Lightnews — Scholar-powered news

Privacy Laws & Business @privacylaws.com · 1d

October International Report is out now:
- Defending MAGA speech: Trump’s war on global data Privacy
- Australia seeks real-world privacy protections for children
- CNIL’s AI guidance sets practical standards
- GDPR enforcement trends for companies
+ much more
www.privacylaws.com/reports-gate...

International Report October 2025

Includes: - Defending MAGA-speech: Trump’s war on global data privacy - Australia seeks privacy protections for children - EU AI Act and GDPR: CJEU case law on automated processing an...

www.privacylaws.com

Privacy Laws & Business @privacylaws.com · 1d

Join us on 3 December at Stephenson Harwood LLP for an afternoon of informative data protection talks and networking
www.privacylaws.com/events-gatew...

Meet the Correspondents

Conference Stephenson Harwood, London

www.privacylaws.com

Privacy Laws & Business @privacylaws.com · 1d

Join us on 4 November at Latham & Watkins and get to grips with the common elements of principle and many differences in practice between US and European privacy laws.
www.privacylaws.com/events-gatew...

Minding the (US-European) Privacy Gap

Conference Latham & Watkins, London

www.privacylaws.com

Privacy Laws & Business @privacylaws.com · 22d

While it has long been recognised that the ePrivacy Directive is outdated and attempts to adopt a regulation in this field have failed, the Commission recognises cookie consent fatigue, and the need to strengthen users’ digital rights online
www.privacylaws.com/news/eu-laun...

EU launches consultation on simplification in the digital field

While it has long been recognised that the ePrivacy Directive is outdated and attempts to adopt a regulation in this field have failed, the Commission recognises cookie consent fatigue, and the need t...

www.privacylaws.com

Privacy Laws & Business @privacylaws.com · Sep 8

The European Commission launched the process towards the adoption of a data protection adequacy decision with Brazil declaring that it ensures an adequate level of data protection on a similar basis to that of the EU

www.privacylaws.com/news/eu-puts...

EU puts Brazil on path to mutual adequacy status

On 4 September, the European Commission launched the process towards the adoption of a data protection adequacy decision with Brazil declaring that it ensures an adequate level of data protection

www.privacylaws.com

1

Privacy Laws & Business @privacylaws.com · Sep 4

France’s Data Protection Authority, the CNIL, has fined Google €325 million & SHEIN €150 million, in particular for failing to comply with the rules on cookies
www.privacylaws.com/news/cnil-fi...

CNIL fines Google €325 million and Shein €150 million

France’s Data Protection Authority, the CNIL, has fined Google €325 million and SHEIN (e-commerce platform specialising in fast fashion) €150 million

www.privacylaws.com

Privacy Laws & Business @privacylaws.com · Sep 3

UK Report Sept 2025 is out now, includes:
- DUAA data protection aspects in force by end of 2025
- ICO fines 23andMe £2.31 million
- Half-baked no more: Reheated rules on cookies & consent
- New Act enhances enforcement and investigatory powers
+ much more
www.privacylaws.com/reports-gate...

UK Report September 2025

Includes: - DUAA data protection aspects in force by end of 2025 - ICO fines 23andMe £2.31 million - Meeting the demands of overlapping regulatory requirements - Half-baked no mo...

www.privacylaws.com

Privacy Laws & Business @privacylaws.com · Aug 7

Join us on 1 Oct and hear from DSIT and ICO speakers on how the UK's DUAA 2025 will make it easier for businesses in the UK to develop products and services while ensuring a high standard of rights for individuals regarding their personal data

www.privacylaws.com/events-gatew...

Maximising opportunities from the Data (Use and Access) Act 2025

Half-Day Conference Linklaters, London

www.privacylaws.com

Privacy Laws & Business @privacylaws.com · Aug 1

August International Report out now, inc:
- Germany: Landmark case on using publicly available data for AI
- Ireland imposes half of all EU GDPR fines in 2024
- GDPR simplification starts with one step at a time
- Malaysia’s complex new guidelines
www.privacylaws.com/reports-gate...

International Report August 2025

Includes: - Germany: Landmark case on using publicly available data for AI - Ireland imposes half of all EU GDPR fines in 2024 - GDPR simplification starts with one step at a time ...

www.privacylaws.com

Privacy Laws & Business @privacylaws.com · Jul 28

The UK government has issued the commencement dates for various parts of the Data (Use and Access) Act 2025, starting from 20 August 2025:

www.privacylaws.com/news/data-us...

Data (Use and Access) Act commencement dates published

The government has issued the commencement dates for various parts of the Data (Use and Access) Act 2025 starting from 20 August 2025

www.privacylaws.com

Privacy Laws & Business @privacylaws.com · Jul 23

The European Commission has indicated in a draft decision that the UK remains adequate for EU-UK data flows under the new Data (Use and Access) Act 2025
www.privacylaws.com/news/eu-show...

EU shows green light to UK’s DUAA adequacy

The European Commission has indicated in a draft decision that the UK remains adequate for EU-UK data flows under the new Data (Use and Access) Act 2025

www.privacylaws.com

Privacy Laws & Business @privacylaws.com · Jul 4

The European Data Protection Board will be helping organisations to understand their GDPR obligations better by issuing simplified guidance
#dataprotection #privacylaws #gdpr
www.privacylaws.com/news/edpb-to...

EDPB to launch practical resources to simplify GDPR application

EDPB Chair Anu Talus said: “The EDPB is committed to helping organisations in achieving GDPR compliance with greater ease and efficiency

www.privacylaws.com

Privacy Laws & Business @privacylaws.com · Jul 1

Paul Arnold MBE is the first CEO of the future Information Commission which is created under the Data (Use and Access) Act 2025 (DUAA)
www.privacylaws.com/news/paul-ar...

