Bytesize Legal Updates | Fieldfisher

The Court of Justice of the European Union handed down two landmark judgments last week aimed at the credit reference agency SCHUFA which considers what constitutes automated decision-making under Article 22 of the GDPR, and the issues around the lawfulness of retaining public registry data for commercial purposes. 

In our latest ByteSize Legal Update episode, Fieldfisher's Megan Ward and Flick Fisher discuss the two judgments on the SCHUFA case and why they are important for companies that provide fraud scoring services. 

In this latest podcast Oliver Proust, a Partner in Fieldfisher's Technology and Data team based in our Brussel's office, delves into the latest developments surrounding the EU AI Act. 

Olivier provides a comprehensive overview of the key provisions and implications of this ground breaking legislation that aims to regulate artificial intelligence (AI) systems and their applications. Join us as we explore the classification of AI systems, the territorial scope of the AI Act, its enforcement mechanisms, and the timeline for its implementation.

The Data Act seeks to optimize and leverage the volumes of data (both personal and non-personal) created within the IoT market in order to improve data accessibility to individuals, businesses and governments and create interoperability standards for data sharing. The Data Act also looks to redress contractual arrangements with cloud hosting, by promoting choice within the market and protecting SMEs from imbalanced contractual terms. 

In this Bytesize Legal Update, Fieldfisher's James Russell and Eilish Beeby outline what businesses can expect from the Data Act and the next steps for businesses that may be within scope. 

It's official - the UK's Online Safety Act (OSA) has finally recieved Royal Assent - clearing the last hurdle to become law in the UK. So what happens now?

In our last podcast episode, we explored the Online Safety Bill's journey through Parliament, which businesses would be caught by the legislation and what information was still to come. This time, we take a look at the latest timelines for implementation released by the UK's regulator, Ofcom,  and what these now mean for businesses who fall in scope.

In this Bytesize Legal Update, Fieldfisher's  James Russell and Eilish Beeby distill down the key takeaways and outline the next steps for businesses.

Clearview AI, a US-based facial recognition technology firm, has successfully challenged a £7.5 million fine imposed by the UK's privacy watchdog, the Information Commissioner's Office (ICO), for unlawfully storing facial images of UK citizens.

The first-tier tribunal concluded that the ICO "did not have jurisdiction" to issue a fine or take enforcement action, despite Clearview's processing of data pertaining to individuals in the UK; but also made a number of interesting findings regarding: extraterritoriality; the definition of "behavioural monitoring"; and the issue of joint controllership (amongst others). 

In our latest Bitesize Legal Update, Fieldfisher's Flick Fisher and Megan Ward cut right to the chase, and discuss the key takeaways from the decision and what the practical implications are for businesses.

After a long series of delays, the UK's Online Safety Act (OSA) has finally finished its journey through Parliament, and just awaits Royal Assent to become law.
Like Europe's Digital Services Act (DSA), the UK law aims to tackle the challenge of online harms and protect vulnerable groups online, but varies significantly in both its scope of application and range of imposed obligations.

Now in (almost) its final form – who does the Act apply to? When can we expect it to take effect? And what do businesses need to do to make sure they comply?

In our latest Bytesize Legal Update, Fieldfisher's  James Russell and Imogen Boffin distill down the key takeaways and outline the next steps for businesses.

Four new enforcement decisions by Swedish regulator bring the issue of using Google Analytics in Europe back into question. Following the French, Italian and Austrian decisions last year, the Swedish regulator imposed fines on two of the companies, but not the others.

Does the lack of fines suggest the use of Google Analytics will increasingly be permitted? Does this open the door for broader use of the tool in the region?

In our latest Bytesize Legal Update, Fieldfisher's Robert Fett and Megan Ward cut right to the chase, and discuss the key takeaways from the decision and what the practical implications are for businesses.

On June 13, the Swedish data protection regulator issued Spotify a fine of 58 million SEK (approx $5.4 million USD) for failures in its data subject rights process. In particular, violations of Article 15 and Article 12(1) of the GDPR.

What is the legal significance of the case? What did the court have to say about Spotfy's "multi-channel" approach; and the cost of preparing local language translation? What does it mean for businesses receiving data subject access requests? 

In our latest Bytesize Legal Update, Fieldfisher's Megan Ward and James Russell cut right to the chase, and discuss the key takeaways for businesses wanting to understand what the decision means for them. 

On 10 July 2023, the European Commission adopted its long-awaited adequacy decision for the EU-US Data Privacy Framework (DPF). The DPF replaces the Privacy Shield Framework (Privacy Shield) which was invalidated by the Schrems II decision of the Court of Justice of the European Union (CJEU) in July 2020.   

How is the DPF different to the Privacy Shield? When will it be implemented? And what do you need to do to get certified? 

In our latest Bytesize Legal Update, Fieldfisher's Mark Webber and Jess Solsberg cut right to the chase, and discuss the key next steps for businesses wanting to understand what the new framework means for them. 

On 22 May 2023, the Irish DPC announced it had fined Meta €1.2bn for infringement of Article 46(1) GDPR when it transferred personal data from the EU to the USA.

What is the legal significance of the case? Going forward, what does it mean for businesses who transfer their data abroad?

In our latest Bytesize Legal Update, Fieldfisher's Natalie Farmer and Richard Lawne cut right to the chase, and discuss the key takeaways for businesses wanting to understand what the decision means for them.