14
Sat, Jun
52 New Articles

In our previous practice, we have assisted clients in the course of implementation of AI systems (“AIS”), i.e., assessment of the impact of risks of AIS, especially in the medical and research sector. While working on these projects, we came to the conclusion that many companies overlook obligations or are not even aware of risks for safety, health and fundamental human rights which are tied to the implementation and use of high-risk AIS and can result in significant compliance risks under the applicable legal framework.

As part of the broader effort to harmonise national legislation with the EU General Data Protection Regulation, the Albanian Data Protection Commissioner issued Instruction No. 2, dated 30 April 2025 (Instruction No. 2), on the protection of personal data in the health sector. This Instruction repeals the previous 2020 framework and establishes a comprehensive set of rules governing the collection, use, and disclosure of health and genetic data.

The Law on the Protection of Personal Data ("Official Gazette of RS", No. 87/2018) - hereinafter: "the Law", and following the example of the Regulation (EU) - 2016/679 - General Data Protection Regulation ("GDPR"), introduced the term and consequently the function – Data Protection Officer ("DPO").

The data subject has the right to access the data processed by the controller about them, a right guaranteed by both the EU General Data Protection Regulation (“GDPR”) of April 14, 2016, which came into force on May 25, 2018, and the Law on Personal Data Protection of the Republic of Serbia.

On 14 May 2025, significant changes were made to North Macedonia’s personal data protection legislation. The Assembly of the Republic passed an amendment to expand the nations where personal data can be shared freely, without facing third-country transfer restrictions.

Following up on the CJEU's judgment of 9 January 2025, C-416/23, Österreichische Datenschutzbehörde (Demandes excessives), the Austrian Supreme Administrative Court addressed excessive and manifestly unfounded data subject requests to data protection supervisory authorities in six cases (VwGH 29 January 2025, Ra 2023/04/0002; Ra 2022/04/0049; Ro 2023/04/0018; Ro 2022/04/0016; Ro 2022/04/0022; Ra 2020/04/0084). The Austrian Federal Administrative Court added another decision on such requests (BVwG 11 March 2025, W137 2305838-1).

More Articles ...

  1. Carbon Footprint Under Scrutiny: Can Banks Track the Environmental Impact of Their Clients' Payments
  2. Cyber Fraud Cases and Methods Increase During Periods of Uncertainty. What Are the Steps To Follow If You Have Been a Victim of the New Smishing Attacks?
  3. GDPR Fines and Data Breach Trends in the CEE Region
  4. The Court vs. "Mr." and "Mrs."
  5. Nearly EUR 6 Billion in Fines Since the GDPR
Page 1 of 15
Teodorescu Partners
BSLaw
ProLawyer
Five-O-Eight

Our Latest Issue