Excerpt The European Court of Justice’s SRB decision deepens the meaning of “personal data” under GDPR — recognizing that data is relational, contextual, and civic in nature. As the boundary between private information and public infrastructure blurs, Europe is quietly…
Key Highlights Shein has faced more than €190 million in fines across Europe within just three months. • France: €150M for collecting cookies without user consent • France: €40M for misleading discounts • Italy: €1M for alleged greenwashing The company…
With the revised Federal Act on Data Protection (FADP) now in force and active FDPIC guidance on AI, Swiss regulators have made it clear: AI systems are fully subject to data protection and accountability obligations. For financial institutions, FINMA applies…
The EU’s Financial Data Access Regulation (FiDA) is central to building an open finance ecosystem. It expands financial data sharing while safeguarding customer privacy through strict security and confidentiality requirements. FiDA covers a wide range of financial data types, including…
DORA Comes Into Effect On January 17, 2025, the EU Digital Operational Resilience Act (DORA) entered into force. It establishes a unified framework for ICT risk management in the financial sector, ensuring institutions can withstand, respond to, and recover from…
📅On 17 September 2025, the European Data Protection Supervisor (EDPS) issued a formal Opinion on the European Commission’s plan to negotiate a new framework for EU–U.S. data sharing — directly tied to the U.S. Visa Waiver Program and border security…
The European Union has set a global precedent once again. With the AI Act, it has established the world’s first comprehensive legal framework for artificial intelligence. Much like GDPR did for data privacy, the AI Act is designed not only…
When the European Union adopted the Data Act in 2023, Brussels hailed it as a milestone. For the first time, legislation sought not only to protect personal data—as the General Data Protection Regulation (GDPR) did—but to regulate the broader economic…
Peru’s data protection authority (ANPD) has sharpened its stance on proportionality in data use. Companies can no longer rely on practices like photographing customer ID cards during product delivery — deemed excessive and unnecessary under Peru’s Personal Data Protection Law…
This week marks a pivotal moment in European data regulation. The EU Data Act is officially applicable, introducing sweeping new rules that redefine how organizations must handle non-personal data. Key Obligations Executives & Compliance Leaders Need to Know: 1. Data access and portability:…
