The Irish Data Protection Commission (DPC) recently issued a hefty fine against TikTok Technology Limited due to its practices involving transferring personal data to the People’s Republic of China (PRC) through remote access of staff members and failing to meet data transfer-related transparency requirements.
The decision follows an investigation that found that, despite TikTok’s claims, it held personal data of ...
Legislatures around the world have enacted a number of laws relating to Artificial Intelligence.
A new Arkansas Act directly addresses the ownership of content and model training generated by generative Artificial Intelligence (AI) tools. It stipulates that the person providing input or directives owns the generated content, provided it does not infringe on existing copyrights or intellectual property (IP) rights. ...
The Supreme Court of the United States addressed the constitutionality of Texas House Bill 1181 (H.B. 1181), a law requiring certain commercial websites publishing sexually explicit content obscene to minors to verify visitors are eighteen or older. Petitioners, representing the pornography industry, argued the law was unconstitutional under the First Amendment’s Free Speech Clause, claiming it impermissibly hinders adults’ access ...
The Federal Trade Commission’s (FTC) Negative Option Rule (the “Click-to-Cancel”), which was designed to significantly impact businesses using online subscriptions, was vacated by the Circuit Court of Appeals for the Eighth Circuit, just a week before it was due to take effect.
The rule targeted negative option programs where a seller can interpret a consumer’s silence or failure to act ...
On July 14, 2025, the U.S. Federal Trade Commission is expected to begin the enforcement of the Click-to-Cancel Rule, which the FTC amended in 2024. The Rule’s primary purpose is to establish requirements for and prevent unfair or deceptive acts and practices in connection with a consumer’s silence or failure to act being considered as acceptance or continued acceptance of ...
The UK Data (Use and Access) Act 2025 (“DUAA” or “the Act”) received Royal Assent on June 19, 2025. This wide-ranging Act introduces significant changes to the UK’s existing data protection and privacy legislation. While it will not replace the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, or the Privacy and Electronic Communications (EC Directive) ...
New user? Click here to register