The Lens Newsletter - March 2025

AI Act's new GPAI Code out… finally

It’s late but finally here. The 3rd edition of the EU’s GPAI Code of Practice was originally expected in mid February but was published on 11 March, along with a website to help make the Code more accessible.  The voluntary Code, which the... Read more

Addressing Gender-Based Online Harms: Ofcom’s New Draft Guidance Explained

On 25th February, Ofcom opened consultation on its draft guidance which addresses online safety for women and girls. This new guidance underscores the need for stronger actions to protect women and girls from the pervasive harms they... Read more 

A Shift in the Interpretation of Personal Data in the EU?

The recent opinion of the Attorney General (AG) in the European Data Protection Supervisor (EDPS) v. Single Resolution Board (SRB) case sheds light on important considerations on the scope of personal data under the EU’s General Data... Read more

Calculating GDPR fines for corporate groups: Lessons from the ECJ ILVA case

When it comes to fining regimes, deciding whether to set fines based on an entire group's turnover or only an infringing entity’s can have significant consequences. The ECJ’s recent ILVA A/S case (C-383/23) sends a clear message: large groups... Read more 

Excluding anticipated profits and savings: EE v Virgin Mobile

As businesses increasingly look to their tech providers to deliver costs savings, it is important to ensure that the exclusions and limitations of liability in those service contracts don’t inadvertently undermine the key commercial drivers... Read more 

Interaction of EU digital laws and regulators: EDPB and EDPS views

The European Data Protection Board (EDPB) and the European Data Protection Supervisor (EDPS) have separately weighed in with their thoughts on how the matrix of EU digital rules should be navigated. In the EDPS’s case, this takes the form of... Read more 

DP regulators focus on AI innovation and collaboration

It has been a busy start to the year in the AI space, with data privacy regulators under increasing pressure to balance promoting innovation (and the potential for AI-driven growth) with respect for data subjects’ rights. We discussed the latest... Read more 

Geo-blocking in the spotlight: European Commission launches evaluation of legal framework

On 11 February 2025, the European Commission announced the launch of its evaluation of Regulation (EU) 2018/30 on geo-blocking (the Regulation), starting with a call for evidence released on the same day. The Regulation, which prohibits traders... Read more