French Government Publishes Decree On TSPs For National Security Providers

In a ruling dated September 3, 2025 , the General Court of the European Union ("GCEU") dismissed the appeal brought by the French member of parliament Philippe Latombe, seeking annulment...

The French Data Protection Authority, Commission Nationale de l'Informatique et des Libertés (CNIL), imposed a hefty fine of EUR 32 million on Amazon France...

France's data protection authority has issued a groundbreaking recommendation requiring prior consent for email tracking pixels, fundamentally changing how organizations can monitor email engagement.

La société UBER fait face à une troisième sanction majeure de l'Autorité de protection néerlandaise, cette fois pour un montant record de 824,99 millions d'euros. L'amende sanctionne l'utilisation de décisions automatisées concernant les chauffeurs, notamment les désactivations de comptes basées sur les notations clients, sans intervention humaine effective conformément à l'article 22 du RGPD.

By way of four deliberations dated 19 March 2026, the French data protection authority (CNIL) has updated two of its reference methodologies governing the processing of personal data carried out in the context...

Does The War Against Coronavirus Justify All Types Of Processing Of Personal Data, Especially In The Workplace?

Le Comité européen de la protection des données a adopté un projet de nouvelles lignes directrices relatives à l'anonymisation, visant à moderniser l'avis 05/2014 du Groupe de travail Article 29. Ces lignes directrices proposent un cadre d'évaluation reposant sur trois critères cumulatifs et font l'objet d'une consultation publique jusqu'au 30 octobre 2026.

L'Hôpital privé de la Loire a été sanctionné de 500 000 euros par la CNIL suite à une intrusion malveillante ayant compromis les données de plus de 700 000 personnes.

On 13 March 2026, the French Data Protection Authority (hereinafter "the CNIL") published its recommendation on the deployment of a web filtering proxy server [1], adopted by deliberation no. 2026-022...

La CNIL a publié son rapport annuel 2025 révélant une augmentation alarmante des cyberattaques et violations de données personnelles. Avec plus de 20 000 plaintes reçues et 6 167 notifications de violations...

The Code is voluntary, but it will likely become an important reference point for demonstrating compliance with Article 50 of the AI Act.

The Ninth Circuit Court of Appeals vacated a preliminary injunction against Perplexity AI, determining that when an AI agent acts at a user's direction, it is the user—not the AI company—who "accesses" computer systems under federal and California computer fraud statutes. This landmark appellate decision addresses how existing computer-access laws apply to agentic artificial intelligence and has significant implications...

The European Commission has initiated infringement procedures against 20 EU Member States for failing to transpose the EmpCo Directive by the March 27, 2026 deadline. This directive aims to combat greenwashing by requiring substantiation of environmental claims and third-party certification for sustainability labels, with full implementation expected by September 27, 2026.

The European Commission has proposed replacing the EU's three core procurement directives with a single, directly applicable Regulation that would fundamentally reshape how companies compete for public contracts across Member States. The reform introduces mandatory quality criteria thresholds, embeds ESG considerations as evaluation factors, and establishes new security and European-preference provisions that could restrict participation based on ownership, supply chain exposure, and strategic dependencies.

A federal court has struck down New York's Climate Change Superfund Act, which sought to recover $75 billion from fossil fuel companies based on historical emissions. The ruling found the Act preempted by the Clean Air Act, marking the first judicial decision on state climate superfund legislation and establishing that EPA's rescission of the endangerment finding does not alter preemption analysis.

Mexico's comprehensive anti-money laundering framework has undergone a sweeping transformation through Acuerdo 115/2026, introducing mandatory risk-based methodologies, enhanced client due diligence protocols, and automated monitoring requirements. With implementation deadlines beginning March 1, 2027, obligated parties conducting vulnerable activities face compressed timelines to overhaul their compliance infrastructure while navigating heightened enforcement risks and stricter beneficial ownership thresho

France's Anti-Corruption Agency has imposed its first-ever monetary sanctions under the Sapin II Act, penalizing a company €350,000 and its president €60,000 for widespread compliance failures. The landmark decision establishes critical precedents for enforcement strategy, breach assessment timing, and personal executive liability in anti-corruption matters.

The European Commission has adopted final Guidelines on exclusionary abuses of dominance under Article 102 TFEU, introducing a "workable effects approach" that narrows presumptions while expanding guidance on objective justifications and recognizing sustainability benefits as valid efficiencies for the first time. These Guidelines replace the 2008 Enforcement Priorities Guidance and are expected to significantly impact enforcement practices across EU Member States and beyond, particularly for digital market

China's Supreme People's Court has issued comprehensive judicial rules addressing artificial intelligence disputes, establishing frameworks for product liability, intellectual property rights, and data protection. These landmark opinions provide critical guidance for global companies navigating AI-related legal risks in China's evolving regulatory landscape.

The user of defective goods benefi ts from several causes of action against the vendor or manufacturer.