On April 15, 2026, the European Data Protection Board (EDPB) adopted guidelines on the processing of personal data for scientific research purposes.[1] The guidelines aim to clarify GDPR compliance requirements for scientific research involving personal data.
Continue Reading Key Takeaways From the EDPB’s Draft Guidelines on Scientific Research
GDPR vs. the hosting defence: How wary should online platforms be of the EU Court of Justice Russmedia judgment?
CJEU ruling heralded as “landmark” GDPR judgment turns on a specific set of facts and requires careful interpretation in the post-DSA regulatory reality.
Continue Reading GDPR vs. the hosting defence: How wary should online platforms be of the EU Court of Justice Russmedia judgment?AI-Enabled Cyber Intrusions: What Two Recent Incidents Reveal for Corporate Counsel
This article was authored by Daniel Ilan, Rahul Mukhi, Prudence Buckland, and Melissa Faragasso from Cleary Gottlieb, and Brian Lichter and Elijah Seymour from Stroz Friedberg, a LevelBlue company.
Recent disclosures by Anthropic and OpenAI highlight a pivotal shift in the cyber threat landscape: AI is no longer merely a tool that aids attackers, in some cases, it has become the attacker itself. Together, these incidents illustrate immediate implications for corporate governance, contracting and security programs as companies integrate AI with their business systems. Below, we explain how these attacks were orchestrated and what steps businesses should consider given the rising cyber risks associated with the adoption of AI.
Continue Reading AI-Enabled Cyber Intrusions: What Two Recent Incidents Reveal for Corporate Counsel