General

As we have covered, the public comment period closed on February 19th for the California Privacy Protection Agency (CPPA) draft regulations on automated decision-making technology, risk assessments and cybersecurity audits under the California Consumer Privacy Act (the “Draft Regulations”).  One comment that has surfaced (the CPPA has yet to publish the comments), in particular,

As we have previously detailed here, the latest generation of regulations under the California Consumer Privacy Act (CCPA), drafted by the California Privacy Protection Agency (CPPA), have advanced beyond public comments are closer to becoming final. These include regulations on automated decision-making technology (ADMT), data processing evaluation and risk assessment requirements and cybersecurity audits.

In October 2024 we reported on the case of Kompakwerk GmbH v Liveperson Netherlands B.V. [CL-2018-000802] which concerned the question of whether an agent selling access to end users in Great Britain to a third-party software as a service (SaaS) product should be considered an agent for the purposes of the Commercial Agents (Council Directive) Regulations

Squire Patton Boggs has launched resource tools for managing data governance under the brand Privacy Powered by Squire Patton Boggs™ *, which were developed by the firm’s global Data Privacy, Cybersecurity & Digital Assets Practice. The first two resources offered are templates and related tools for conducting US data inventory and impact assessments and a

The European Commission has recently released its Guidelines on the Definition of an Artificial Intelligence System under the AI Act (Regulation (EU) 2024/1689). The guidelines are adopted in parallel to commission guidelines on prohibited AI practices (that also entered into application on February 2), with the goal of providing businesses, developers and regulators with further

The authors wish to thank Sumaiyah Razzaq for her contributions to this post.
Ever since the emergence of generative AI, a major concern for all participants has been the extent to which copyright works can and should be used in training AI models.
The application of UK copyright law for this purpose is disputed, leading