Explained European Union
The European Commission published a legislative proposal for the EU KIDS Act on 17 September 2026, following debates across several EU Member States regarding minimum age limits for accessing social media platforms.
Legal Update European Union
The Hellenic Data Protection Authority fined the Greek Ministry of Social Cohesion and Family Affairs and its processor E.E.T.A.A. S.A. EUR 350,000 in total after outdated systems led to a major data breach compromising…
Legal Update European Union
The Swedish Data Protection Authority (IMY) has fined IT service provider Miljödata SEK 1 800 000 (approximately EUR 160 000) for breaching Article 32(1) GDPR after a cyberattack compromised the personal data of 2.2…
Legal Update European Union
The Dutch Autoriteit Persoonsgegevens fined Uber EUR 824 990 000 for using fully automated decisions to deactivate drivers' accounts and failing to adequately inform them about profiling under Articles 13 and 22 of the…
Legal Update European Union
The French Data Protection Authority (CNIL) has closed its compliance injunction against public employment agency France Travail after the organization satisfied all mandated technical and organizational data security requirements under Article 32 of the…
Explained Cross-Border Hong Kong SAR
The Hong Kong SAR Government has detailed the legal liabilities, statutory insurance protections, and enforcement mechanisms governing autonomous vehicles (AVs) and advanced driver assistance systems (ADAS), particularly regarding cross-border vehicles under the Southbound Travel…
Explained European UnionCross-Border
In a welcome address at the ESRB's tenth annual conference, ECB President Christine Lagarde detailed the systemic financial stability risks posed by artificial intelligence, focusing on market trading misalignment, cyber resilience, and geopolitical model…
Legal Update European Union
On September 17, 2026, the European Data Protection Board adopted draft guidelines establishing a five-step methodology for data protection authorities to impose administrative fines under the GDPR, alongside the final version of guidelines governing…
Explained European Union
Guidance from the French Data Protection Authority (CNIL) outlines the conditions under which victims of personal data breaches can obtain financial compensation under Article 82 GDPR and French law, highlighting the distinct roles of…
Legal Update European Union
The European Commission has registered a European Citizens' Initiative titled 'Creation of a European Digital Space (.IA) for Sovereign AI Governance'.
Legal Update European Union
The French Data Protection Authority (CNIL) imposed a EUR 500,000 fine on Hôpital Privé de la Loire for security deficiencies under Article 32 GDPR and failure to notify over 200,000 affected third parties under…
Legal Update China
The Cyberspace Administration of China has deployed a 'Qinglang' campaign targeting fake personas in short videos across five key areas, imposing stricter enforcement on content creators, MCNs, and video platforms.