This site uses cookies to improve your experience. To help us insure we adhere to various privacy regulations, please select your country/region of residence. If you do not select a country, we will assume you are from the United States. Select your Cookie Settings or view our Privacy Policy and Terms of Use.
Cookie Settings
Cookies and similar technologies are used on this website for proper function of the website, for tracking performance analytics and for marketing purposes. We and some of our third-party providers may use cookie data for various purposes. Please review the cookie settings below and choose your preference.
Used for the proper function of the website
Used for monitoring website traffic and interactions
Cookie Settings
Cookies and similar technologies are used on this website for proper function of the website, for tracking performance analytics and for marketing purposes. We and some of our third-party providers may use cookie data for various purposes. Please review the cookie settings below and choose your preference.
Strictly Necessary: Used for the proper function of the website
Performance/Analytics: Used for monitoring website traffic and interactions
Candidate, 2026 Overview On May 17, 2024, the California Civil Rights Department (CRD) took a step towards addressing the intersection of technology and employment with its proposed modifications to employment regulations concerning automated decision systems. By Sauntharya Manikandan, J.D.
As we approach the end of the year, here are the Top 11 Artificial Intelligence (AI) posts on the Debevoise Data Blog in 2024 by page views. If you are not already a Blog subscriber, click here to sign up. After summarizing the ABA guidelines, this post recommends specific actions to consider that may help support compliance.
The enforcement of vulnerability reporting requirements under the CRA will apply from 11 September 2026 and the main obligations introduced by the CRA will apply from 11 December 2027, including the requirements for security updates and vulnerability management. To subscribe to the Data Blog, please click here.
The Basic Act on the Development of Artificial Intelligence and Establishment of Foundation for Trust (the Basic Act or the Act), which has several similarities to – and differences from – the EU AI Act, and comes into force on January 22, 2026. Internal ethics & compliance. Continue to monitor developments in Korea.
In this Debevoise Data Blog post, we survey the current status of state-level AI legislation, consider why comprehensive AI bills are struggling, review some of the fit-for-purpose rules that are filling the gaps, and provide guidance for businesses that are trying to chart a course through uncertain regulatory waters. Patchwork Fatigue.
These prohibitions came into effect on 2 February 2025, but the penalties for non-compliance do not come into force until 2 August 2025. Again, these requirements apply from 2 August 2026. These regimes provide an immediate compliance lens through which insurers should assess their AI use cases.
This blog post highlights some of the new obligations in the Regulations, specifically the final cybersecurity audit requirements and changes to the scope of the automated decision-making requirements. Otherwise, if the final text is submitted after August 31, 2025, it will likely take effect on January 1, 2026.
This blog post discusses the requirements that are now in force, and what they mean for distributors (or providers) and users (or deployers) of AI systems. Given the current lack of clarity over the scope of these requirements, there are only a few concrete compliance steps that businesses must take now.
As we approach the end of the year, here are the Top 10 Cybersecurity posts on the Debevoise Data Blog in 2024 by page views. If you are not already a Blog subscriber, click here to sign up. Although compliance is voluntary, the Framework is increasingly used by regulators like the FTC and SEC as a benchmark for cybersecurity maturity.
The European Commission proposed its AI Act— establishing binding rules on banned and “high-risk” AI systems — in 2021 (see our blog here ), however, the law is still being reviewed by lawmakers and is not expected to come into force before 2026.
The Data Act’s obligations are broad and may require significant engineering work to re-design products to ensure compliance. The access requirement will apply to connected products and related services placed on the market after 32 months from the Act’s date of entry into force – i.e. , in mid-2026.
Despite recent challenges in the EU “trilogue negotiations”, proponents still hope to reach a compromise on the key terms of the draft EU AI Act by 6 th December, with a view to passing to the Act in 2024 and most of the provisions becoming effective sometime in 2026.
Most of the substantive requirements will come into force two years later, from 1 August 2026, with the main exception being “Prohibited” AI systems, which will be banned from 1 February 2025. We will be publishing further blog posts that analyse into certain key aspects of the Act in due course. What AI Systems are covered by the Act?
On May 17, 2024, Colorado passed Senate Bill 24-205 (“the Colorado AI Law” or “the Law”), a broad law regulating so-called high-risk AI systems that becomes effective on February 1, 2026. Create a roadmap for compliance. state law developments all reinforce the incentives for companies to adopt AI governance programs. Modify contracts.
A PwC India report says that by 2026-27, UPI will account for 90% of the total retail digital payments in the country. Finshots ] Save Now, Pay Later (SNPL)- An emerging business model in Fintech [ Credgenics Blogs ] Fintech Global: Will AI take over the regulation and compliance in the future?
Candidate, 2026 On March 15, 2022, President Biden signed the Cyber Incident Reporting for Critical Infrastructure Act of 2022 (CIRCIA) into law. By properly scoping these reporting requirements, CISA can encourage industry compliance with reporting requirements and focus its efforts on responding to high severity cyber incidents.
If this timeline is met, the first provisions of the Act to come into force (the prohibition on “unacceptable risk” AI systems) will take effect in late 2024, followed by the requirements related to “high risk” systems in early 2025, and the remaining provisions in 2026. To subscribe to the Data Blog, please click here.
This blog post analyses the UK Competition and Markets Authority’s (“ CMA ”) proposed approach to AI regulation. In particular, businesses should ensure that all collaborations they undertake with peer businesses are in compliance with UK competition law and merger control regulation. How to Prepare.
On October 30, 2023, days ahead of government leaders convening in the UK for an international AI Safety Summit, the White House issued an Executive Order (“EO”) outlining an expansive strategy to support the development and deployment of safe and secure AI technologies (for further details on the EO, see our blog here ).
The Cybersecurity Infrastructure Security Agency (“CISA”) recently published its detailed Cybersecurity Strategic Plan for the fiscal years 2024 to 2026, which is intended to align with the National Cybersecurity Strategy. To subscribe to our Data Blog, please click here. IaaS Providers Must Defend American Cyberspace.
We organize all of the trending information in your field so you don't have to. Join 5,000+ users and stay up to date on the latest articles your peers are reading.
You know about us, now we want to get to know you!
Let's personalize your content
Let's get even more personalized
We recognize your account from another site in our network, please click 'Send Email' below to continue with verifying your account and setting a password.
Let's personalize your content