The European Commission published guidelines concerning the definition of “general-purpose AI models” (GPAI) under the AI Act and the scope of the Chapter V obligations imposed on providers of these models. The final...more
The EU Commission has adopted Directive (EU) 2024/2853, which implements a comprehensive overhaul of the 1985 Directive 85/374/EEC on defective product liability (“New PLD”). The new framework, which complements Regulation...more
6/17/2025
/ Artificial Intelligence ,
Consumer Protection Laws ,
Corporate Counsel ,
Digital Goods ,
EU Directive ,
Liability ,
Manufacturers ,
New Legislation ,
Product Defects ,
Regulatory Reform ,
Software
A court in Hamburg, Germany, has decided a copyright infringement case in a way that sheds light on how European courts may apply the text and data mining (TDM) exemption to AI model developers. The exemption is contained in...more
The EU AI Act grants the European Commission new investigative and enforcement powers over providers of some AI technologies, including general-purpose AI models such as generative AI products. The Commission has previously...more
From 24 April, 2023, victims of cyber-attacks (as defined by the Criminal Code in italic text below) will have 72 hours to file a complaint with “competent authorities” if they want to obtain reimbursement under their...more
Update: UK international data transfer agreement and UK addendum to the EU standard contractual clauses now in force In February, the Information Commissioner’s Office (“ICO”), the United Kingdom (UK) data protection...more
In February 2022, the United Kingdom (UK) Information Commissioner’s Office (“ICO”), along with the data protection authority (“DPA”) in the UK, published three new documents ("UK Documents") which update the UK's position on...more
The Austrian data protection authority (Österreichische Datenschutzbehörde; Austrian DPA) recently ruled that the use of Google Analytics violated Chapter V (transfers of personal data to third parties) of the EU General Data...more
2/3/2022
/ Australia ,
Corporate Counsel ,
Court of Justice of the European Union (CJEU) ,
Cybersecurity ,
Data Protection ,
Data Protection Authority ,
EU ,
General Data Protection Regulation (GDPR) ,
Google ,
International Data Transfers ,
Schrems I & Schrems II
On November 19, 2021, the European Data Protection Board (“EDPB”) issued draft guidance on the interplay between Article 3 of the General Data Protection Regulation (“GDPR”) and the provisions on international transfers...more