https://www.insidetechlaw.com/blog/rss/data-protectionRecent blog postsen{62D1D8D2-89A2-4FBF-A5E3-8B89DCF638E6}https://www.insidetechlaw.com/blog/2026/05/revised-colorado-ai-law-signed-by-governorMarc B. CollierHelen ChristakosSusana MedeirosEthan GlennRemi GambinoShushan GabrielyanArtificial intelligenceData protectionRegulationFinancial institutionsLife sciences and healthcareTechnologyBlog postColorado just rewrote its own AI regulation, affecting every company developing or deploying AI in a way that may touch a Colorado resident.Thu, 21 May 2026 18:27:00 ZMarc B. Collier, Helen Christakos, Susana Medeiros, Ethan Glenn, Remi Gambino, Shushan Gabrielyan{45714B94-F6B3-45BA-846E-D66BCCE6E0B9}https://www.insidetechlaw.com/blog/2026/04/using-ai-in-healthcare-helping-to-stay-hipaa-compliantJeff WurzburgSusana MedeirosSusan Linda RossAbel ChackoKathleen RubinsteinBlog postArtificial intelligenceData protectionLife sciences and healthcareHealthcare providers are rapidly adopting AI for clinical and operational uses, often involving protected health information that is governed by HIPAA’s Privacy Rule.Wed, 08 Apr 2026 19:29:00 ZJeff Wurzburg, Susana Medeiros, Susan Linda Ross, Abel Chacko, Kathleen Rubinstein{20A76D6B-4C2A-4903-AF3D-8AF31183E937}https://www.insidetechlaw.com/blog/2026/03/regulating-ai-in-australian-financial-services-practical-guidance-for-complianceLisa FitzgeraldPeter MulliganKa-Chi CheungBernard O'SheaArtificial intelligenceAustraliaData protectionFinancial institutionsFinancial institutionsBlog postThis article examines how Australian financial regulators approach artificial intelligence, summarising key guidance from ASIC, APRA, OAIC and AUSTRAC and setting out practical compliance considerations for firms, boards and executives.Mon, 09 Mar 2026 14:02:18 ZLisa Fitzgerald, Peter Mulligan, Ka-Chi Cheung, Bernard O'Shea{7011D4E2-0D5D-4E5E-A352-8E8593E6F739}https://www.insidetechlaw.com/blog/2026/03/privilege-challenges-in-the-era-of-generative-aiEllen BlanchardMarc B. CollierSusana MedeirosEthan GlennSusan Linda RossArtificial intelligenceData protectionRegulationTechnologyBlog postGenerative AI is quickly becoming part of everyday legal work, but recent court decisions show it can also create real risks for attorney client privilege.Wed, 04 Mar 2026 15:33:00 ZEllen Blanchard, Marc B. Collier, Susana Medeiros, Ethan Glenn, Susan Linda Ross{7CCD259F-5358-4340-9435-E8ACB8C5EA82}https://www.insidetechlaw.com/blog/2025/11/video-gaming-navigating-cybersecurity-legal-and-technological-challengesJasper GeerdesJurriaan JansenData protectionTechnologyBlog postThe video gaming industry is an alluring target for cyber criminals. In response, regulators in various jurisdictions have sought to bring video gaming into scope of critical infrastructure legislation or have adopted sector-specific rules.Tue, 25 Nov 2025 14:07:17 ZJasper Geerdes, Jurriaan Jansen{FBD2D73C-D1F6-415A-B41D-AB961FE53922}https://www.insidetechlaw.com/blog/2025/07/do-your-technology-and-outsourcing-contracts-properly-address-liability-for-cyber-incidentsJames RussellKerri GeversData protectionFinancial institutionsLiabilityRegulationBlog postMost incidents handled by our Norton Rose Fulbright cyber team originate from the customer’s service provider. In many cases it is the service provider’s systems, infrastructure and environment which proves to be the most vulnerable to cyber breaches and security issues.Tue, 01 Jul 2025 14:48:34 ZJames Russell, Kerri Gevers{48D6EDB2-1A84-4D9F-8A8D-D0E372EC8405}https://www.insidetechlaw.com/blog/2025/05/navigating-regulatory-challenges-in-data-centresDataData protectionRegulationTech regulation insightsBusinesses investing in, financing or operating data centres face a complex matrix of laws and regulatory requirements. Ensuring compliance is important for lender and investor due diligence and is crucial to avoiding fines, penalties and contractual or regulatory breaches that can significantly impact the business and any investment in, or financing of, data centres. Thu, 01 May 2025 13:59:34 Z{80C85DDD-96A8-43CF-98BA-28841B515DFD}https://www.insidetechlaw.com/blog/2024/07/12th-annual-european-data-protection-conferenceMarcus EvansChristoph RitzerJurriaan JansenNadège MartinData protectionBlog postPlease join us at our 12th Annual European Data