Statute
GDPR
4,253 published works
BioSlice Blog
Pseudonymised, Not Anonymous: What the Italian Garante’s €7 Million IQVIA Fine Means for Health Data
By Alexander Roussanov, Camille Vermosen
On 23 September 2026, the Italian data protection authority (the Garante) fined IQVIA Solutions Italy €7 million under the GDPR. The decision concerns a database of patient records collected from…
EJIL: Talk!
Two(ish) Weeks in Review: 7 September—2 October 2026
The tub-thumping of the first half of the year would seem to have receded into background noise for now, giving space for other reflections—from the maps we use to understand…
BioSlice Blog
Virtual and Digital Health Digest – September 2026
By Alexander Roussanov, Fabien Roy, James Castro-Edwards, Sofia Holmquist, Ana Gonzalez-Lamuno
Welcome to the latest installment of Arnold & Porter’s Virtual and Digital Health digest. This digest covers key virtual and digital health regulatory and public policy developments during August 2026 from the EU…
Verfassungsblog
Der Ineffektivitätsgrundsatz in der deutschen Schufa-Rechtsprechung
By Ruth Janal
Der BGH wird am 21. Oktober 2026 seine Entscheidung in vier Verfahren über die Frage verkünden, ob und ggf. in welchem Umfang die Wirtschaftsauskunftei Schufa betroffenen Personen Auskunft über die…
The D&O Diary
Alphabet Board Hit with Privacy-Related Follow-On Derivative Lawsuit
As we have noted on this site in recent years, privacy-related issues have been and remain a significant potential source of D&O risk and liability exposure. In the latest example…
Employment Law Worldview
No trench coat required: Belgium’s new rules on workplace investigations
On 16 December 2024, Belgium’s Private Investigations Act (the "PIA") entered into force, replacing the Private Detectives Act of 1991. While this may sound like news for the detective industry…
Ogletree Deakins Insights
Deployment of AI Recruitment Tools in the EU: Employer Obligations Under GDPR and EU AI Act
By By Simon J. McMenemy, Nicola McCrudden
Quick Hits Spain’s data protection authority, the AEPD, issued a formal warning to a company before its AI recruitment tool was switched on. EU regulators demonstrate willingness to invoke their…
AGP & Co Insights
What the Jautiva ruling means for shareholder privacy
Businesses need reliable information about the companies they deal with. Shareholders also have a legitimate interest in how their personal information is used. The Jautiva ruling shows why those interests…
The Formiti Privacy News Blog
Swiss FADP vs EU GDPR for AI Deployment
By Formiti
Navigate Swiss FADP and EU GDPR requirements for AI deployment in 2026. Learn how to manage dual-privacy frameworks for cross-border data protection success.
The Data Advisor
European Commission Proposes “EU KIDS Act” to Restrict Children’s Access to Online Services
By Cédric Burton, Rossana Fol, Tom Evans, Michaela Novakova
On September 17, 2026, the European Commission (EC) published a proposed “EU KIDS Act,” which would impose minimum-age requirements to access social media and video-sharing platforms, subject to mandatory age…