The Data Chronicles

In this episode of The Data Chronicles, host Scott Loughlin is joined by Hogan Lovells partners Eduardo Ustaran and Charmian Aw to examine how regulators are rethinking the relationship between AI, innovation, and privacy. They discuss why many regulators view data protection rules not as obstacles, but as guardrails that can support responsible AI development through tools like impact assessments, transparency, and data minimization.

Eduardo shares insights from the Global Privacy Assembly, which brought together more than 140 data protection authorities from over 90 countries for regulator-led discussions on AI in daily life, cross-border data transfers, children’s privacy, privacy-enhancing technologies, and other issues shaping global enforcement trends. Charmian, who leads the firm’s Asia-Pacific Data, Privacy and Cybersecurity team, adds an APAC perspective with takeaways from the Global Cross-Border Privacy Rules Forum and the region’s growing push for interoperability in data transfers and enforcement cooperation.

We also highlight the launch of our Asia Pacific Privacy Legislation Tracker, a new tool that compares privacy requirements across APAC jurisdictions designed to support companies in navigating the region’s evolving data protection landscape.

How are U.S. states shaping the future of artificial intelligence? In this episode of The Data Chronicles, we unpack The State of State AI, the latest report from the Future of Privacy Forum (FPF) analyzing more than 200 AI-related bills introduced across 42 states. 

Host Scott Loughlin is joined by Justine Gluck, a policy analyst at FPF, to discuss how lawmakers are shifting toward targeted, transparency-driven regulation, focusing on areas such as healthcare, chatbot use, liability frameworks, and innovation sandboxes, rather than pursuing a single sweeping national approach. Together, they explore how these trends signal where AI policymaking is headed and what it means for developers, deployers, and consumers.

In this episode of The Data Chronicles, host Scott Loughlin welcomes Adam Smith, Regulatory Lead – Cybersecurity at Southwest Airlines, to explore the evolving landscape of cybersecurity in the transportation sector.

Together, they fly through the real-world stakes of protecting critical infrastructure – from airports and railways to the systems that underpin national security. The conversation unpacks the complexity of regulatory frameworks, the challenges of incident response, and the vital role of collaboration among regulators, operators, and vendors.

Across the globe, governments are rethinking how to keep kids safe online. New laws in the UK and the U.S. are driving a wave of age verification and content regulation measures that could reshape how young people experience the internet and how platforms operate.

In this episode of The Data Chronicles, host Scott Loughlin is joined by Hogan Lovells associates, Rob Fett and Georgia Crawford from London, and Sophie Bohm from Colorado, to unpack the UK’s Online Safety Act, the growing patchwork of U.S. state laws, and the complex balance between safety, privacy, and free expression. Together, they explore whether these new rules truly protect children or simply shift the burden to users and platforms.

Discover how the latest U.S. health tech initiative is transforming patient data access and interoperability. In this episode of The Data Chronicles, host Scott Loughlin is joined by Hogan Lovells partner Melissa Bianchi to discuss the drive toward seamless digital health records, the rise of public-private partnerships, and the future of secure digital identity in healthcare. They explore what these developments mean for patients, providers, and technology innovators, and why now is the time to prepare for the next era of health information.

Like many others, you have been scammed. Is all hope lost? Maybe not. 

On this episode of The Data Chronicles, host Scott Loughlin is joined by Hogan Lovells colleagues, Lauren Berkebile and Byron Phillips, to break down today’s most common online fraud schemes and what to do if your organization gets hit.

They trace the shift from the internet’s initial gift card scams to today’s highly targeted wire-fraud campaigns powered by deepfakes, polished phishing, and social engineering. You’ll hear how criminals stage fake transactions over Zoom, why C-suite leaders are targeted, and the first moves that can help you recover funds.

Whether you have been scammed before and are trying to heighten your defenses or you are planning for how to respond to a future scam, this episode will be a great resource.

Consent is one of the most misunderstood concepts in digital privacy. 

Every click, swipe, and scroll can trigger a data transaction, yet today’s reliance on cookie banners and CMPs leaves companies exposed. As regulators grow more sophisticated and laws like CIPA and VPPA add new risks, it’s clear consent needs a serious rethink.  

In this episode of The Data Chronicles, host Scott Loughlin is joined by Max Anderson, Co-founder and Head of Product Development at Ketch, a provider of consent and data privacy management solutions, to discuss why current mechanisms are failing, how opt-outs are evolving beyond a checkbox, and what it means to embed meaningful consent into the user journey while still enabling innovation.

In this episode of Data Chronicles, host Scott Loughlin explores the challenges of defining artificial intelligence (AI) under emerging laws, including under the EU AI Act. He is joined by Hogan Lovells partner Etienne Drouard and senior associate Olga Kurochkina to discuss the difficulties in drawing clear lines around what qualifies as AI, the importance of that definition under the EU AI Act for both developers and users, and the broader landscape of AI regulation. The conversation highlights the importance of distinguishing AI from automation, the compliance obligations that follow, and the ways AI legislation continues to evolve.

In July 2025, the Trump administration made its first major move in shaping U.S. policy on artificial intelligence, releasing an AI Action Plan after revoking President Biden’s earlier executive order. Host Scott Loughlin is joined by Hogan Lovells partner Cybil Roehrenbeck to break down the plan and its accompanying executive orders, which aim to accelerate development of AI infrastructure, promote the export of AI-based technologies, and impose limits on how the federal government can purchase AI that are determined to have an ideological bias.

Can AI run the government?  

In this episode of The Data Chronicles, Scott Loughlin talks with Taka Ariga, former Chief AI Officer at OPM and Chief Data Scientist at GAO, about how the US federal government is approaching its use of AI.  With a focus on the benefits and risks created by AI in the public sector, Scott and Taka explore the impact of AI on the public workforce, public services, national security, and policy making, while discussing agile governance, transparency, and the evolving leadership role of Chief AI Officers.  

Two things become clear. First, the government is experiencing the same AI legal concerns as the private sector. And, second, companies and government have much to learn from one another on how they can each harness AI’s promise and manage its risks.