On 19 November 2025, the European Commission (“Commission”) officially presented its Digital Omnibus Package (see here and here). The initiative represents a comprehensive update to the EU’s digital regulatory landscape, which the Commission frames as a competitiveness and simplification initiative aimed at reducing administrative burdens and enhancing legal certainty for businesses. Although the final
Privacy & Data Security
Big Beautiful AI Bill: Is the US State AI law ban back on the horizon?
A new draft Federal Executive Order released yesterday says: Maybe.
While the EU is busy putting the brakes on their EU AI Act due to being potentially too onerous and chilling innovation, the White House considers doing the same, for US State AI laws.
- The new EO highlights that it is the policy of the
…
Hands-On AI Skills Every Legal Team Needs
Illinois AI Employment Law Goes Live Soon: Are Your Hiring Practices Compliant?
When in Rome—Make Your AI Do As the Regulators Do
Italy became the first EU country to enact a comprehensive national AI law when its AI law (Law No. 132/2025) took effect last month. The law is intended to work with the existing EU AI Act, but with more details and specific obligations. In fact, it mirrors many of the themes that are…
U.S. Senate Introduces the Health Information Privacy Reform Act
On November 4, 2025, Senator Bill Cassidy (R-LA), chair of the Senate Health, Education, Labor, and Pensions (“HELP”) Committee, introduced the Health Information Privacy Reform Act (“HIPRA”). HIPRA seeks to extend protections similar to those provided under the Health Insurance Portability and Accountability Act of 1996, as amended, and its implementing regulations (collectively, “HIPAA”) to…
Update: CISA 2015 is reauthorized until January 2026
The Cybersecurity Information Sharing Act of 2015 (CISA 2015) has been temporarily reauthorized as part of the broader legislation passed on November 12, 2025, to reopen the federal government. Under the appropriation legislation, CISA 2015 is now reauthorized until January 30, 2026.
As previously discussed in details on this blog, CISA 2015 expired at…
Changes to EU and UK data protection law – a tale of two GDPRs?
The EU Commission recently held a call for evidence on “simplification” of legislation in the data, cybersecurity, and AI space, ahead of a “Digital Omnibus” Act. These changes look to make the EU’s digital rulebook more innovation-friendly, supporting the Commission’s Competitiveness Compass.
The Commission is due to present its simplification proposals on 19 November. Ahead…
What’s Happening at the FTC During the Government Shutdown?
The federal government has been shut down for over a month. We previously reported on implications for the Federal Trade Commission’s (FTC) antitrust work here. What does the shutdown mean for the FTC’s consumer protection, privacy, safety, and AI work?…
