The European Accessibility Act (“EAA”) (Directive (EU) 2019/882) introduces new accessibility requirements that will apply to a wide range of products and services when they are accessible in the EU, aiming to enhance access...more
A recent update to EU consumer law will require many businesses selling online to offer a simpler, more accessible way for customers to cancel contracts within the standard 14-day cooling-off period....more
7/17/2025
/ Cancellation Rights ,
Consumer Contracts ,
Consumer Protection Laws ,
Contract Terms ,
Corporate Counsel ,
E-Commerce ,
EU ,
EU Directive ,
New Regulations ,
Regulatory Requirements ,
Websites
The EU AI Act (AI Act), effective since February 2025, introduces a risk-based regulatory framework for AI systems and a parallel regime for general-purpose AI (GPAI) models. It imposes obligations on various actors,...more
On June 26, 2025, the UK government brought into force the Public Interest Disclosure (Prescribed Persons) (Amendment) Order 2025 (the “2025 Amendment”), marking a notable development in the UK government’s sanctions...more
7/7/2025
/ Corporate Counsel ,
Disclosure Requirements ,
Economic Sanctions ,
Enforcement ,
Financial Institutions ,
HM Treasury ,
New Legislation ,
Reporting Requirements ,
UK ,
Whistleblower Protection Policies ,
Whistleblowers
On 23 June 2025, the UK government published its new Modern Industrial Strategy document (the “IS Document”), outlining the government’s current strategies for UK economic growth. The policy paper focuses on eight priority...more
The Judgment addressed joined insurance claims brought by major aircraft lessors whose aircraft and engines were stranded in Russia following the imposition of sweeping Western sanctions and Russian government measures which...more
The European Commission’s proposed amendments to the General Data Protection Regulation (GDPR) mark the first substantive reworking of the regulation since its enactment, signaling a material shift toward economic pragmatism....more
The CRA will affect a broad range of digital products placed on the EU market (including by those based outside the EU), including connected hardware/devices, software and remote data processing solutions. The EU has adopted...more
4/16/2025
/ Cybersecurity ,
Data Processors ,
Digital Operational Resilience Act (DORA) ,
Distributors ,
EU ,
General Data Protection Regulation (GDPR) ,
Hardware ,
Importers ,
Manufacturers ,
New Legislation ,
Popular ,
Regulatory Requirements ,
Risk Assessment ,
Software ,
Supply Chain
On February 24, 2025, the EU adopted its 16th package of sanctions against Russia, Belarus and non-government-controlled areas of Ukraine, symbolically marking the third anniversary of the start of Russia’s invasion of...more
3/11/2025
/ Belarus ,
Economic Sanctions ,
Energy Sector ,
EU ,
Export Controls ,
Exports ,
Financial Institutions ,
Imports ,
Popular ,
Russia ,
Trade Relations ,
UK
The UK’s Online Safety Act 2023 (OSA) is a comprehensive piece of legislation designed to regulate social media companies and search services and to increase protections for individuals online. It draws comparisons to the...more
2/19/2025
/ Data Privacy ,
Data Protection ,
Enforcement Actions ,
New Legislation ,
Online Platforms ,
Online Safety for Children ,
Risk Assessment ,
Risk Management ,
Social Media ,
Transparency ,
UK
The AI Action Summit brought together a wide-ranging assembly of influential figures to discuss the future of artificial intelligence (AI) governance, risk mitigation and international cooperation. The attendees included...more
2/17/2025
/ Artificial Intelligence ,
China ,
EU ,
Innovative Technology ,
International Trade ,
Investment ,
Machine Learning ,
Regulatory Agenda ,
Risk Management ,
Sustainability ,
Technology Sector ,
UK
The first binding obligations of the European Union’s landmark AI legislation, the EU AI Act (the Act), came into effect on February 2, 2025. Essentially, from this date, AI practices which present an unacceptable level of...more
2/4/2025
/ Artificial Intelligence ,
Biometric Information ,
Data Privacy ,
Data Protection ,
EU ,
European Data Protection Board (EDPB) ,
Facial Recognition Technology ,
General Data Protection Regulation (GDPR) ,
Privacy Laws ,
Regulatory Requirements ,
Risk Management
On January 16, 2025, the European Commission issued a recommendation encouraging EU Member States to begin reviewing outbound investments in critical technologies including AI, semiconductors and quantum technologies to...more
