy...

On March 21, 2019, Advocate General Maciej Szpunar (“Advocate General” or “AG”) of the Court of Justice of the European Union (“CJEU”) issued an opinion in which he recommended that the Court rule that pre-checked boxes...

The EU’s highest court may be poised to allow Google and other search engines to honor most right-to-be-forgotten requests in a way that impacts only searches from within the EU, i.e., without affecting results for...