The Court of Justice of the European Union (CJEU) has delivered its judgment on case C 413/23 P European Data Protection Supervisor (EDPS) v Single Resolution Board (SRB). The CJEU has confirmed that pseudonymised data will not be personal data in all cases. This will be a welcome confirmation for innovative uses of data, including training AI models. The question
Data Protection Report
Data protection legal insight at the speed of technology
Latest from Data Protection Report - Page 2
Explain yourself: The legal requirements governing explainability
Agentic AI brings the promise of AI making a range of decisions autonomously. It has been proposed as the way forward for some of the most impactful decisions in our lives: interacting with customers and actioning requests, triaging requests for medical appointments, and hiring candidates — to name a few.
But many of the models…
White House unveils AI Action Plan in artificial intelligence
On July 23, 2025, the White House released a sweeping new policy framework titled “Winning the AI Race: America’s AI Action Plan” (the “Plan”), describing the federal government’s approach to artificial intelligence (“AI”). This initiative, developed under the executive order, “Removing Barriers to American Leadership in AI,” outlines a plan relating to various…
Integrating artificial intelligence in M&A processes: A new strategic era – Part 1: Leveraging AI and its advantages
Discover how artificial intelligence is reshaping the future of mergers and acquisitions. From identifying strategic opportunities to streamlining due diligence and enhancing contract negotiations, AI is revolutionizing every stage of the M&A process. This article explores the tangible advantages of integrating AI into dealmaking—efficiency, precision, and smarter decision-making. Read the full article to learn how organizations can…
UK data protection reform – what you need to know and do
The Data (Use and Access) Act (DUAA) received Royal Assent on 19 June 2025. The DUAA enacts the changes to the UK’s data protection regime that have been contemplated since the Data: a new direction consultation in 2021.
This article looks to help organisations who are subject to the UK’s post Brexit assimilated General…
California’s anti-employment-discrimination regulations now include AI, expand retention requirements
On June 27, 2025, the California Civil Rights Council, which is part of the Civil Rights Department, published revised regulations to protect against employment discrimination as a result of an employer’s use of artificial intelligence (AI) and other technologies that make decisions or facilitate human decision making regarding employment benefits.
These regulations contain many surprises,…
Canada’s Place in the AI Data Centre Boom
As artificial intelligence (AI) continues to grow in capability and adoption, the technology infrastructure required to support it is rapidly expanding. The rise of AI has led to the development of specialized data centres built to handle the high computational demands associated with AI workloads. …
AI Armageddon Series
The biggest AI privacy problems no one is talking about: Installment 1: The Agent2Agent (“A2A”) Protocol
In the privacy world, everyone is focused on fairness, bias, and data scraping. These issues, however, are not even among the top 3 AI privacy issues. And it’s not even close. This is not to say those issues are unimportant. Indeed, the…
New Jersey’s proposed privacy rules include some surprises
On June 2, 2025, the New Jersey Attorney General’s Division of Consumer Affairs released proposed rules (57 N.J.R. 1101(a)) pursuant to the New Jersey Data Privacy Act (N.J.S.A. 56:8-166.4 et seq.). Although the proposed rules have many similarities to California’s current privacy regulations, there are some surprises. Among other things, New Jersey has proposed…