Protection Conference.Tue, 30 Jul 2024 12:16:57 ZMarcus Evans, Christoph Ritzer, Jurriaan Jansen, Nadège Martin{06124A92-7790-4619-BB58-3DAF12FBC7EE}https://www.insidetechlaw.com/blog/2024/02/singapore-proposes-governance-framework-for-generative-aiMarcus EvansWilson AngJeremy LuaArtificial intelligenceData protectionOn 16 January 2023, Singapore’s Infocomm Media Development Authority (IMDA), in collaboration with the AI Verify Foundation, announced a public consultation on its draft Model AI Governance Framework for Generative AI (Draft GenAI Governance Framework), showing the areas where future policy interventions relating to generative AI may take place and options for such intervention.Sun, 04 Feb 2024 16:47:00 ZMarcus Evans, Wilson Ang, Jeremy Lua{C1B117E9-F631-465F-B80A-0121A5CDDCA3}https://www.insidetechlaw.com/blog/2023/10/uk-information-commissioners-office-publishes-final-guidance-on-employee-monitoringBlog postDataData protectionEmploymentFinTechThe UK Information Commissioner’s Office (ICO) published its final guidance on monitoring workers on 3 October 2023 (the Guidance).Thu, 12 Oct 2023 14:59:00 Z{A37CB014-B418-4B67-961E-0B31A55A09C1}https://www.insidetechlaw.com/blog/2023/09/an-overview-of-the-european-digital-strategyPolina MaloshchinskaiaBlog postDataData protectionRegulationTech regulation insightsWe have published an article, EU: An overview of the European digital strategy, explaining the aims and key components of the EU digital strategy, outlining at a high-level key legislation that has been published in this space in the past three years and highlighting the way in which the various legislative instruments interact with each other and with European data privacy rules.Tue, 26 Sep 2023 16:08:00 ZPolina Maloshchinskaia{421642AE-055E-4E64-AA06-B12192585062}https://www.insidetechlaw.com/blog/2023/02/privilege-privacy-and-confidentialityFarah MukaddamIntellectual propertyData protectionBlog postTechnologyThe Commercial Court in Jinxin Inc v Aser Media Pte Ltd and others & Others has ruled that an employer’s right to monitor and access private information of an employee held on its systems does not extend to a loss of confidentiality in those documents, and therefore a loss of privilege, as against the employer. Wed, 08 Feb 2023 12:02:32 ZFarah Mukaddam{F6326A1D-AE0D-4E39-828B-DFD6DE8738A3}https://www.insidetechlaw.com/blog/2022/12/ico-and-ofcom-joint-statement-on-online-safety-and-data-protectionMarcus EvansData protectionDataUKBlog postOn 25 November 2022, the UK Information Commissioner’s Office (ICO) and the Office of Communications (OFCOM) (together, the Regulators) released a joint statement setting out their shared views on the interactions between online safety and data protection (the Statement).Tue, 06 Dec 2022 09:49:19 ZMarcus Evans{4A158917-225D-406A-9A4A-91018F30D5F6}https://www.insidetechlaw.com/blog/2022/10/the-proposed-eu-cyber-resilience-act-what-it-is-and-how-it-may-impact-the-supply-chainPolina MaloshchinskaiaDataData protectionFinTechInternet of thingsOn 15 September 2022, the European Commission published its proposal for a new Regulation which sets out cybersecurity related requirements for products with “digital elements”, known as the proposed Cyber Resilience Act (the CRA). Mon, 17 Oct 2022 15:12:23 ZPolina Maloshchinskaia{4347D207-2F43-4018-B6DB-70B6D85F4A5C}https://www.insidetechlaw.com/blog/2022/03/high-court-rejects-claim-blockchain-developers-owe-duties-to-usersAdam SanittDataData protectionTechnologyBlog postFinancial institutionsThe latest instalment in the Tulip Trading v Bitcoin Association litigation has been greeted with relief by many in the blockchain community, after the High Court threw out a claim that bitcoin developers (including several bitcoin forks) owed a duty of care or a fiduciary duty to an alleged owner of bitcoin. But the Court did not rule out duties being owed in other circumstances – distributed ledger technology developers, miners and users should all beware that the risk of unexpected liability has not been completely eliminated.Tue, 29 Mar 2022 15:10:00 ZAdam Sanitt{C197C0E8-D661-4B5C-8132-CB7CD5D06690}https://www.insidetechlaw.com/blog/2022/03/copyright-protection-for-ai-created-workMaya MedeirosDavid YiWilliam ChalmersIntellectual propertyData protectionTechnologyBlog