During its January 2025 plenary meeting, the European Data Protection Board (EDPB) adopted guidelines on pseudonymisation, as well as a statement on the interplay of competition law and data protection. Pseudonymisation The GDPR refers to the term “pseudonymisation” as a safeguard that may be appropriate and effective to meet data protection obligations. The EDPB has…
The UK government has published its response to the House of Commons Science, Innovation and Technology Select Committee report on the governance of AI. It thanks the Committee for its report, and notes the conclusions and recommendations. It agrees with the Committee that AI-specific legislation is required. and says that it will shortly publish a…
UK law DBT and DCMS launch consultation on ticket resale price cap and calls for evidence on dynamic pricing The Department for Business and Trade and the Department for Culture, Media and Sport are consulting about measures to regulate the ticket resale market. The consultation proposes a cap on resale ticket prices, ranging from the…
The UK government has issued its response to the AI Opportunities Action Plan and has largely accepted its recommendations. Building sufficient, secure, and sustainable AI infrastructure The government is committed to building cutting-edge, secure, and sustainable AI infrastructure. It will take forward the recommendation to expand its sovereign compute capacity by at least twenty times…
Read More… from UK Government issues response to the AI Opportunities Action Plan
The UK government is consulting on proposals to protect hospitals, railways and public services from ransomware attacks. The NCSC managed 430 cyber incidents between September 2023 and August 2024, including 13 ransomware incidents which were deemed to be nationally significant and posed serious harm to essential services or the wider economy. Reporting to the National…
Read More… from UK government consults on proposals to protect businesses from cybercrime
In Bindl v Commission, an individual in Germany complained that the Commission had infringed his right to the protection of his personal data when, in 2021 and 2022, he visited a Commission website and registered using the Commission’s EU Login authentication service, having selected the option of signing in using his Facebook account. The individual…
The ICO has issued updated guidance about the use of storage and access technologies with the primary aim of giving regulatory certainty to organisations. It explains how the Privacy and Electronic Communications Regulations 2003 (as amended) (PECR) and where relevant, data protection law apply when organisations use technologies that store information, or access information stored,…
Read More… from ICO updates guidance on the use of storage and access technologies
UK law CMA enters into Memorandum of Understanding with Ofcom in relation to Digital Markets, Competition and Consumers Act 2024 The CMA has published a Memorandum of Understanding that it has entered into with Ofcom in relation to the digital markets competition regime in Part 1 of the Digital Markets, Competition and Consumers Act 2024….
The Competition and Markets Authority has set out its initial plans for the new digital markets competition regime. The Digital Markets, Competition and Consumers Act received Royal Assent in May 2024 and the new digital markets competition regime came into force on 1 January 2025. The CMA issued guidance about its substantive and procedural approach…
The UK government has announced that it intends to crack down on explicit deepfakes. It will introduce new offences covering both creating and sharing deepfake images. This reflects the government’s manifesto commitment to ban the creation of sexually explicit deepfakes as well as recommendations from the Law Commission relating to intimate images. The government will…
Read More… from UK government cracks down on explicit deepfakes