Nathalie Moreno

Oct 30, 2024 | kennedyslaw.com | Nathalie Moreno |Ben Pumphrey

Following the government’s announcement of a data-focused agenda in the first King’s Speech, the Data Use and Access Bill (DUAB) was published on 23 October 2024 and introduced in the House of Lords.

Oct 8, 2024 | kennedyslaw.com | Nathalie Moreno |Ben Pumphrey

Can a purely commercial interest justify processing personal data under the GDPR's legitimate interest legal basis? The CJEU says yes - but only if businesses follow strict conditions. The European Court of Justice (CJEU) recently confirmed in a key decision of 4 October 2024 that legitimate interests, as set out in Article 6(1)(f) of the GDPR, can include commercial interests - as long as they are lawful and meet specific safeguards.

Mar 26, 2024 | lexology.com | Elisabeth Marrache |Helena Brown |Manuela Finger |Ross McKenzie |Nathalie Moreno |Claire Edwards | +1 more

In 2024, the French data protection authority, CNIL, increased enforcement actions, imposing 42 fines, including a €32M fine to Amazon for intrusive employee monitoring. Meanwhile, the EU Data Act introduced new regulations for data access and reuse, and the EU AI Act set new AI regulations. In contrast, the UK is considering mandatory measures for AI safety and transparency.

Oct 11, 2023 | lexology.com | Helena Brown |Nathalie Moreno |Ross McKenzie |Claire Edwards

On 6 October the UK Information Commissioner's Office (ICO) announced that it had issued a preliminary enforcement notice against Snap, Inc and Snap Group Limited (Snap) over its potential failure to properly assess the privacy risks posed by Snap’s generative AI chatbot "My AI". This is the ICO's first action in relation to GenAI.

Apr 6, 2023 | lexology.com | Helena Brown |Nathalie Moreno |Ross McKenzie |Claire Edwards |Manuela Finger |Elisabeth Marrache

WE'VE HANDPICKED THE TOP FIVE STORIES AND UPDATES FROM THE FIRST QUARTER OF 2023 THAT YOU NEED TO KNOW ABOUT. DPC META FINEThe Irish Data Protection Commission (DPC) has fined Meta, the owners of Facebook, Instagram and Whatsapp, £343million for incorrectly relying on performance of a contract instead of consent as its lawful basis of processing, and for lack of transparency regarding some of its activities relating to behavioural advertising.