My Content
Insights

U.S. Data Security Program Goes into Effect, Limiting Data Transfers

Starting April 8, 2025, organizations and individuals in the United States are required to comply with the U.S. Government’s Data Security Program, a legal framework intended to address the efforts of “foreign adversaries to access, exploit, and weaponize U.S. Government-related data”. The program is the regulatory implementation of a Biden-era executive order issued in February last year that has since ...

U.S. Courts Grapple with Constitutionality of State Laws Protecting Minors in Social-Media

As additional states in the U.S. advance legislation aimed at restricting minors’ use of social media, federal courts in the U.S. are increasingly confronted with the tension between these laws and the First Amendment of the Constitution.

Recently, the U.S. District Court for the Southern District of Ohio struck down the state’s social media Parental Notification Act, which was set ...

Norway’s Privacy Regulator Issues Fine for Organizational GDPR Breaches

Following an investigation prompted by anonymous tips, the Norwegian Data Protection Authority (Datatilsynet) found that Telenor ASA, a Norwegian telecommunications company, violated several GDPR requirements on organizational processes and structures. Datatilsynet ordered corrective measures be taken and imposed a fine of approximately $380,000.

The GDPR requires data controllers to implement specific organizational measures to mitigate data protection concerns and prevent ...

China Limits Commercial Facial Recognition Applications

The Cyberspace Administration of China (CAC), the internet regulator of the People’s Republic of China, recently issued regulations governing the use of facial recognition technology.

The new regulations prohibit businesses from forcing individuals to provide facial recognition identification, colloquially called “Face ID”, as a condition for receiving goods and services without freely given, informed consent. Businesses must instead provide alternative ...

Apple and Meta Hit with First Fines under EU Digital Markets Act

The European Commission recently found Apple and Meta (formerly Facebook) to violate the recently enacted EU Digital Markets Act (DMA), which regulates the digital market “gatekeepers” that provide services crucial for the digital markets.

The DMA places various obligations and prohibitions on the “gatekeepers” designed to ensure contestability. For example, gatekeepers must allow consumers to choose operating systems and software, ...

UAE To Be the World’s First Country to Use AI to Recommend Legislative Updates

The United Arab Emirates (UAE) recently announced the creation of a new “Regulatory Intelligence Office”, tasked with integrating the country’s legislative framework with judicial rulings, executive procedures, and public services, through the use of artificial intelligence.

According to the announcement, the office will deploy AI systems to analyze government data, track the societal and economic impacts of legal and regulatory ...

Insights