Article 37 of the General Data Protection Regulation (GDPR) obliges data controllers and processors to designate a data protection officer (DPO). As part of this obligation, data controllers and processors are also required to publish the contact details of the DPO and to communicate the DPO's contact details to relevant supervisory authorities. In part one of this Insight series, OneTrust DataGuidance focuses on the requirement to communicate DPO contact details to the relevant supervisory authorities, providing an overview on the rules and guidelines for DPO contact registration across Austria, Belgium, Bulgaria, Croatia, Czech Republic, Denmark, Estonia, Finland, France, Germany, and Greece.

The Personal Data Protection Law No. 6698 (the Law) is the main piece of legislation concerning the protection of personal data in Turkey, which covers the processing of personal data belonging to identified or identifiable individuals and governs the obligations imposed on individuals or legal entities processing such personal data. Deniz Tuncel, Partner at Hergüner Bilgen Üçer, looks at recent amendments to the Law and their impact on data transfers.

We are all aware artificial intelligence (AI) systems and AI-powered products are categorized as products, and that is what was respected in the EU Artificial Intelligence Act (the AI Act). AI is being deployed in multiple sectors of society and becoming an essential component for products, without which these would not be able to operate, but also AI applications have not fallen short of accidents and misuses.

In this Insight article, Spiros Tassis and Paolo Quattrone, from POTAMITISVEKRIS Law Partnership, will try to explain how the current and the scheduled EU product liability framework will interact with AI systems and the AI Act and explore how the AI Act Regulation deals with the topic of product liability. This is done to determine what is currently leading the EU's choices. Additionally, to understand the relationship of the AI Act with product liability, we shall explore the changes in the legislative landscape of the Union and the threat AI poses to consumers, as well as the focus points the EU Commission should consider.

ISO 42005 is an emerging standard poised to play a pivotal role in the global artificial intelligence (AI) governance ecosystem. As AI continues to rapidly evolve, businesses face increasing pressure to align with regulations, standards, and best practices, ensuring ethical, transparent, and risk-conscious AI deployments. In this Insight article, Sean Musch, CEO of AI & Partners, and Charles Kerrigan, Partner at CMS Cameron McKenna Nabarro Olswang LLP, aim to help businesses understand ISO 42005, its significance, and how they can integrate it into their operations to stay ahead of regulatory demands and competitive pressures.