Cross-jurisdictional data protection and AI overview – second edition

In today’s digital economy, strategic data governance is crucial for businesses of all sizes and operating in any industry. The General Data Protection Regulation (GDPR), which came into force in 2018, requires economical operators to structure procedures, documents, contractual relationships, etc. It has become fundamental pillar of the EU’s data strategy.

The GDPR is now being complemented by new European Acts that fall under the EU strategic plan for digital transformation. These include the Digital Markets Act and the Digital Services Act, which focus more on regulating the EU’s digital markets and operators of digital services. Other laws such as the Data Act, the Data Governance Act, the NIS-2 Directive or the AI Act, which is close to being officially published, focus on the use of data or place requirements on cyber security.

The common denominator in the emerging European legal framework is data, the protection of which remains a cornerstone in the European Union.

In order to comply with the applicable complex legal framework and to achieve effective data management within an organization, an integrated approach is therefore fundamental. Deloitte Legal is the ideal partner to steer your company through that challenge.

This document consolidates an overview across 16 global jurisdictions in the areas of data protection and data rights:

• The most relevant updates to data protection laws, regulations, guidelines, decisions and sanctions of the last months;
• The most relevant AI updates;
• selected upcoming developments in the data protection and AI fields foreseen by Deloitte Legal over the next months.

Deloitte Legal privacy and data protection teams can offer a variety of services, providing highly specialized consultancy in all economic sectors and for all sizes of companies and groups. This document also lists some of our cross-jurisdictional data protection and AI-related services.

^{Published: February 2024}