Published works by Rosie Nance

Published works

• Government consultation on new workplace monitoring technologies rules

  Global Workplace Insider · August 5, 2026

  LEX-WK-FB7B4XE0
• The EU AI Act – when does it become enforceable now?

  Data Protection Report · July 24, 2026

  LEX-WK-M3ZAF4QF
• Record €18m fine for an IT service provider to the aviation sector – reuse of customer data

  Data Protection Report · June 15, 2026

  LEX-WK-YXWPDC3D
• Is my use case a high-risk AI system? Applying the Commission’s guidelines and next steps

  Data Protection Report · May 22, 2026

  LEX-WK-FARATSKJ
• UK data protection complaints – new complaints handling obligations for controllers from 19 June

  Data Protection Report · April 27, 2026

  LEX-WK-R5KWVXD2
• Agentic AI: the ICO’s early thoughts on the data protection implications

  Data Protection Report · January 12, 2026

  LEX-WK-XCAMBK7K
• UK Cyber Security and Resilience Bill – new obligations for the data centre sector

  Data Protection Report · December 3, 2025

  LEX-WK-F3PTH7YP
• NIS Regulations Keeling Schedule for the Cyber Security and Resilience Bill – changes to the UK’s cyber security law

  Data Protection Report · December 3, 2025

  LEX-WK-GYN7QPHV
• Changes to EU and UK data protection law – a tale of two GDPRs?

  Data Protection Report · November 12, 2025

  LEX-WK-GYEGD9ZC
• Pseudonymised data could fall outside data protection law – introducing the “means reasonably likely” assessment

  Data Protection Report · September 4, 2025

  LEX-WK-DFGW4P4D
• Explain yourself: The legal requirements governing explainability

  Data Protection Report · August 28, 2025

  LEX-WK-65TAVG84
• UK data protection reform – what you need to know and do

  Data Protection Report · July 23, 2025

  LEX-WK-6J3EHMT6
• AI literacy – the Commission’s pointers on building your programme

  Data Protection Report · May 28, 2025

  LEX-WK-CZB8RJDX
• What do organisations need to disclose to individuals about AI and automated decisions?

  Data Protection Report · March 10, 2025

  LEX-WK-6EAW9ST4
• Prohibited practices under the AI Act: Answered and unanswered questions in the Commission’s guidelines

  Data Protection Report · March 5, 2025

  LEX-WK-6C0ZAAKA
• The Commission’s guidelines on AI systems – what can we infer?

  Data Protection Report · February 13, 2025

  LEX-WK-4F6H1Y4S
• CJEU Advocate General clarifies when pseudonymised data falls outside the definition of personal data

  Data Protection Report · February 10, 2025

  LEX-WK-QH9J594Y
• Online Safety Act: Protecting Children from Harmful Content Online – Ofcom’s Guidance on Age Assurance for Part 3 Services

  Data Protection Report · January 28, 2025

  LEX-WK-YQ091TJW
• The EDPB Opinion on training AI models using personal data and recent Garante fine – lawful deployment of LLMs

  Data Protection Report · January 2, 2025

  LEX-WK-75D4P76T
• China’s proposed AI Labelling Regulations: Key points

  Data Protection Report · October 30, 2024

  LEX-WK-1P09RE22
• Lessons on international transfers to the US to organisations caught by the GDPR

  Data Protection Report · September 11, 2024

  LEX-WK-VRNQJRZN
• Recent regulatory developments in training AI models under the GDPR

  Data Protection Report · August 22, 2024

  LEX-WK-4P0J1736
• The EU AI Act – the countdown begins

  Global Regulation Tomorrow · July 12, 2024

  LEX-WK-GDV9TS4C
• The EU AI Act – the countdown begins

  Data Protection Report · July 12, 2024

  LEX-WK-305EBTA9
• UK regulators’ strategic approaches to AI: a guide to key regulatory priorities for AI governance professionals

  Data Protection Report · May 24, 2024

  LEX-WK-W87YWQSF