Debevoise Data Blog

FEBRUARY 28, 2025

Our top five European data protection developments from January are: UK ransomware reporting proposals. DeepSeek investigated by Italian DPA over AI chatbot data collection practices. The EU Digital Operational Resilience Act came into force on 17 January 2025. DORA becomes applicable. UK ICO acts on cookie compliance.

Data protection 52

Data protection Compliance Due diligence Time-tracking 52

Debevoise Data Blog

OCTOBER 31, 2023

One possibility is for the UK Financial Regulators to introduce standardized AI due diligence requirements that firms must satisfy before they can adopt third-party tools. There is strong appetite for any future regulations to align with existing domestic and international laws and regulations.

Compliance 52

Compliance Due diligence Machine learning Data protection 52

Debevoise Data Blog

JANUARY 16, 2025

Third-Party Contractual and Compliance Obligations The rule prohibits data brokerage with any foreign person who is not a covered person unless the U.S. person ensures contractually that the foreign person will not engage in subsequent covered data transactions with a country of concern or covered person. DOJ expects U.S.

Compliance 52

Compliance Due diligence e-records Time-tracking 52