postArtificial intelligenceTechnology in emeaArtificial intelligence (AI) systems are capable of creating a wide range of artistic, musical, and literary works and inventions without human involvement. These AI creations raise challenges to intellectual property (IP) frameworks. Mon, 21 Mar 2022 16:04:00 ZMaya Medeiros, David Yi, William Chalmers{3BEC1DA1-85B9-43BE-A983-82C15E76EB46}https://www.insidetechlaw.com/blog/2022/02/facebook-data-scraping-claim-lacks-some-basis-in-factRandy SuttonDataData protectionTechnologyBlog postThe Supreme Court of British Columbia recently dismissed an attempt to certify a class action lawsuit against Facebook after the court found the plaintiffs failed to provide some “basis in fact” for their central allegation – that Facebook engaged in unauthorized data scraping.Fri, 25 Feb 2022 12:16:00 ZRandy Sutton{ADAB6A0B-D60C-4A88-9141-EA4451B1BA4F}https://www.insidetechlaw.com/blog/2021/09/digital-transformation-key-technology-cybersecurity-and-privacy-risksImran AhmadArtificial intelligenceCanadaDataData protectionRegulationTechnologyBlog postIn this blog we discuss the risks associated with digital transformation from technology, cybersecurity and privacy perspectives.Thu, 09 Sep 2021 08:19:48 ZImran Ahmad{7BC9E4F8-4944-4DDD-AAEA-3D5E84E66D64}https://www.insidetechlaw.com/blog/2021/07/eus-possible-data-actJay ModrallData protectionRegulationTechnologyBlog postResponse to to the Consultation and Inception Impact Assessment are bound to shape the future of EU’s digital economy.Thu, 01 Jul 2021 11:53:06 ZJay Modrall{2823138D-9FFE-4A6C-A851-AC94B2D54A24}https://www.insidetechlaw.com/blog/2021/06/max-schrems-ngo-noyb-submits-mass-cookie-law-compliance-complaintsData protectionTechnologyBlog postMax Schrems’ privacy NGO, noyb, submits hundreds of draft complaints to companies across the Europe about their cookie law compliance.Mon, 14 Jun 2021 08:32:56 Z{E0A07E41-53EE-4206-83C3-41A724459FE6}https://www.insidetechlaw.com/blog/2021/06/mobile-data-in-investigationsAndrew ReevesClaudia Van GruisenDavid HarrisData protectionTechnologyBlog postIn this blog we outline practical tips for the preservation, collection and review of mobile data in investigations, which has become particularly important as remote working has accelerated the merger of work and private data.Thu, 03 Jun 2021 13:49:18 ZAndrew Reeves, Claudia Van Gruisen, David Harris{78689AF3-4960-45B4-B842-F779E6684AED}https://www.insidetechlaw.com/blog/2021/05/technology-joint-ventures-partnering-for-the-futureJill GauntlettVictoria BirchMike KnapperDominic StuttafordAntitrust and competitionCorporateData protectionIntellectual propertyRegulationTaxUKTechnologyBlog postThis article examines the key aspects of joint ventures in the technology sector and the particular issues and challenges that these joint ventures raise.Thu, 06 May 2021 13:04:00 ZJill Gauntlett, Victoria Birch, Mike Knapper, Dominic Stuttaford{589C0D02-9297-4918-A60E-B6F67C0F7359}https://www.insidetechlaw.com/blog/2021/05/think-before-you-appDaniel DanieleData protectionTechnologyBlog postAs we increase our app use we need to think about the risks to privacy.Wed, 05 May 2021 09:00:00 ZDaniel Daniele{22D00A3D-F5C8-4960-A600-4A7CDF091728}https://www.insidetechlaw.com/blog/2021/03/privacy-commissioners-take-position-on-using-facial-recognition-technologyImran AhmadSara A. Levine, KCAlexis KerrJohn CassellData protectionTechnologyBlog postIn a joint investigation report, the Privacy Commissioner of Canada, together with the commissioners of BC, Alberta, and Quebec concluded that Clearview AI violated Canadians’ privacy rights under federal and provincial privacy laws by scraping billons of images of people available online to be continually used in what amounted to a virtual “police lineup.” Thu, 11 Mar 2021 17:11:23 ZImran Ahmad, Sara A. Levine, KC, Alexis Kerr, John Cassell{BD819147-F4AB-4F33-BF66-902884D0F25E}https://www.insidetechlaw.com/blog/2021/03/proposals-for-the-eprivacy-regulation-a-telecommunications-focusOliver StaceyMark MauriceFiona Bundy-ClarkeData protectionDataRegulationTechnologyBlog postWe consider some relevant areas of interest of the recently agreed position on the ePrivacy Regulation for telecommunications companies.Wed, 10 Mar 2021 14:48:32 ZOliver Stacey, Mark Maurice, Fiona Bundy-Clarke