The UK GDPR and similar data protection laws around the world ask for data protection by design - but what does this mean in practice when it comes to DSARs? Using products such as Shoosmiths' SmartSAR may be the solution your organisation is looking for. Data protection ‘by design and default’ is a core concept under the UK GDPR and similar laws around the world ...
The EU's comprehensive data and AI regulatory package is about to become operational. This year, the Krogerus Data Symposium will highlight some of the most impactful changes of the Data Act and the AI Act, which will profoundly influence the application of AI, how companies and communities can utilise IoT data, and how data usage agreements are formed ...
Modern data protection rules are being introduced to tax-efficient jurisdictions like Bermuda and the Cayman Islands. It's increasingly vital to understand how to handle data in some less familiar territories for data protection. Advisers are familiar with the data protection laws which apply in the jurisdictions where many commercial businesses operate like the UK Data Protection Act, the UK/EU GDPR and the California Privacy Protection Act ...
The Ministry for Home Affairs, Security and Employment (MHSE) published the proposed Maltese draft order for the transposition of the EU Network and Information Systems Directive II (‘NIS 2’) on 6 September 2024 ...
In this article, Shoosmiths and KPMG explore some of the key policy and business implications for organisations deploying connected and automated mobility (CAM) in the UK market. The Automated Vehicles Act (the AV Act) came into force on 20 May 2024. This important piece of legislation signals a major step towards the widescale adoption and use of CAM within the UK ...
At a time when Canada and many other countries are taking steps to protect users from harm online,1a decision was handed down by the Supreme Court of British Columbia (the “Court”) on January 15, 2024, regarding the conduct of a competitor with respect to complaints about intellectual property infringement made on Amazon’s e-commerce website ...
The European Union's NIS2 Directive is a significant update to the original NIS Directive which was implemented in 2018 and which the NIS2 Directive is set to repeal this autumn. The original NIS Directive was the first EU-wide legislation focusing on network and information system security. The deadline for member states to transpose NIS2 Directive into national law is just around the corner (17 October 2024), and the implementing provisions will be applicable from 18 October 2024 onwards ...
Novel technologies that seek to improve quality of life or simplify complex processes offer great promise. For example, medical technologies that detect or cure disease or supply chain technologies that allow for real time understanding of the location or destination of a specific product — make our lives easier and safer. They also pose potentially unforeseen complications ...
Introduction By: David Balfour The Medical Board of California investigates physicians for potential violations of the Medical Practice Act. If an investigation results in findings of violations, the Board will refer the case to the Attorney General’s Office recommending the filing of an Accusation seeking disciplinary action against the physician’s license ...
On the 9th of August 2024, the Health and Safety at Work Act, Act XXXIII of 2024 (Chapter 646 of the Laws of Malta) (hereinafter referred to as the ”Act”) was published by Parliament. Upon coming into force, the Act shall repeal the Occupational Health and Safety Authority (“OHSA” or “Authority”) Act (Chapter 424 of the Laws of Malta) and its subsidiary legislation ...
Carey Olsen assists DeFinity Markets in securing JFSC approval for digital assets settlement platform The Jersey subsidiary of the London-based DeFinity Markets group has been operational in the spot foreign exchange market since 2014 and is connected to some of the world’s most prominent banks. The challenger-model will see investment-grade buy and sell-side clients transact with each other using bank-intermediated credit via the prime brokerage desk ...
Shoosmiths has partnered with The Legal 500 as exclusive expert contributing editors and authors across two of their latest Country Comparative guides. These global guides provide detailed information and insight into practice-area-focused laws and regulations in various jurisdictions., and provide an excellent platform to highlight our Technology sector globally, focusing on key areas such as AI, Blockchain & Digital Assets, Connected Tech, Tech Corporate Lifecycle, and Fintech ...
August 14, 2024 By: Wendy Lee A little more than a year ago, on July 23, 2023, the Washington My Health My Data Act (WMHMDA) was passed into law. The law originally went into effect on March 31, 2024, however the compliance deadline for small businesses was June 30, 2024. This law was passed as a reaction to the Dobbs v. Jackson Supreme Court ruling and was designed to protect consumer health data ...
One of the structural principles of the new data protection law is the principle of lawfulness and fairness, which requires that all processing has an appropriate legal basis. Those responsible for managing databases that have been organized prior to the entry into force of the new Data Protection Law will face a great challenge: the adaptation of their databases to the new regulation, which will clearly mean a race against time ...
On August 1, 2024, the Department of Justice (“DOJ”) rolled out its Corporate Whistleblower Awards Pilot Program after announcing the initiative in March. Described as “[s]upercharging DOJ’s corporate investigations and prosecutions,”[1] the Pilot Program dramatically expands the pool of would-be whistleblowers and underscores the importance of robust compliance and reporting programs ...
The National Cybersecurity Coordination, a unit of the Undersecretary of the Interior responsible for coordinating the actions of public agencies in cybersecurity and recommending to the President of the Republic policies, laws, regulations, protocols and standards in this area, recently put two of a series of regulations required by Law No. 21,663 Framework on Cybersecurity up for public consultation ...
The data breach at controversial dating site Ashley Madison exposed 36m users in 2015. It heralded a new age of global data protection laws, but could it happen again? A recent Netflix documentary is retelling the story of the mass data breach in 2015 affecting up to 36 million users of the Ashley Madison website. A decade ago, the Canadian site’s USP was already proving controversial: catering for happily married people looking for a discreet affair ...
Cyber reporting requirements for Bermuda insurers, insurance managers and insurance intermediaries following the CrowdStrike faulty software update Key reporting obligations Prompt notification Bermuda insurers, insurance managers and insurance intermediaries (including brokers, agents and insurance marketplace providers) (each, a "Registered Person") must forthwith notify the BMA upon coming to the knowledge, or having a reason to believe, that a cyber reporting event has occurred ...
On July 24, 2024, the joint committee approved what should be the final draft of the bill that amends Chilean Data Protection Law N° 19,628 (the “Law”). After this stage, the draft of the Law needs to be approved by both the Senate and the Chamber of Deputies. Upon approval, it will be sent to the President of the Republic for presidential approval and eventually will be subject to review by the Constitutional Court ...
****Dear Ladies and Gentlemen!**** The authorities in Russia and the rest of the world have recently been paying more and more attention to data protection issues ...
Effective July 29, 2024, the Federal Trade Commission (“FTC”) has issued a final rule that expands the scope of its existing Health Breach Notification Rule (“HBNR”) to include health and wellness applications (“apps”) typically associated with wearable technologies such as smart watches ...
The EU’s much-anticipated AI Act has finally reached the statute book, with the legislation due to formally enter into force in early August. The arrival of the legislation represents a genuinely momentous shift in the focus of regulation of AI and its associated technologies, stepping away from the line of thinking that AI is just another category of software which should be subject to the same laws, standards and regulation as other, similar technologies ...
On June 28, 2024, Exempt Resolution No. 1,160 of May 31, 2024 was published in the Official Gazette, which approved the “Technical Guideline of the Public Health Institute that establishes the requirements for the application for modifications to the sanitary registration of biological products (M-MOBI)” ...
On July 1, 2024, the U.S. Department of Health and Human Services (HHS) released a final rule[1] outlining financial penalties, referred to as “disincentives” throughout the rule, for healthcare providers that engage in conduct that is considered “information blocking.” The 21st Century Cures Act defines information blocking as a “practice that interferes with, prevents, or materially discourages access, exchange, or use of electronic health information ...
