Authors: Alex Moore (Associate, Auckland) and Nick Valentine (Partner, Auckland) 

On 30 March 2023, the Digital Identity Services Trust Framework Bill (the Bill) passed its third and final reading in New Zealand’s House of Representatives, with cross-party support. The Digital Identify Services Trust Framework Act will come into effect on 1 July 2024 (at the…
Continue Reading New Zealand: Digital Identity Services Trust Framework Bill passes final reading

Authors: Luc Bigel and Hamza Akli 

On 24 January 2023, France’s Orientation and Programming Law (“LOPMI“) was enacted and published the next day in the Official Journal.

LOPMI introduces amendments to the insurability of losses and damages paid in response to cyber-attacks, including in relation to ransom payments – requiring that the payment…
Continue Reading France: Changes to insurability of cyber losses

On 15^th March 2023, the UK Information Commissioner’s Office (“ICO”) issued updated Guidance on Artificial Intelligence and Data Protection. The updated Guidance follows ‘requests from UK industry to clarify requirements for fairness in AI” and aims to support the UK government’s vision of a “pro-innovation approach to AI …
Continue Reading UK: ICO issues updated Guidance on Artificial Intelligence and Data Protection

By Jan Pohle, Dr. Philipp Adelberg

In its judgment of 2 March 2023, the European Court of Justice (ECJ) (C-268/21) issued a preliminary ruling on whether and to what extent provisions of the General Data Protection Regulation (GDPR) are applicable in the context of national civil procedural law of the EU…
Continue Reading Europe: Applicability of the GDPR in civil proceedings

On 8 March 2023, the UK Government published its Data Protection and Digital Information (No.2) Bill. This is the second version of the Bill published by the UK Government, the first of which was published in July 2022 and put on hold last September by the then-appointment prime minister, Liz Truss . The new…
Continue Reading UK: New Data Protection and Digital Information Bill

Authors:  Heidi Waem and Simon Verschaeve

On 21 February 2023, the Litigation Chamber of the Belgian Data Protection Authority ruled on a case relating to the lawfulness of a geolocation tracking system for employee vehicles used by a public authority. The decision not only sets out the conditions for the use of such systems, but…
Continue Reading Belgium: Belgian data protection authority clarifies the public interest legal basis in the context of decision on a vehicle tracking system

Authors: Jim Sullivan, John Magee, Rachel De Souza & Christopher Connell

The European Data Protection Board (“EDPB” or the “Board”) on 28 February 2023, released its non-binding opinion on the draft adequacy decision underlying the EU-US Data Privacy Framework (“DPF”). The Board welcomed the “substantial improvements” to…
Continue Reading EU/US: EDPB Welcomes Improvements in the EU-US Data Privacy Framework, but Challenges Remain