Very candid and helpful explanation by Kakao’s Head of Privacy at #GPA25 about the value of proactively engaging with regulators to educate on #AI innovation despite the fears of not getting the feedback you wish for. This is a very mature approach which requires mutual trust.

ICO’s John Edwards argues convincingly at #GPA25 that it is possible to anticipate today the privacy risks of tomorrow’s agentic #AI and we act accordingly applying the existing legal framework. He adds that tools like privacy impact assessments will be particularly useful in this context.

“Privacy by design is essential to avoid bias and discrimination in #AI development”. A critical reminder by EDPB Chair Ana Talus at #GPA25.

Irish DPC’s Dale Sunderland makes it clear at #GPA25 that the right to object is not an afterthought but a necessity for the lawful use of personal data for #AI development.

EDPB Chair Ana Talus focusing on two important aspects for the legality of #AI development at #GPA25: 1️⃣The role of Data Protection Impact Assessments as a precondition. 2️⃣The interaction between #GDPR and #AI Act to cover all the bases.

Measures like pseudonimysation, anonymity, non-use of sensitive personal data highlighted by Irish DPC’s Dale Sunderland at #GPA25 not just as mechanisms for compliance but as #AI development optimisation.

Professor ByoungPil Kim highlighting at #GPA25 how the Korean Personal Information Protection Commission emphasises the role of strong data subject rights to demonstrate legitimate interests as a legal basis for #AI development.

“AI doesn’t happen in a vacuum, we have data protection law” succinctly says EDPB Chair Ana Talus at #GPA25, emphasising the role played by the #GDPR in setting the groundwork for lawful #AI development.

ICO’s John Edwards explaining at #GPA25 how the UK is aiming to influence international standards dealing with data & #AI governance by adopting pragmatic interpretations of key data protection principles like purpose limitation and data minimisation.

“In the era of #AI, the principles of the #GDPR must be respected to enable trust” according to CNIL’s President at #GPA25. A simple statement that summarises the crucial importance of data protection at this moment in time.

Straight off the bat as they say, the Korean privacy commissioner tells us in his opening speech of #GPA25 that he aims for this event to be a forum for collaboration to enable progress while addressing the challenges of #AI.

Just sharing this afternoon’s beautiful rainbow over London.

Clear message from @vonderleyen.ec.europa.eu to those wondering whether Europe will soften its digital regulation stance: “Whether on environmental or digital regulation. We set our own standards. We set our own regulations. Europe will always decide for itself.” ec.europa.eu/commission/p...

Fascinating court decision in Singapore on the limits of “deemed consent”. While this concept does not exist in #GDPR, the court’s take on purpose limitation & reasonableness wouldn’t be out of place in an analysis of the “legitimate interests” ground in Europe. www.hoganlovells.com/en/publicati...

This is one the best @therestpolitics.bsky.social LEADING interviews (and the bar is high). Two key takeaways: 1️⃣The absolutely crucial importance of a rules-based world to remain optimistic about a prosperous future. 2️⃣The equally crucial need for unity in Europe in the widest possible sense.

Not sure about the future, but today, this is possibly the most important thing that we should all understand about LLMs. ❌They are not human ❌They have no feelings ❌They have zero empathy ✅They are machines that speak like a very articulate human @gergely.pragmaticengineer.com puts it very well👇

Our team’s take on the robust and crucial validation by the CJEU of the @ec.europa.eu adequacy of the EU-U.S. Data Privacy Framework. If you read one write up about this crucial decision, read this one.👇 www.hoganlovells.com/en/publicati...

Nipping it in the bud. Despite all the geopolitics, when it came to it, the CJEU kept its cool and confirmed that the EU-U.S. Data Privacy Framework is valid. curia.europa.eu/jcms/upload/...

Perhaps the most important difference between 🇪🇺&🇺🇸 approaches to #AI public policy is that the EU is mainly about exercising caution and the US is about accelerating innovation. As ever, could the most virtuous approach be a middle ground with the best of both and focused on sustainable development?

Summers tend to be quiet on big policy moves, but July was prolific on #AI policy in both 🇪🇺&🇺🇸. To understand the full implications of the Trump government approach to #AI, my colleagues unpack all the nuances in this podcast. www.hoganlovells.com/en/publicati...

Listening on the radio how #AI is having a detrimental effect on “high end” graduates. This seems to be a real challenge but I sense that not an entirely new one somehow. Starting your professional career has never been an easy or straight forward process (believe me, I’ve been there). Thoughts 🧵

Our UK team submitted a response to the ICO’s call for views on its international data protection guidance this week, and we made four recommendations, which I hope are creative and practical, but above all, useful. Mini-🧵 (You can read the whole response here 👇) www.linkedin.com/posts/eduard...

If you are planning to release in Europe a big #AI model any time soon, today is an important day…

As the application of the GPAI requirements under the #AI Act nears, here is your essential thought process to determine whether and how to comply.

