Among the many discussions at the IAPP Europe Data Protection Congress 2024 was how legitimate interests can be applied as a legal basis for data processing under the EU General Data Protection Regulation. In a breakout session, Ireland's Data Protection Commission shared its recent experience assessing applicability of legitimate interests through an inquiry that resulted in a 310 million euro fine to LinkedIn last month.
IAPP AI Governance Research Fellow Richard Sentinella looks at the state of play around global AI law and policy as 2024 comes to a close, while offering a glimpse of what might be on the horizon in 2025.
The U.S. Department of Commerce and the Department of State announced the launch of an international network of AI safety-focused groups. The U.S. will chair the group looking to prevent risks posed by AI and fostering a more uniform global regulatory landscape.
The EU AI Office will hold a webinar explaining the ins and outs of the EU AI Act 28 Nov. Discussion will include information on the law's "objectives, its risk-based framework, and the governance mechanisms it introduces." The event is part of a requirement within the AI Pact to help participants understand how the act will work and to prepare for implementation.
The U.K. Parliament's Science, Innovation and Technology Committee opened an inquiry to explore how misinformation and harmful content is spread by social media's algorithms and generative AI.
The EU Cyber Resilience Act was published in the Official Journal of the European Union and will enter into force 20 days afterward. The act creates cybersecurity and transparency requirements on some Internet of Things and connected products. Editor's note: Mayer Brown Partner Ana Bruder outlined the law's impacts.Full story
The Legislative Assembly of El Salvador approved the Cybersecurity and Information Security Law and the Personal Data Protection Law that aim to improve data security measures and protect individuals from cybercrime. The regulations also urge the establishment of the State Cybersecurity Agency to oversee data protection enforcement.Full story
U.S. Federal Communications Commission Chairwoman Jessica Rosenworcel will resign from the agency 20 Jan. 2025. Meanwhile, the FCC is set to propose updates to undersea internet cable system regulations.
As European Commissioner for Justice Didier Reynders winds down his term, he took time at the IAPP Europe Data Protection Congress 2024 to reflect on the current state of play around EU data protection. During his keynote speech, Reynders emphasized the importance of harmonized enforcement of the EU General Data Protection Regulation and other digital market regulations as well as the Commission's aspirations to broaden the EU adequacy network.
The Global Times reports on the Global Cross-Border Data Flow Cooperation Initiative announced by China's President Xi Jinping, which aims to improve security and digital governance between parties. The initiative comes as the president urged attendees of the APEC Economic Leaders' Meeting to work together to create a stronger Asia-Pacific digital ecosystem.Full story