Ofcom consults on categorising regulated services under the Online Safety Bill

Ofcom is seeking evidence about the research that it will need to carry out to prepare its advice to the UK government on categorising regulation services under the Online Safety Bill. Once passed, the Online Safety Bill will require certain online services such as social media sites, messaging apps and search engines to identify risks…

Read More… from Ofcom consults on categorising regulated services under the Online Safety Bill

European Commission adopts new adequacy decision for EU-US data flows

The European Commission has adopted its adequacy decision for the EU-U.S. Data Privacy Framework. The decision concludes that the US ensures an adequate level of protection – comparable to that of the EU – for personal data transferred from the EU/EEA to US companies under the new framework. Under the adequacy decision, personal data can…

Read More… from European Commission adopts new adequacy decision for EU-US data flows

Communications and Digital Committee launches inquiry into large language models

The House of Lords Communications and Digital Select Committee is launching an inquiry that will examine large language models and measures needed over the next one to three years to ensure the UK can respond to their opportunities and risks. This will involve evaluating the work of government and regulators, examining how well this address…

Read More… from Communications and Digital Committee launches inquiry into large language models

European Commission adopts new rules on enforcement of the GDPR in cross-border cases

SCL readers will be aware that the GDPR is enforced by independent national data protection authorities (DPAs) as well as national courts. If cases affect data subjects in more than one member state, the GDPR’s “one-stop-shop” enforcement system applies. This means that the DPA where the entity under investigation is based conducts the investigation in…

Read More… from European Commission adopts new rules on enforcement of the GDPR in cross-border cases

CJEU rules that a national competition authority can find, when examining an abuse of a dominant position, that the GDPR has been infringed

The CJEU has issued its long-awaited decision in the case of Case C-252/21 | Meta Platforms and Others. Users of Facebook must accepts its terms of service, which refer to Meta Platforms’ data and cookies policies. Under those terms, Meta Platforms collects data from other Meta Platforms group services, such as Instagram and WhatsApp, as…

Read More… from CJEU rules that a national competition authority can find, when examining an abuse of a dominant position, that the GDPR has been infringed