Clifford Chance

The recent (and sizeable) GDPR fines on Ticketmaster, British Airways and Marriott: What they tell us about cyber readiness strategies that can be deployed before, during and after a cyber incident?

The Schrems II ruling means that personal data can no longer be lawfully transferred to the US under the EU-US Privacy Shield programme. What are the alternatives when transferring data to countries outside the EU?

As cyber attacks increase around the globe, regulators are responding with new cyber and data laws.

AI creates opportunities but also the potential for significant legal, ethical and reputational exposure. Here are the key regulatory developments, thoughts on tools to assess risk. and practical guidance on making AI governance an integral part of your compliance framework.