EMEA - Data Privacy, Digital And AI Round Up

Summary

As we pass the mid-point of 2025, it's a good time to review the important developments we have seen in the first 6 months of this year, particularly reforms to the UK's data protection laws, the EU's pathway to implementation of its AI Act, the CNIL's recent regulatory focus (AI, transfer impact assessments and connected vehicles) and the approach in the Middle East to tech innovation, particularly AI.

Highlights

We've seen the UK finally pass its long-awaited data protection legislation, the Data (Use and Access) Act, relaxing some rules on automated decision-making, whilst side-stepping the question of data scraping. The EU has produced guidelines on general-purpose AI models and published a voluntary code of practice for AI model developers. The CNIL's 2025-2028 strategic plan identifies AI, protection of minors and cybersecurity and resilience as key focus areas and it has also published two recommendations to support responsible AI innovation, as