European Union: Privacy Protection

The Data Act's "access by design" requirement came into force on 12 September 2026, mandating that manufacturers of connected products and providers of related services must enable direct user access to generated data by default. This article examines the scope of this new obligation and its practical implications for businesses in the Life Sciences sector, particularly those developing medical devices and Internet of Things products.

Artificial intelligence is transforming workforce management across Asia-Pacific, yet most jurisdictions rely on existing employment and data protection laws rather than AI-specific legislation. Governments supplement these frameworks with ethical principles and voluntary guidance, though recent developments in Australia and Malaysia suggest a shift toward more targeted oversight of AI systems that significantly impact workers.

The Court of Justice's Jautiva ruling has clarified that EU company law does not require unrestricted online access to shareholder personal information, even when corporate transparency and anti-money laundering objectives are invoked. Cyprus businesses must now reconsider how they balance statutory filing obligations with data protection principles, particularly when shareholder records can be downloaded in bulk without safeguards. This analysis examines what the judgment means for corporate disclosure pra

The EU launched a call for tenders to establish up to 7 AI Gigafactories across Europe, with more than €30 billion of expected public and private investment to boost computing capacity, support AI innovation and strengthen the EU's position as a global AI leader.

Il Garante Privacy ha sanzionato un'azienda per l'utilizzo illecito di sistemi GPS sui veicoli aziendali che monitoravano i dipendenti ogni 60 secondi. Il provvedimento evidenzia le violazioni dei principi di minimizzazione e proporzionalità del GDPR, nonché l'assenza di una valutazione d'impatto preventiva. La decisione chiarisce quando il controllo tramite geolocalizzazione supera i limiti della liceità, anche in presenza di accordo sindacale.

The Italian Data Protection Authority has ruled against an employer's use of GPS tracking systems in company vehicles, finding that continuous geolocation monitoring of employees violated GDPR principles. The decision examines the balance between legitimate business interests and workers' privacy rights, particularly regarding data minimisation and the requirement for Data Protection Impact Assessments in workplace surveillance scenarios.

This privacy statement outlines how the organization handles cookies and user data collection through its digital platforms. It explains the consent mechanism for different categories of cookies, including analytics and targeting technologies that track user behavior and preferences.

This privacy statement outlines how the organization handles cookies and user data collection through its digital platforms. It explains the consent mechanism for different categories of cookies, including analytics and targeting technologies that track user behavior and preferences.

Following a Supreme Court decision last year, the Irish courts are applying stricter temporal benchmarks in applications to strike out proceedings for delay...