Paul Arnold appointed as CEO of the future Information Commission

Paul Arnold MBE is the first CEO of the future Information Commission which is created under the Data (Use and Access) Act 2025 (DUAA)

www.privacylaws.com

Privacy Laws & Business @privacylaws.com · Jun 24

In its review of the economic impact of the GDPR, the CNIL chose to study the benefits of the GDPR. Its analysis focused on cybersecurity reveals that the GDPR has generated benefits between €585 million in identity theft cases and €1.4 billion in cyber damages
www.privacylaws.com/news/cnil-sa...

CNIL says that GDPR contributes to savings in cyber security

In its review of the economic impact of the GDPR, five years after its entry into force, the CNIL chose to study the benefits of the GDPR. Its analysis focused on cybersecurity reveals that

www.privacylaws.com

Privacy Laws & Business @privacylaws.com · Jun 20

July UK Report includes:
- Data (Use and Access) Act 2025
- Handling complex DSARs, how AI can help
- Mind the gap: Content Moderation in UK vs. EU
- Cyber Security & Resilience Bill
- M&S cyber attack: Lessons for retailers
- ‘Is My Boss a Bot’? AI in recruitment
www.privacylaws.com/reports-gate...

UK Report July 2025

Includes: - Data (Use and Access) Act 2025 becomes law - Getting it right handling complex DSARs and how AI can help - UK lessons from an Italian fine - What will the Cyber Secur...

www.privacylaws.com

Privacy Laws & Business @privacylaws.com · Jun 19

The UK Data (Use and Access) Bill has today received Royal Assent. The Department of Science and Technology will issue guidance and a commencement schedule in due course

#dataprotection #privacylaws

www.privacylaws.com/news/data-us...

Data (Use and Access) Bill becomes law

The Data (Use and Access) Bill has today received Royal Assent. The Department of Science and Technology will issue guidance and a commencement schedule in due course

www.privacylaws.com

Privacy Laws & Business @privacylaws.com · Jun 17

The ICO has today issued a fine of £2.31million on 23andMe for failing to implement appropriate data security measures. Highly sensitive data of 155,592 people in the UK was compromised by the incident which affected seven million people globally
www.privacylaws.com/news/ico-fin...

ICO fines DNA testing company 23andMe £2.31 Million

The ICO has today issued a fine of £2.31million on 23andMe for failing to implement appropriate data security measures

www.privacylaws.com

Privacy Laws & Business @privacylaws.com · Jun 12

The UK Parliament yesterday passed the Data (Use and Access) Bill which now awaits Royal Assent before becoming law. The new law does not alter the UK’s current data protection regime as dramatically as was proposed under the Conservative government
www.privacylaws.com/news/data-us...

UK Data (Use and Access) Bill passes

Parliament yesterday passed the Data (Use and Access) Bill which now awaits Royal Assent before becoming law

www.privacylaws.com

1

Privacy Laws & Business @privacylaws.com · Jun 5

June Report out now, inc:
Appeal Court supports Belgian DPA against Real-Time Bidding
Malta backs GDPR record-keeping simplification
EDPB advises on pseudonymisation
Africa’s regional privacy culture
172 Countries with #privacylaws
El Salvador #DataProtection Law
www.privacylaws.com/reports-gate...

International Report June 2025

Includes: - Appeal Court upholds Belgian DPA decision against Real-Time Bidding - Malta’s DPA backs EU GDPR record-keeping simplification - EDPB advises on pseudonymisation - Afri...

www.privacylaws.com

1

Privacy Laws & Business @privacylaws.com · Jun 5

The last remaining issue to be agreed on the Data Use and Access Bill (DUAB), AI and copyright, has caused a continued ping-pong between the two Houses of Parliament
#dataprotection #privacylaws

www.privacylaws.com/news/parliam...

Parliamentary ping-pong on DUAB continues

The last remaining issue to be agreed on the Data Use and Access Bill, AI and copyright, has caused a continued ping-pong between the two Houses of Parliament

www.privacylaws.com

Privacy Laws & Business @privacylaws.com · May 29

Actionable insights into how to tackle the challenges faced by Privacy Officers due to the rise in AI:
Assessing AI tools for compliance with #dataprotection laws
Managing AI-driven data requests
Addressing privacy risks in AI deployment
Full programme: privacylaws.com/prog2025
#plb2025 #privacylaws

Privacy Laws & Business @privacylaws.com · May 29

Regulators from Bermuda, Guernsey, Jersey & Gibraltar
discuss the unique challenges and requirements of compliance in global strategic zones and what companies can do to ensure that their clients’ data is safe & secure
Full programme: privacylaws.com/prog2025
#plb2025 #dataprotection #privacylaws

Privacy Laws & Business @privacylaws.com · May 28

Sandra Skehan (DPC Ireland), Annabel Gillham (Morrison Foerster) & Colin Rooney (Arthur Cox LLP) dissect the complexities of DSARs, share best practices & provide a comprehensive toolkit for handling DSARs effectively
Full programme: privacylaws.com/prog2025
#plb2025 #dataprotection #privacylaws

Privacy Laws & Business @privacylaws.com · May 28

With damages claims arising from #dataprotection violations representing a particularly significant financial risk for companies, the panel will discuss ECJ judgements, how courts have dealt with these claims & highlight the drivers of mass actions
Full programme: privacylaws.com/prog2025
#plb2025

Privacy Laws & Business @privacylaws.com · May 27

Drawing on real-world examples, Samantha Sayers, Bolt, & James Drury-Smith, DWF, discuss "life hacks" for structuring and resourcing a data protection operating model that balances agility, compliance, and cost-efficiency
Full programme: privacylaws.com/prog2025
#plb2025 #dataprotection #privacylaws