Bulgarian President Releases Draft ePrivacy Proposal

On 15 July 2019, an unprecedented cyber-attack in Bulgaria was announced.

A new Bulgarian Trade Registry Act (the Act) was enacted on 1 January 2008.

In the past two years we have witnessed significant progress in the way the corporate world operates in wholly or semi-digital environment, which was undeniably driven, among other factors, by the global COVID-19 pandemic.

On its entry into force, the GDPR would make reliance on data subjects'

Our TMT Legal Update provides insights from our law experts and aims to keep you regularly up to date with sector news, trends and legislation in the Central and Eastern Europe...

The GDPR leaves the initial assessment of a Data Breach to self-estimation of the data controller and its internal policies and procedures.

By Commission Implementing Decision (EU) 2021/914 of 4 June 2021 new standard contractual clauses (SCCs) for the transfer of personal data to third countries pursuant to Regulation (EU) 2016/679...

With France and Austria deciding on data protection issues in relation to Google Analytics, many more countries have followed suit in relevant changes to so-called web browser cookies.

Increasingly, international business relations involve the transfer of personal data of individuals from EU/EEA to non-EU/EEA countries.

The newly revised EU legal framework in the field of personal data protection (GDPR) has already made the processing of personal data an increasingly important topic for businesses operating...

The Code is voluntary, but it will likely become an important reference point for demonstrating compliance with Article 50 of the AI Act.

The New York Stock Exchange and Nasdaq are implementing overnight trading sessions starting December 6, 2026, extending the trading day to nearly 23 hours by compressing the daily pause to just one hour. While this evolution toward continuous trading introduces new considerations for corporate actions, disclosure timing, and deal execution, the practical impact varies significantly between NYSE-listed companies,

The Ninth Circuit Court of Appeals vacated a preliminary injunction against Perplexity AI, determining that when an AI agent acts at a user's direction, it is the user—not the AI company—who "accesses" computer systems under federal and California computer fraud statutes. This landmark appellate decision addresses how existing computer-access laws apply to agentic artificial intelligence and has significant implications...

The Illinois Holocaust Museum & Education Center (IHMEC) held a third program as part of its Jones Day Foundation Community Series, a special series of educational events

China's Supreme People's Court has issued comprehensive judicial rules addressing artificial intelligence disputes, establishing frameworks for product liability, intellectual property rights, and data protection. These landmark opinions provide critical guidance for global companies navigating AI-related legal risks in China's evolving regulatory landscape.

A federal court ruling in Indiana has opened the door to class action lawsuits against email marketers, holding that promotional subject lines like "SO MANY FREE GIFTS INSIDE" may violate state anti-spam law even when email bodies contain full disclosures. The decision exposes businesses to $500 in statutory damages per email and creates a new litigation hotspot following similar developments in Washington state.

The European Commission has initiated infringement procedures against 20 EU Member States for failing to transpose the EmpCo Directive by the March 27, 2026 deadline. This directive aims to combat greenwashing by requiring substantiation of environmental claims and third-party certification for sustainability labels, with full implementation expected by September 27, 2026.

The Ninth Circuit has ruled that health plan participants whose confidential information was disclosed without authorization have standing to sue in federal court, even without showing financial loss or future harm. This decision, which departs from the risk-based approach many courts have applied since TransUnion, relies on the centuries-old action for breach of confidence and could have significant implications for companies' privacy commitments and data-sharing practices.

Mexico's comprehensive anti-money laundering framework has undergone a sweeping transformation through Acuerdo 115/2026, introducing mandatory risk-based methodologies, enhanced client due diligence protocols, and automated monitoring requirements. With implementation deadlines beginning March 1, 2027, obligated parties conducting vulnerable activities face compressed timelines to overhaul their compliance infrastructure while navigating heightened enforcement risks and stricter beneficial ownership thresho

The Environmental Protection Agency has proposed two rules that would significantly alter the regulatory landscape for PFAS in drinking water, rescinding standards for four substances...