This is a wise move for Google showing that innovation and responsible practices are not in conflict. blog.google/around-the-g...

My views on how the direction of travel of #privacy and #AI regulation can guide global digital governance right now despite all the noise. www.linkedin.com/pulse/regula...

Clever and ambitious move by China in seeking to lead not (just) on #AI itself but on AI governance. They are certainly right that coordination to form a global AI governance framework is the ideal way forward. The challenge is how to overcome today’s geopolitics. www.reuters.com/world/china/...

This gif must have been created for when the European Commission decided to declare the UK adequate for transfers of EU personal data.

Remember ‘5-a-day’..?? You want it back. Top advice here👇 justaddwaterblog.com/2025/07/22/d...

The key messages from the #GPAI Guidelines are in my view the following: 1️⃣ There is a presumption that a model “displays significant generality” if: ⏩️ its training compute is greater than 10^23 FLOP, and ⏩️ can generate language, images or video. BUT it is just a presumption!

For all the speculation about delays to the #AIAct, @ec.europa.eu is having a busy Summer pushing ahead with all the bits and pieces of the #GPAI regime. Following the publication of the Code of Practice, we now have the #GPAI Guidelines to dig into. digital-strategy.ec.europa.eu/en/library/g...

An important difference in the way the #GDPR and the #AIAct affect the use of agentic #AI in job interviews is that ultimate human decision-making can arguably be used to disapply Art. 22 GDPR, but not to avoid the categorisation as a high-risk #AI system under the AI Act.

Having now read in some detail the 🇪🇺 #AI Act #GPAI Code of Practice, I have three main observations: 1️⃣ The combined Act + Code of Practice model is overall a good one, as legislators can agree a baseline as part of the former and more expert perspectives can be deployed to build the latter.

Better late than never, as they say! The EU had originally given itself 3 months to issue a #GPAI Code of Practice before the relevant section of the #AIAct kicked in. Now we have less than one. Here's the long awaited & negotiated final version. digital-strategy.ec.europa.eu/en/policies/...

Seeing the path to the hut at the base of the north face of Ben Nevis surely has to be a good addition to your scrolling. Being there is even better!

On this day, very warm greetings to all my Canadian friends and colleagues. Happy Canada Day!

If you read our team’s take on the 🇬🇧 Data (Use and Access) Act and still want more, the Information Commissioner's Office’s own hot off the press summary is the place to go next. ico.org.uk/about-the-ic...

Our brief take on what the new UK Data (Use and Access) Act will mean in practice. A departure from the #GDPR as we know it..? Not really. www.hoganlovells.com/en/publicati...

We devoted our usual Thursday DPaC London team training session today to the newly agreed Data (Use and Access) Act with the aim of identifying any changes that could realistically affect UK’s adequacy. Frankly we couldn’t find anything that departs from how the EU #GDPR works in practice today.

It’s taken a few years but recent experience involving the proposed deployment of #AI tools across all imaginable functions is turning data protection impact assessments (DPIAs) into one of the success stories of the #GDPR. Let me elaborate. Mini-🧵

While this will likely be a topic for discussion at the forthcoming #G7 Summit, let’s not forget that the same building blocks can serve as a basis for organisational responsible #AI strategies. www.linkedin.com/pulse/way-fo...

Just watching the debate of the UK Data (Use and Access) Bill and it’s interesting that all the discussion so far is on what is not really the focus of the Bill: copyright & #AI. The Government is adamant to emphasise that the creative & technology industries need to reach a practical compromise.

Another unmissable episode of our Data Chronicles podcast. This time, my colleagues dive into the murky waters of #adtech, #cookie consent and who is responsible for what. 🍪🫵🏻🤯 www.hoganlovells.com/en/publicati...

Is there a regulatory formula that will truly enable innovation to drive prosperity in the age of #AI? My suggested bulding blocks for a global approach to this challenge (originally published in @dataguidance.bsky.social #DPLeader). www.linkedin.com/pulse/way-fo...

To the delight of some and the frustration of others, @consilium.europa.eu plan of action for simplification of activities in digital regulations does not suggest dismantling frameworks like the GDPR or reversing laws like the AI Act. data.consilium.europa.eu/doc/document...

Great summary of our recent UK #AI Summit highlighting how we, as lawyers, can contribute to the responsible and successful development and use of AI. www.linkedin.com/posts/hoganl...

“There is no one size fits all when dealing with China” compellingly argues Lord Clement-Jones CBE at joint ICO & APPG AI event explaining in a balanced way that there is room for caution in areas like cybersecurity but also cooperation in technological innovation.

“Privacy is a pre-condition for sustainable #AI adoption” argues Lord Clement-Jones CBE at joint ICO & APPG AI event.

Agentic #AI to become a key area of focus for the ICO, John Edwards tells us at APPG AI event.

“How can privacy power the AI revolution?” Fascinating question that we have come to address at joint ICO & APPG AI event hosted at the Houses of Parliament and introduced by Dawn Butler MP.