On 18 December 2024, the European Data Protection Board (“EDPB”) adopted its new opinion on the use of personal data for the development and…
The new Cyber Resilience Act is the first EU regulation on the cyber security of products with digital elements. This includes not only software…
The deadline for NIS2 implementation passed on 17 October, but only 6 EU Member States met that deadline, and 14 of the remaining 22…
While the GDPR imposes strict rules on sensitive data processing, gender identity does not automatically fall under this category. Only personal data revealing racial…
GDPR compliance and inclusion: striking the right balance The General Data Protection Regulation (GDPR) generally prohibits the processing of sensitive data relating to, e.g.,…
The use of Artificial Intelligence (AI) can, inadvertently, give rise to issues relating to data protection compliance and equality law. However, used properly, it…
The deadline for Member State implementation of NIS2 is less than a month away, but the majority of Member States we surveyed are likely…
In a groundbreaking decision, an Austrian regional court has held that certain provisions of the Collective Redress Directive (Directive (EU) 2020/1828, “CRD”, sometimes also…
On 10 April 2024, the French National Assembly adopted the Bill on Securing and Regulating the Digital Space (known as the “SREN Bill”), following…
1. Background of the case and proceedings in Belgium (a) IAB Europe and real-time bidding in a nutshell The CJEU ruling concerns the Transparency…