Statute
GDPR
4,253 published works
Global IP & Technology Law Blog
New restriction to telephone canvassing in France: Updated
The original version of this post was first published on 21 July 2026. This updated post reflects changes since the original publication date Since 11 August 2026, the prior consent…
Privacy, Cyber & Data Strategy Blog
Belgian Data Protection Authority: EU Standard Contractual Clauses Are Invalid Without a Transfer Impact Assessment
On October 9, 2026, the Belgian Data Protection Authority (APD) issued a decision (available in French here) finding that a data exporter’s failure to conduct a Transfer Impact Assessment (TIA)…
The Landlord Law Blog
Landlords, online security and your data protection duties
Online security is not perhaps the first thing that most landlords will think about when managing their properties, but it is important. For example, you will normally hold the following…
IT Law Blog
Encryption and Key Protection: Does Encryption Exempt You from Security Incident Notification Obligations under the GDPR and CRA?
By Publisher
Encryption is one of the most fundamental technical measures that developers implement in a product. However, even where encryption and key protection are in place, a security incident or personal…
Data Privacy + Cybersecurity Insider
Assess the Business Risk of Using an AI Notetaker
AI notetakers are widely used by businesses in all industries. Although efficient, they pose privacy and cybersecurity risks, including lax compliance with established privacy and security frameworks such as GDPR…
Global Workplace Insider
GDPR: Limits on access requests made for improper purposes
By Claudia Posluschny, Frank Weberndörfer
A personal data access request may be refused and regarded as abusive where it is made solely with the intention of claiming damages for an alleged infringement of the General…
Global Workplace Insider
DSGVO: Grenzen des Auskunftsanspruchs bei zweckwidriger Inanspruchnahme
By Claudia Posluschny, Frank Weberndörfer
Ein Antrag auf Auskunft über die eigenen personenbezogenen Daten kann als missbräuchlich eingestuft und zurückgewiesen werden, wenn er allein in der Absicht gestellt wird, anschließend Schadensersatz wegen eines angeblichen Verstoßes…
BioSlice Blog
Virtual and Digital Health Digest – October 2026
By Alexander Roussanov, Fabien Roy, James Castro-Edwards, Emma Elliston, Sofia Holmquist, Ana Gonzalez-Lamuno, Heba Jalil
Welcome to the latest installment of Arnold & Porter’s Virtual and Digital Health digest. This digest covers key virtual and digital health regulatory and public policy developments during September 2026 from the EU…
Debevoise & Pimpton Data Blog
The EU KIDS Act: New Rules Proposed for Children’s Online Safety
The European Commission has proposed new legislation aimed at strengthening children’s online safety. The Keeping Internet Digital Spaces Accountable and Trustworthy Regulation (“KIDS Act”) would introduce harmonised age restrictions on…
Michael Geist Blog
The Wrong Ban: The Heritage Committee Backed a Targeted Ad Ban for Kids and Stopped Short of a Social Media Ban, Yet the Government Chose the Reverse
The House of Commons Standing Committee on Canadian Heritage conducted an extensive study on the effects of influencers and social media on children and adolescents over the past year and…