European Court Says U.S. Data Transfer Framework Remains Valid for Now

The European Union’s General Court (a lower court under the Court of Justice) dismissed an action to invalidate the European Commission’s Implementing Decision (EU) 2023/1795, which established the new EU-US Data Privacy Framework. The General Court’s decision affirmed that the Commission’s finding of an adequate level of protection for personal data transferred to the United States was lawful.

The General ...

EU Commission Issues Hefty Fine Against Google and Threatens Divestment

The European Commission announced it had fined Google €2.95 billion for breaching EU antitrust rules. The Commission concluded that Google abused its dominant position by distorting competition in the online advertising technology (‘adtech’) industry. According to the EU Commission, this behavior harmed online publishers, competing adtech providers, advertisers, and consumers.

The European Commission’s investigation found that Google is dominant in ...

Chrome will not be Divested Despite Google’s Loss in U.S. Anti-Trust Lawsuit

The United States District Court for the District of Columbia has decided the remedies phase of the antitrust case that the U.S. federal government, along with numerous states in the U.S., asserted against Google LLC. The court adopted a comprehensive six-year remedy plan aimed at restoring competition in the monopolized general search services and general search text advertising markets.

The ...

Draft Guidelines on the Interplay between the GDPR and the EU Digital Services Act

The European Data Protection Board (EDPB) issued its draft guidelines (for public comments) on the interplay between the Digital Services Act (DSA) and the GDPR. The guidelines underscore that the DSA is without prejudice to the GDPR and does not derogate from the general rules on personal data processing, requiring consistent and coherent application of both frameworks.

The draft guidelines ...

New Copyright Claims Against AI Providers as Anthropic Settles for $1.5 Billion

Recent legal filings highlight ongoing conflicts between generative AI companies and content creators over copyrighted material.

A proposed class action settlement in Bartz v. Anthropic PBC addresses Anthropic’s alleged large-scale copyright infringement for torrenting and commercially exploiting books obtained from pirated datasets, specifically Library Genesis (LibGen) and Pirate Library Mirror (PiLiMi), to train Anthropic’s Large Language Models (LLMs). The settlement, ...

Italy Sets European Precedent by Enacting a New AI Law

On September 17, 2025, the Italian Senate approved a law on Provisions and Delegations to the Government Regarding Artificial Intelligence. The legislation promotes the correct, transparent, and responsible use of AI in Italy, prioritizing the human dimension. It aims to ensure vigilance over the economic and social risks associated with AI and its impact on fundamental rights. The provisions are ...

Kmart Australia Violated Privacy Act with Facial Recognition in Retail Stores

The Australian Information Commissioner (AIC), Carly Kind, found that Kmart Australia Limited interfered with individuals’ privacy by using a Facial Recognition Technology (FRT) system in 28 retail stores between June 2020 and July 2022 to detect and prevent store refund fraud.

The Commissioner substantiated multiple breaches of the Australian Privacy Act 1988:

  1. Kmart collected the sensitive information of all individuals ...

Europe’s Top Court Clarifies the Boundaries of Non-Personal Data

The Court of Justice of the European Union (CJEU), in its judgment of an appeal brought by the European Data Protection Supervisor (EDPS), considered whether public comments and unique alphanumeric codes constituted personal data.

The issue was reviewed under the regulation governing the processing of personal data by EU institutions, which is the equivalent of the GDPR that applies to ...