On 7 July 2026, the European Data Protection Board (EDPB) adopted its draft Guidelines 02/2026 on Anonymisation for public consultation. The Guidelines provide long-awaited clarification on when data can truly be considered anonymous under the GDPR, updating the previous Article
Today, 17 July 2026, marks an important milestone under the EU’s Critical Entities Resilience Directive (CER), as Member States are required to identify and designate the entities considered “critical” for the provision of essential services.
Understanding the CER Directive
The
Hallmarks and hallmark moments
A piece of “family silver” often reveals its most important details on the underside. Tucked away on the back, there is often a row of small stamped symbols: a walking lion, a leopard’s head, or an
Deepfakes (AI-generated synthetic media capable of producing highly realistic images, audio, and video of real individuals) have graduated from a mere novelty to a genuine legal concern. Using neural networks trained on visual and audio data, deepfake systems can replicate
The United States Supreme Court’s decision in Trump v. Slaughter significantly alters the constitutional framework governing independent regulatory agencies and may have implications for transatlantic personal data transfers.
The six-to-three decision overturns Humphrey’s Executor v. United States, a 1935 case establishing
“Important data” is a concept unique to China law. It refers to data relating to specific topics, groups, or regions, or data that reaches a certain level of precision and scale, the tampering, destruction, leakage or illegal acquisition or use
For years, China’s cross-border data transfer regime was long on rules but short on consequences. Companies—both foreign and domestic—were given a relatively extended period to understand the requirements, formulate suitable strategies, and implement compliance measures. Recent enforcement actions led by
Artificial intelligence has quietly reshaped recruitment. From sourcing, screening to selection of candidates, AI tools promise speed and scale in an ever-globalised workforce landscape following the boom of remote work infrastructure. However, a recent intervention by a UK regulator has
On 12 May, Ofcom launched a consultation on proposed updates to its General statement of policy under section 105Y of the Communications Act 2003 (the “Statement of Policy”) in respect of how it will assess compliance by public telecommunications operators
