Eduardo Ustaran
@eustaran.bsky.social
Privacy, data protection and digital regulation lawyer, pragmatic thinker and author
Meanwhile in the UK…
A very British version of NIS2 coming our way with a lighter touch than the EU one (until you get to the potential sanctions for non compliance that is).
www.hoganlovells.com/en/publicati...
A very British version of NIS2 coming our way with a lighter touch than the EU one (until you get to the potential sanctions for non compliance that is).
www.hoganlovells.com/en/publicati...
The UK’s proposed Cyber Security and Resilience Bill
On 12 November 2025 the UK Government introduced its highly anticipated Cyber Security and Resilience (Network and Information Systems) Bill (the “Bill”) to Parliament. The Bill is the first major ove...
www.hoganlovells.com
November 25, 2025 at 9:28 PM
Meanwhile in the UK…
A very British version of NIS2 coming our way with a lighter touch than the EU one (until you get to the potential sanctions for non compliance that is).
www.hoganlovells.com/en/publicati...
A very British version of NIS2 coming our way with a lighter touch than the EU one (until you get to the potential sanctions for non compliance that is).
www.hoganlovells.com/en/publicati...
Our team’s take on the 10 most consequential aspects of the EU's digital simplification package.
www.hoganlovells.com/en/publicati...
www.hoganlovells.com/en/publicati...
Top 10 proposed changes in the EU’s Digital Omnibus
On 19 November, the European Commission published its proposals for the EU Digital Omnibus. This is an ambitious legislative initiative undertaken through two separate instruments which aims to simpli...
www.hoganlovells.com
November 24, 2025 at 9:56 PM
Our team’s take on the 10 most consequential aspects of the EU's digital simplification package.
www.hoganlovells.com/en/publicati...
www.hoganlovells.com/en/publicati...
On the sensitive topic of technological innovation, Irish DPC Commissioner Sunderland makes it equally clear that their are supportive of RESPONSIBLE innovation at #DPC25.
November 19, 2025 at 9:37 AM
On the sensitive topic of technological innovation, Irish DPC Commissioner Sunderland makes it equally clear that their are supportive of RESPONSIBLE innovation at #DPC25.
“Simplification is acceptable as long as it does not attack the core of data protection”. Crystal clear position by EDPB Chair, Anu Talus, at #DPC25 which I think still leaves room for manoeuvre for sensible and pragmatic tweaks to the #GDPR (as the UK has already done).
November 19, 2025 at 9:33 AM
Not the nicest weather to go for a run or walk if you’re in the UK today, but if you do go out, I recommend listening to our latest and hopefully thought-provoking podcast inspired by recent experiences in APAC about how regulation can be on the side of innovation.
podcasts.apple.com/gb/podcast/t...
podcasts.apple.com/gb/podcast/t...
Checking in on APAC | Regulating for innovation
Podcast Episode · The Data Chronicles · 13/11/2025 · 49m
podcasts.apple.com
November 15, 2025 at 1:35 PM
Not the nicest weather to go for a run or walk if you’re in the UK today, but if you do go out, I recommend listening to our latest and hopefully thought-provoking podcast inspired by recent experiences in APAC about how regulation can be on the side of innovation.
podcasts.apple.com/gb/podcast/t...
podcasts.apple.com/gb/podcast/t...
Spotted today in my office’s canteen.
A bit like with Mother’s Day, we shouldn’t really need it, as this should be practiced every day, but still welcomed.
A bit like with Mother’s Day, we shouldn’t really need it, as this should be practiced every day, but still welcomed.
November 13, 2025 at 4:11 PM
Spotted today in my office’s canteen.
A bit like with Mother’s Day, we shouldn’t really need it, as this should be practiced every day, but still welcomed.
A bit like with Mother’s Day, we shouldn’t really need it, as this should be practiced every day, but still welcomed.
Meanwhile in Singapore… 🚀
www.hoganlovells.com/en/publicati...
www.hoganlovells.com/en/publicati...
Singapore releases draft quantum and agentic AI governance frameworks
During International Cyber Week 2025, Minister for Digital Development and Information Josephine Teo, unveiled a suite of draft frameworks developed by the Cyber Security Agency of Singapore (CSA), th...
www.hoganlovells.com
October 27, 2025 at 9:57 PM
Meanwhile in Singapore… 🚀
www.hoganlovells.com/en/publicati...
www.hoganlovells.com/en/publicati...
A UK debate that the EU has already had. In the absence of an outright prohibition as under the #AI Act, it will be interesting to see if under the UK #GDPR, the outcome is the same, but I suspect not.
www.bbc.co.uk/news/resourc...
www.bbc.co.uk/news/resourc...
The debate: Are facial recognition cameras in Sainsbury's a step too far? - BBC News
As Sainsbury's uses facial recognition cameras to crack down on shoplifting, four experts debate the technology's pros and cons.
www.bbc.co.uk
October 24, 2025 at 10:59 AM
A UK debate that the EU has already had. In the absence of an outright prohibition as under the #AI Act, it will be interesting to see if under the UK #GDPR, the outcome is the same, but I suspect not.
www.bbc.co.uk/news/resourc...
www.bbc.co.uk/news/resourc...
Our team’s take on the UK Government's "third way" proposal for regulating #AI, and how to have your say on whether it gets the balance right between innovation and responsible AI practices.
www.hoganlovells.com/en/publicati...
www.hoganlovells.com/en/publicati...
AI Growth Lab: UK champions AI innovation with regulatory sandbox proposal
On 21 October 2025, the UK Government opened for consultation their proposal for a UK AI Growth Lab. The Government is seeking to rely on a sandbox-based model to ensure that laws continue to keep pac...
www.hoganlovells.com
October 24, 2025 at 9:29 AM
Our team’s take on the UK Government's "third way" proposal for regulating #AI, and how to have your say on whether it gets the balance right between innovation and responsible AI practices.
www.hoganlovells.com/en/publicati...
www.hoganlovells.com/en/publicati...
Big #AI regulatory proposal from the UK Government, but not in the way many people think of regulation.
This proposal is almost exclusively focused on facilitating responsible AI development through sandboxes, but with a twist…
www.gov.uk/government/c...
This proposal is almost exclusively focused on facilitating responsible AI development through sandboxes, but with a twist…
www.gov.uk/government/c...
AI Growth Lab
www.gov.uk
October 22, 2025 at 9:13 AM
Big #AI regulatory proposal from the UK Government, but not in the way many people think of regulation.
This proposal is almost exclusively focused on facilitating responsible AI development through sandboxes, but with a twist…
www.gov.uk/government/c...
This proposal is almost exclusively focused on facilitating responsible AI development through sandboxes, but with a twist…
www.gov.uk/government/c...
When life takes a hectic turn it’s time to follow my cat’s sage lifestyle advice…
October 22, 2025 at 9:03 AM
When life takes a hectic turn it’s time to follow my cat’s sage lifestyle advice…
Very candid and helpful explanation by Kakao’s Head of Privacy at #GPA25 about the value of proactively engaging with regulators to educate on #AI innovation despite the fears of not getting the feedback you wish for.
This is a very mature approach which requires mutual trust.
This is a very mature approach which requires mutual trust.
September 17, 2025 at 2:47 AM
ICO’s John Edwards argues convincingly at #GPA25 that it is possible to anticipate today the privacy risks of tomorrow’s agentic #AI and we act accordingly applying the existing legal framework. He adds that tools like privacy impact assessments will be particularly useful in this context.
September 17, 2025 at 1:06 AM
