U.S. Court Says Google Is a Monopoly in Advertising Markets

The U.S. Federal District Court for the Eastern District of Virginia issued a Memorandum Opinion in the antitrust case brought by the United States and seventeen states against Google LLC. The Plaintiffs claimed Google monopolized digital advertising technology markets and unlawfully tied its products under the Sherman Act. After a three-week bench trial, the Court reached several key findings. The ...

U.S. Courts Grapple with Constitutionality of State Laws Protecting Minors in Social-Media

As additional states in the U.S. advance legislation aimed at restricting minors’ use of social media, federal courts in the U.S. are increasingly confronted with the tension between these laws and the First Amendment of the Constitution.

Recently, the U.S. District Court for the Southern District of Ohio struck down the state’s social media Parental Notification Act, which was set ...

U.S. Data Security Program Goes into Effect, Limiting Data Transfers

Starting April 8, 2025, organizations and individuals in the United States are required to comply with the U.S. Government’s Data Security Program, a legal framework intended to address the efforts of “foreign adversaries to access, exploit, and weaponize U.S. Government-related data”. The program is the regulatory implementation of a Biden-era executive order issued in February last year that has since ...

UAE To Be the World’s First Country to Use AI to Recommend Legislative Updates

The United Arab Emirates (UAE) recently announced the creation of a new “Regulatory Intelligence Office”, tasked with integrating the country’s legislative framework with judicial rulings, executive procedures, and public services, through the use of artificial intelligence.

According to the announcement, the office will deploy AI systems to analyze government data, track the societal and economic impacts of legal and regulatory ...

Norway’s Privacy Regulator Issues Fine for Organizational GDPR Breaches

Following an investigation prompted by anonymous tips, the Norwegian Data Protection Authority (Datatilsynet) found that Telenor ASA, a Norwegian telecommunications company, violated several GDPR requirements on organizational processes and structures. Datatilsynet ordered corrective measures be taken and imposed a fine of approximately $380,000.

The GDPR requires data controllers to implement specific organizational measures to mitigate data protection concerns and prevent ...

China Limits Commercial Facial Recognition Applications

The Cyberspace Administration of China (CAC), the internet regulator of the People’s Republic of China, recently issued regulations governing the use of facial recognition technology.

The new regulations prohibit businesses from forcing individuals to provide facial recognition identification, colloquially called “Face ID”, as a condition for receiving goods and services without freely given, informed consent. Businesses must instead provide alternative ...

Apple and Meta Hit with First Fines under EU Digital Markets Act

The European Commission recently found Apple and Meta (formerly Facebook) to violate the recently enacted EU Digital Markets Act (DMA), which regulates the digital market “gatekeepers” that provide services crucial for the digital markets.

The DMA places various obligations and prohibitions on the “gatekeepers” designed to ensure contestability. For example, gatekeepers must allow consumers to choose operating systems and software, ...

Virginia Governor Vetoes Regulation of High-Risk AI

Virginia was set to become the third U.S. state to legislate AI regulations, after Utah and Colorado, with its High-Risk Artificial Intelligence Developer and Deployer Bill. However, the Governor of Virginia vetoed the bill, and the Virginia Senate and House of Delegates may now attempt to override the veto with a supermajority vote, an unlikely outcome.

The bill followed similar ...