My Content
Insights

EDPB Issues Opinions on UK Data Protection Adequacy Decisions

The European Data Protection Board (EDPB) has adopted opinions on the European Commission’s draft decisions to extend the UK’s data protection adequacy under both the GDPR and the Law Enforcement Directive (LED) until December 2031. The current adequacy decisions are set to expire next month.

The extension is crucial because it allows organizations and law enforcement authorities in the European ...

European Court Says U.S. Data Transfer Framework Remains Valid for Now

The European Union’s General Court (a lower court under the Court of Justice) dismissed an action to invalidate the European Commission’s Implementing Decision (EU) 2023/1795, which established the new EU-US Data Privacy Framework. The General Court’s decision affirmed that the Commission’s finding of an adequate level of protection for personal data transferred to the United States was lawful.

The General ...

Italy Sets European Precedent by Enacting a New AI Law

On September 17, 2025, the Italian Senate approved a law on Provisions and Delegations to the Government Regarding Artificial Intelligence. The legislation promotes the correct, transparent, and responsible use of AI in Italy, prioritizing the human dimension. It aims to ensure vigilance over the economic and social risks associated with AI and its impact on fundamental rights. The provisions are ...

California Expands Data Broker Law

On October 8, 2025, Governor Gavin Newsom signed into law a bill amending California’s data broker registration law with new disclosure requirements for data brokers. The Governor describes the bill as part of a broader agenda that focuses on consumer protection and provides consumers greater control over their data. The amendment will take effect on January 1, 2026.

The key ...

California Bills on Privacy and AI-Decision Making Sent for Governor Approval

A new bill in California would prohibit businesses from developing or maintaining an Internet browser unless it includes functionality configurable by the user that enables the browser to send an opt-out preference signal. Under the California Privacy Protection Act and its implementing regulations, an opt-out preference signal is a technology tool that communicates the choice of a user of a ...

Chrome will not be Divested Despite Google’s Loss in U.S. Anti-Trust Lawsuit

The United States District Court for the District of Columbia has decided the remedies phase of the antitrust case that the U.S. federal government, along with numerous states in the U.S., asserted against Google LLC. The court adopted a comprehensive six-year remedy plan aimed at restoring competition in the monopolized general search services and general search text advertising markets.

The ...

Insights