Earlier this week, the U.S. Office of Foreign Assets Control (OFAC) and the UK Office of Financial Sanctions Implementation (OFSI) published a Memorandum of Understanding (MoU), which was previously signed on October 9, 2024,...more
On December 16, 2024, the EU issued its 15th package of sanctions against Russia, new designations under the Belarus sanctions regime, and the first designations under the hybrid threats sanctions regime adopted in October...more
12/27/2024
/ Asset Freeze ,
Belarus ,
Belarus Sanctions ,
Economic Sanctions ,
Entity List ,
EU ,
Export Controls ,
Exports ,
Imports ,
Russia ,
Trade Restrictions ,
Ukraine
The NIS 2 Directive requires a wide range of in-scope organizations to adopt robust cybersecurity measures and incident response plans....more
11/5/2024
/ Compliance ,
Cyber Threats ,
Cybersecurity ,
Employee Training ,
Enforcement ,
EU ,
European Commission ,
Fines ,
General Data Protection Regulation (GDPR) ,
Incident Response Plans ,
Penalties ,
Reporting Requirements ,
Supply Chain
Recent decisions by the French data protection authority (CNIL) have highlighted the importance of GDPR compliance, particularly in the areas of data retention, consent for processing sensitive personal data, and marketing...more
10/15/2024
/ CNIL ,
Consent ,
Consumer Privacy Rights ,
Corporate Counsel ,
Data Breach ,
Data Privacy ,
Data Protection ,
Data Protection Authority ,
Data Retention ,
Enforcement Actions ,
EU ,
France ,
General Data Protection Regulation (GDPR) ,
Personal Data ,
Sensitive Personal Information
New UK enforcement body goes live and new powers granted to existing body, regulating those doing business in the UK.
UK trade sanctions enforcement risks are set to increase on October 10, 2024, as two government agencies...more
10/11/2024
/ Aviation Industry ,
Economic Sanctions ,
Enforcement ,
Export Controls ,
Financial Institutions ,
Financial Services Industry ,
HMRC ,
National Crime Agency (NCA) ,
Office of Financial Sanctions Implementation (OFSI) ,
Penalties ,
Reporting Requirements ,
Sanction Violations ,
Shipping ,
UK
On September 12, 2024, the UK government published the Trade, Aircraft and Shipping Sanctions (Civil Enforcement) Regulations 2024 (the “Regulations”), granting the UK’s trade sanctions enforcement body, the Office of Trade...more
In a landmark moment for global AI governance, the United States, European Union and United Kingdom have signed the Council of Europe’s framework convention on artificial intelligence and human rights, democracy, and the rule...more
9/17/2024
/ Artificial Intelligence ,
Ethics ,
EU ,
Human Rights ,
Innovative Technology ,
International Treaties ,
Machine Learning ,
Regulatory Agenda ,
Treaties ,
UK ,
United States
The agreed text of the AI Act was published on July 12, 2024, essentially starting the clock on the legal deadlines contained in it. Its obligations will apply in tiered phases, with the first key obligations being enforced...more
7/22/2024
/ Artificial Intelligence ,
Compliance ,
Corporate Counsel ,
Cybersecurity ,
Distributors ,
EU ,
Exemptions ,
Imports ,
Information Governance ,
Machine Learning ,
Manufacturers ,
Recordkeeping Requirements ,
Risk Assessment ,
Supply Chain
On 24 June 2024, the EU adopted its 14th package of sanctions against Russia. The latest measures include: The designation of 116 additional individuals and entities across a number of industries for their responsibility in...more
7/10/2024
/ Asset Freeze ,
Corporate Counsel ,
Economic Sanctions ,
Energy Sector ,
EU ,
Export Controls ,
Exports ,
Financial Services Industry ,
Foreign Policy ,
Importers ,
Imports ,
Natural Gas ,
Russia ,
Ukraine ,
Vessels
In light of the increasing organizational use of and reliance on software and the concerns raised regarding the malicious use of the same, the UK Government has published a response to its call for views on software...more
A new report issued in May 2024 by the Centre for European Policy Studies (CEPS), an independent thinktank, is the latest installment to cast concerns over the EU-U.S. Data Privacy Framework (DPF), predicting that it will...more
On April 30, 2024, the Department of State proposed an amendment to the International Traffic in Arms Regulations (ITAR) intended to facilitate exports of defense articles, the performance of defense services, and brokering...more
5/9/2024
/ AUKUS ,
Australia ,
Directorate of Defense Trade Controls (DDTC) ,
Exemptions ,
Export Controls ,
Exports ,
ITAR ,
Popular ,
Proposed Regulation ,
Proposed Rules ,
UK ,
US Department of State