This article is part of our EU AI Act series which explores the effect of the AI Act across various industries and sectors. Investment legislation can be split into two broad categories: investment funds and investment services. The former principally relates to UCITS, AIFMD and local laws which regulate asset management and their service providers. The latter relates to regulating financial instruments and the investment markets thereof ...
Deadline for transposing NIS2 into national law in the EU and adoption of new implementing regulation On October 17 2024 – the same day as the deadline for transposing the NIS2 Directive into the national law of the EU Member States – the European Commission has adopted an Implementing Regulation to the NIS2 Directive regarding cybersecurity risk management and notification obligations for digital infrastructure and digital service providers ...
The new Network and Information Systems Directive (NIS2) came into effect on 18 October 2024 and with it comes an overhaul of the way in which cybersecurity risk management is regulated in Europe ...
This article is part of our EU AI Act series which explores the effect of the AI Act across various industries and sectors. Introduction The first article (see link below) in this EU AI Act series provided, inter alia, a breakdown of the scope, applicability, timeline and risk levels of the AI Act, Regulation (EU) 2024/1689 [1] (hereinafter referred to as the “Act”) ...
Stress and burnout at work is becoming an increasingly spoken about topic, particularly in high pressure roles and sectors such as cyber security professionals within the tech sector. How can employers help to prevent their employees from experiencing it? What is stress and burnout? There is no doubt that employee stress levels have risen as the demands of the workplace have increased ...
Data subject access requests can be a compliance headache for businesses. The first of our series on DSARs looked at how data protection “by design” can make the job easier. But what about deciding whether or not to resist a DSAR when it actually lands? Dealing with data subject rights requests, or DSARs, is one of the biggest compliance headaches for many businesses ...
This article is part of our EU AI Act series which explores the effect of the AI Act across various industries and sectors. Artificial Intelligence (AI) has revolutionized various industries, garnering considerable hype and widespread discussion. As AI technologies continue to evolve, their integration into various industries has profound implications, particularly for the labour market ...
October 7, 2024 By: Alexandra Shulman and Leah Lively AI in hiring: About 80% of U.S. and almost all Fortune 500 companies use AI-powered hiring software. AI may be used to target online advertising for job opportunities and to match candidates to jobs on employment platforms (e.g., LinkedIn, Indeed). AI may also be used to reject or rank applicants using automated resume screening and chatbots based on knockout questions, keyword requirements, or specific qualifications or characteristics ...
In September 2024, the U.S. Department of Labor (the “DOL”) released Compliance Assistance Release No. 2024-01 and its updated cybersecurity guidance for employers that sponsor employee benefit plans governed by the Employee Retirement Income Security Act of 1974, as amended (“ERISA”) ...
PROOF OF INCAPACITY: ANALYSIS OF CIUSSS DE L?OUEST-DE-L?LE-DE-MONTREAL (ST. MARY?S HOSPITAL CENTER) v. RC 1 Summary The authors comment on this decision rendered on September 20, 2024, in which the Court of Appeal ruled on the capacity to consent to care in the presence of a psychiatric disorder ...
Given the increasing use of GenAI to assist businesses with answering legal queries, we wanted to see if ChatGPT can explain the rules around obtaining retrospective consent for electronic direct marketing in the UK. Electronic direct marketing (i.e. email and SMS) to individual consumers is a vital element of many businesses, particularly in the retail sector ...
In a long-awaited decision, the Pennsylvania Supreme Court has held that “direct physical loss” language in commercial property policies is not ambiguous and that COVID-related business-interruption claims do not trigger the insuring clause of these policies. Based on this ruling, business interruption claims filed for losses caused by pandemic-related closures are not covered under standard commercial property policies ...
This article is part of our EU AI Act series which explores the effect of the AI Act across various industries and sectors. Overview & Applicability Timeline The Artificial Intelligence Act (“AI Act” or “Regulation”), officially Regulation (EU) 2024/1689, is a groundbreaking legislative framework designed to address the benefits and risks of AI technologies ...
The UK GDPR and similar data protection laws around the world ask for data protection by design - but what does this mean in practice when it comes to DSARs? Using products such as Shoosmiths' SmartSAR may be the solution your organisation is looking for. Data protection ‘by design and default’ is a core concept under the UK GDPR and similar laws around the world ...
On 9 September 2024, Mario Draghi, former Italian Prime Minister and European Central Bank President, presented his highly anticipated report on «The Future of European Competitiveness» to European Commission President Ursula von der Leyen [1][2]. This comprehensive report analyzes the challenges faced by European industries and companies in the Single Market and proposes strategies to enhance the EU’s competitiveness [2] ...
The EU's comprehensive data and AI regulatory package is about to become operational. This year, the Krogerus Data Symposium will highlight some of the most impactful changes of the Data Act and the AI Act, which will profoundly influence the application of AI, how companies and communities can utilise IoT data, and how data usage agreements are formed ...
Jersey publishes new guidance on the tokenisation of real world assets (“RWAs”) What is tokenisation? Tokenisation is the process of issuing a digital representation of an asset, typically on a blockchain, and its benefits include allowing investors to own and sell fractions of an asset which may otherwise be illiquid and/or financially unattainable for such investors to own outright ...
Modern data protection rules are being introduced to tax-efficient jurisdictions like Bermuda and the Cayman Islands. It's increasingly vital to understand how to handle data in some less familiar territories for data protection. Advisers are familiar with the data protection laws which apply in the jurisdictions where many commercial businesses operate like the UK Data Protection Act, the UK/EU GDPR and the California Privacy Protection Act ...
The Ministry for Home Affairs, Security and Employment (MHSE) published the proposed Maltese draft order for the transposition of the EU Network and Information Systems Directive II (‘NIS 2’) on 6 September 2024 ...
On September 8, 2024, the Ministry of Commerce, together with the National Health Commission and the National Medical Products Administration (hereinafter referred to as the "Three Departments"), publicly issued theNotice on Carrying Out Pilot Programs to Expand Opening-Up in the Healthcare Sector(hereinafter referred to as the "Notice"), announcing that,effective immediately, foreign-invested enterprises are permitted to engage in the development and application of human stem cells, gene diagno
On August 28, 2024, the National Medical Products Administration (NMPA) released the Medical Device Administration Law (Draft for Comment) (hereinafter referred to as the "Draft") for public comments ...
At a time when Canada and many other countries are taking steps to protect users from harm online,1a decision was handed down by the Supreme Court of British Columbia (the “Court”) on January 15, 2024, regarding the conduct of a competitor with respect to complaints about intellectual property infringement made on Amazon’s e-commerce website ...
In this article, Shoosmiths and KPMG explore some of the key policy and business implications for organisations deploying connected and automated mobility (CAM) in the UK market. The Automated Vehicles Act (the AV Act) came into force on 20 May 2024. This important piece of legislation signals a major step towards the widescale adoption and use of CAM within the UK ...
The European Union's NIS2 Directive is a significant update to the original NIS Directive which was implemented in 2018 and which the NIS2 Directive is set to repeal this autumn. The original NIS Directive was the first EU-wide legislation focusing on network and information system security. The deadline for member states to transpose NIS2 Directive into national law is just around the corner (17 October 2024), and the implementing provisions will be applicable from 18 October 2024 onwards ...
