The Maryland legislature passed the Maryland Online Data Privacy Act, making it the seventeenth state to enact comprehensive privacy legislation. This blog post summarizes the statute’s key takeaways: okt.to/oDGF1e #MODPA

The U.S. SEC has adopted amendments to Regulation S-P, which implements the Gramm-Leach Bliley Act for SEC-regulated entities such as broker-dealers, investment companies, registered investment advisers, and transfer agents. We look at the provisions: okt.to/BXf4Ls

The European Commission has published a draft Implementing Regulation under the EU’s revised Network and Information Systems Directive, This blog looks at the details: okt.to/cxOI7C #NIS2

The European Court of Justice has ruled that any button a consumer uses to order a service online must clearly indicate that the consumer commits to pay the price for the relevant service by affirmatively clicking on it. We look at the case: okt.to/cjiUtw

Minnesota and Rhode Island are the latest states to pass comprehensive privacy legislation, joining a number of states who have enacted similar laws. This blog post summarizes the statutes’ key takeaways: okt.to/PxYOBu

The European Commission has announced that it will launch a public consultation on additional standard contractual clauses for international transfers of personal data to non-EU controllers and processors that are subject to the #GDPR extra-territorially: okt.to/2Th5QU

The U.S. Department of Health and Human Services, Office for Civil Rights has announced that it had settled its cybersecurity investigation with Cascade Eye and Skin Centers, P.C., concerning a #ransomware attack. Read more: okt.to/Fb5yq3 #cybersecurity

There have been significant developments relating to the “legitimate interests” legal basis under Article 6(1)(f) of the #GDPR. We set out five key takeaways: okt.to/IkENLw

The New York Department of Financial Services has issued an industry letter highlighting the cybersecurity risks arising from the use of artificial intelligence and providing strategies to address these risks. Here's what you should know: okt.to/pI217M

In the final quarter of 2024, there have been significant developments in the EU cybersecurity legal landscape. We provide a summary: okt.to/iRjryq

The European Commission published an action plan on the #cybersecurity of hospitals and healthcare providers, which sets out a series of EU-level actions intended to better protect the healthcare sector from cyber threats: okt.to/9mFeDq

The Court of Justice of the European Union has issued a decision on the GDPR’s lawfulness and data minimization principles. We discuss the case and its implications: okt.to/f2SrFY

The European Commission has confirmed that it is considering simplifying the GDPR with a view to reducing the burden on smaller businesses. Read more: okt.to/l5Cp1A

The Norwegian Consumer Council asked the Norwegian Supervisory Authority to investigate a payment app provider for using consumers’ purchase history for targeted advertising. Read more: okt.to/MWhzSL

The European Commission has published a Q&A on the AI literacy obligation under Article 4 of the AI Act. We discuss the key considerations: insideprivacy.com/artificial-int…

In May 2025, the Court of Justice of the EU ruled on five cases applying EU consumer protection law. This blog provides an overview of the decisions: okt.to/Ih1wUG

The European Parliament has published a study entitled Artificial Intelligence and Civil Liability – A European Perspective. We discuss the study's key findings and proposals: okt.to/mtAcKa

The Court of Justice of the European Union has issued a ruling that clarifies the definition of personal data in the context of transfer of pseudonymized data to third parties. We provide an overview of the Court’s key findings: okt.to/GXT1Rj

Brazil has enacted the Digital Statute of the Child and Adolescent, establishing a pioneering regulatory framework for protecting children and adolescents online. In this blog we discuss scope and definitions: okt.to/QgGfCK

The European Commission has officially presented its Digital Omnibus Package, which represents a comprehensive update to the EU’s digital regulatory landscape. This blog summarizes the key proposals: okt.to/sK5O96