Legal Update European UnionCross-Border
The European Data Protection Board (EDPB) has adopted a statement supporting the use of Council of Europe and Ibero-American Data Protection Network model contractual clauses for onward transfers of personal data received under EU…
Legal Update European UnionCross-Border
On 10 November 2026, the European Data Protection Board adopted a statement approving South Korea's four-year adequacy review cycle, published final recommendations for Binding Corporate Rules for Processors (BCR-P), and selected AI-assisted recruitment as…
Legal Update European UnionCross-Border
The European Data Protection Board has adopted a statement agreeing to a four-year review cycle for the Republic of Korea's adequacy decision, published final recommendations on Processor Binding Corporate Rules, and chosen automated decision-making…
Legal Update China Hong Kong SAR
The Hong Kong SAR Government has announced plans to reduce the pre-paid SIM card limit for individual users from 10 to three per provider and introduce criminal offences for improper SIM card registration and…
Legal Update China Hong Kong SAR
Hong Kong's Innovation, Technology and Industry Bureau responded to a Legislative Council inquiry regarding enterprise AI safety, highlighting progress under the Secure AI@Work Enablement Campaign and outlining upcoming regulatory guidelines and SME support programs.
Legal Update European Union
The Italian Data Protection Authority fined Poste Italiane and Deutsche Bank a total of EUR 81,000 for failing to provide clear and complete privacy notices regarding personal data exchanges and independent data controller roles…
Legal Update European Union
The Italian Data Protection Authority has imposed an administrative fine of EUR 5 000 on clothing company Barbuti S.p.A. and issued a compliance order after the company failed to handle an erasure request sent…
Legal Update European Union
The French Data Protection Authority (CNIL) has imposed ten financial sanctions ranging from €3,000 to €20,000 on French local authorities and a public institution following 2025 audits that revealed critical cybersecurity defects and failures…
Explained China Hong Kong SAR
In response to a Legislative Council inquiry, the Secretary for Environment and Ecology outlined Hong Kong SAR's statutory framework for controlling vehicle noise, the trial status of the Artificial Intelligence on Modified Exhaust Recognition…
Explained China Hong Kong SAR
At the International Bio-Computing Innovation Summit 2026, Hong Kong Financial Secretary Paul Chan outlined initiatives to reduce drug development costs, including establishing the Hong Kong Centre for Medical Products Regulation and facilitating cross-border data…
Legal Update European Union
The French Data Protection Authority (CNIL) published the agenda for its plenary session held on 5 November 2026. The meeting covered GDPR Article 22 automated decisions, agentic AI, AI in healthcare, criminal biometric databases,…
Legal Update European UnionCross-Border
The European Data Protection Board (EDPB) has introduced 'Privacy for Kids', a centralized educational resource hub designed to help parents, teachers, and educators navigate online privacy for minors. The platform aggregates games, videos, quizzes,…