The European Commission published guidelines that clarify the definition of AI systems under the AI Act, analyzing each component of the definition of AI system, providing examples and specifying which systems should be...more
The European Data Protection Board's (EDPB) Opinion 28/2024 provides valuable insights into the intersection of artificial intelligence and data protection, particularly in the context of compliance with the EU General Data...more
The European Data Protection Board (EDPB) has issued an opinion on certain data protection aspects related to processing personal data in AI models. The opinion came after the Irish supervisory authority raised questions to...more
Country Status Legislation* Commentary Austria Available here Austria has submitted the “Network and Information Security Act” for Parliament’s consideration. It is anticipated that the “Network and Information Security Act”...more
This update is part of our EU AI Act Series. Learn more about the EU AI Act here. Developers and users of AI systems subject to the EU AI Act must adopt AI literacy measures by 2 February 2025. The Act requires them “to...more
A court in Hamburg, Germany, has decided a copyright infringement case in a way that sheds light on how European courts may apply the text and data mining (TDM) exemption to AI model developers. The exemption is contained in...more
This update is part of our EU AI Act Series. Learn more about the EU AI Act here. Like other companies, startups that develop, use or commercialize AI systems or general-purpose AI models (GPAIMs) that people in the EU use...more
This update is part of our EU AI Act Series. Learn more about the EU AI Act here. The EU AI Act has been formally adopted and the countdown to the start of enforcement has begun. Here are six steps you can take to jump start...more
This update is part of our EU AI Act Series. Learn more about the EU AI Act here. The EU AI Act imposes obligations on providers, importers, distributors and deployers of AI systems and General-Purpose AI Models (GPAIMs). ...more
This update is part of our EU AI Act Series. Learn more about the EU AI Act here. The EU AI Act only regulates certain covered AI-related technologies — AI systems and General-Purpose AI Models (GPAIMs)....more
This update is part of our EU AI Act Series. Learn more about the EU AI Act here. The European AI Act has been formally adopted and the countdown to the start of enforcement has begun. ...more
This update is part of our EU AI Act Series. Learn more about the EU AI Act here. Life sciences and digital health companies face obligations under the AI Act that vary depending on how they use AI – and the level of risk...more
This update is part of our EU AI Act Series. Learn more about the EU AI Act here. The EU AI Act has been formally adopted and the countdown to the start of enforcement has begun. ...more
What’s Happening? The European AI Act has been formally adopted and the countdown to the start of enforcement has begun. The AI Act sets out general principles regarding when its provisions become effective. Still, there are...more
This Essential Guide to the European Data Act is part of Orrick's Cybersecurity & Privacy Compass Series. The Cybersecurity & Privacy Compass is your global guide to the evolving cybersecurity and privacy regulatory...more
For more information about France’s SREN law, see our update that provides five key takeaways for businesses. Two new laws impose an array of obligations and restrictions on cloud providers in France. First, the European...more
The French government has adopted a law aimed at regulating digital services. The new SREN law (Loi Visant à Sécuriser et à Réguler l'Espace Numérique) adapts French legislation to new EU regulations, including the Digital...more
This update is part of our EU AI Act Essentials Series. Click here to view additional updates. The European AI Act emerged after years of deliberation among legislators crafting the first comprehensive law to regulate...more
This update is part of our EU AI Act Essentials Series.
The European AI Act is a landmark piece of legislation that establishes the first major comprehensive framework for regulating the use of artificial intelligence,...more
This update is part of our EU AI Act Essentials Series. The European AI Act is a landmark piece of legislation that establishes the first major comprehensive framework for regulating the use of artificial intelligence,...more
The European Cyber Resilience Act (CRA) will lead to the development and implementation of common cybersecurity standards for products with a “digital element” in the European Union.
Whilst the newly adopted and updated...more
The EU AI Act grants the European Commission new investigative and enforcement powers over providers of some AI technologies, including general-purpose AI models such as generative AI products. The Commission has previously...more
This overview is part of a wider series of articles on the AI Act. For recommended steps to take in the first six months, our latest update is available here. The European AI Act has a broad material and territorial scope of...more
The European AI Act has passed, and its first provisions will take effect this October. The rest of the Act will take effect in a staggered manner, with the bulk of the provisions being enforceable by May 2026....more
This Essential Guide to the European Data Act is part of Orrick's Cybersecurity & Privacy Compass Series. The Cybersecurity & Privacy Compass is your global guide to the evolving cybersecurity and privacy regulatory...more