United Kingdom: Data Protection

This was the consensus from a panel we convened with advertising lawyers from five jurisdictions around the globe to take stock of where AI meets the advertising sector.

The European Union has reached a political agreement to significantly extend compliance deadlines for high-risk AI systems under the AI Act, with businesses now having until December 2027 or August 2028 depending on their category. The revised framework introduces separate timelines for different types of high-risk AI applications, narrows certain definitions, and provides regulatory relief for small and medium-sized companies while adding new prohibitions on non-consensual intimate content generation.

When does information collected during property transactions or tenancies constitute personal data under UK GDPR? This analysis examines the increasingly complex intersection of data protection law and property management, exploring how routine information - from tenant preferences to access logs - may trigger comprehensive regulatory obligations with significant compliance implications.