Statute
GDPR
4,253 published works
ComplexDiscovery
After the ConnectWise breach, a firm’s GDPR clock may start before its Microsoft 365 logs can answer
By Rob Robinson
Editor’s Note: Microsoft said Oct. 21, 2026, that it assesses Storm-0940, a China-state aligned hacking group, was responsible for the compromise of ConnectWise Cloud Backup, a Microsoft 365 backup service…
Internet Newsletter for Lawyers
Smart glasses at work: why policy has to move before the first dispute
In August, HM Courts and Tribunals Service banned Meta’s smart glasses from every criminal, civil and family court building in England and Wales. Security staff now confiscate the devices on…
European Law Blog
Collective compliance at the expense of competitive uncertainty?
Recent EU digital and information law initiatives greatly rely on industry participation and knowledge to translate legal obligations into an actionable and acceptable compliance framework. The distinctive Article 101 TFEU…
European Law Blog
Overlapping GDPR and DMA Competences to Assess Anonymisation: Sincere Cooperation in the Commission’s Google Search Specification Decision
By Paweł Hajduk
On 16 July 2026, the Commission adopted a decision specifying Alphabet’s obligations to share Google Search data under Article 6(11) of the Digital Markets Act (DMA). In specifying those obligations under Article 8(2) DMA,…
Global IP & Technology Law Blog
UK regulator launches call for evidence on agentic AI
By David Naylor, Simon Jones, Paul Jinks
On 8 October 2026 the UK Information Commission (ICO) opened a call for evidence on the application of existing UK data protection laws to "agentic AI" systems [The ICO’s call…
Privacy World
The ICO’s New Name and Governance Structure: More Than a Rebrand?
By David Naylor, Dan Fara
The Data (Use and Access) Act 2025 (DUAA)[i] continues to introduce changes to the UK data protection landscape. One of the most visible developments is the formal transition of the…
European Law Blog
A Tempting Shortcut: How the Digital Omnibus Would Re-engineer the Legitimate Interest Test for AI
To be lawful, processing of personal data must rest on one of the six grounds in Article 6 of the General Data Protection Regulation(GDPR). Among them, Article 6(1)(f), legitimate interest (LI),…
EU Law Analysis
Article 14 of the Proposed EU KIDS Act: A New Relational-Safety Layer in EU Digital Law
By stevepeerseulawanalysis-blogspot-com
Theodoros Zarkos, MSc, Medical Ethicist - Social Scientist - European Social Policy and Social Rights; Independent Researcher, Kiato, Greece Photo credit: maido155, via Wikimedia Commons The European Commission’s proposal for…
Privacy, Cyber & Data Strategy Blog
GDPR Meets DSA: Key Takeaways from the EDPB’s Final Guidelines
On 17 September 2026, the European Data Protection Board (EDPB) published its final guidelines on the interplay between the General Data Protection Regulation (GDPR) and the Digital Services Act (DSA)…
Blog of Digital Law and New Technologies
What is due diligence and why is it key before buying a company?
Buying a company is not like buying any other asset. Along with the shares, the buyer acquires the company’s history: the contracts it has signed, the taxes it has paid…