Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile
Articles by Tim Hickman
EU agrees Digital Omnibus deal to simplify AI rules
On 7 May 2026, the European Parliament and the Council of the EU (the "Council") reached a provisional agreement on the Digital Omnibus on AI (the "AI Omnibus") – a package of targeted amendments to the EU AI Act.1 Although not yet formally adopted, the agreement provides greater certainty to businesses by signalling, for example, that key enforcement deadlines for certain rules relating to high-risk AI systems will be extended.
AI Watch: Global regulatory tracker - OECD : The OECD's Recommendation on Artificial Intelligence encourages Member States to uphold principles of trustworthy AI.
Laws/Regulations directly regulating AI (the “AI Regulations”) The OECD Council's Recommendation on Artificial Intelligence1 (the "Recommendation") adopted by 49 adherents2 as of April 2026 (the "Adherents"), contains: The OECD's AI Principles (the "Principles") , which were the first intergovernmental standard on AI and formed the basis for the G20's AI Principles; and Five recommendations to be implemented in the Adherents' national policies and which, together with the Principles, aim at...
Mutual adequacy between the EU and Brazil: A new era for transatlantic data transfers | JD Supra
[co-authors: Emily Digby*, Ciro Torres Freitas**, Laura Bottega Eskudlark***) On 27 January 2026, the European Commission (EC) and Brazil announced mutual adequacy decisions, thereby allowing personal data to flow between the European Economic Area (EEA) and Brazil without restriction.1 The decisions offer greater certainty to businesses with cross-border data flows between the EEA and Brazil, eliminating the need for additional international transfer safeguards (such as the EU Standard...
EU Digital Omnibus: What Changes Lie Ahead For The Data Act, GDPR and AI Act | JD Supra
On 19 November 2025, the European Commission published the long-awaited Digital Omnibus, an initiative to streamline and update key pillars of the EU's digital legal framework – especially the Data Act, the General Data Protection Regulation and the AI Act. The main drivers behind this initiative were the need to simplify overlapping regulations, reduce compliance burdens for businesses, and ensure greater legal clarity across the European Union.
GDPR Under Revision: Key Takeaways From the Digital Omnibus Regulation Proposal | JD Supra
On 19 November 2025, the European Commission published its Digital Omnibus Package (the "Package"), setting out proposed amendments to the EU's digital regulatory framework as part of a broader simplification and competitiveness initiative.
AI Watch: Global regulatory tracker - United Nations (UPDATED) | JD Supra
The UN's AI resolutions encourage Member States to adopt national rules to establish safe, secure and trustworthy AI systems and create forums to advance global cooperation, scientific understanding, and share best practices Laws/Regulations directly regulating AI (the “AI Regulations”) On March 21, 2024, the United Nations (UN) adopted a draft resolution on AI, entitled "Seizing the opportunities of safe, secure and trustworthy artificial intelligence systems for sustainable development"...
AI Watch: Global regulatory tracker - United Kingdom (UPDATED) | JD Supra
Laws/Regulations directly regulating AI (the “AI Regulations”) The UK government's AI Regulation White Paper1 of August 3, 2023 (the "White Paper") and its written response of February 6, 2024 to the feedback it received as part of its consultation on the White Paper (the "Response")2 both indicate that the UK does not intend to enact horizontal AI regulation in the near future.
AI in the Boardroom: Privilege and Recording Decisions | JD Supra
In the context of a growing spotlight on AI, we are fielding increased questions from general counsel and corporate secretaries around how companies can adopt AI within the Boardroom, whilst managing the legal risks associated with it.
AI Watch: Global regulatory tracker - European Union - Update | JD Supra
The EU introduces the pioneering EU AI Act, aiming to become a global hub for human-centric, trustworthy AI. Laws/Regulations directly regulating AI (the “AI Regulations”) The primary legislative framework for regulating AI in the EU is the EU AI Act (here). Our EU AI Act Handbook is available here.
Uncertainty in the UK GDPR consent framework | JD Supra
July 16, 2025 To embed, copy and paste the code into your website or blog: The High Court's decision in RTM [2025] EWHC 111 (KB) raises several questions around the future of consent under the UK GDPR. Key takeaways The Court introduces a novel three-part test for assessing consent, incorporating subjective and autonomy-based elements beyond the legislative text of the UK GDPR,1 existing case law, and regulatory guidance on this issue.
Data with destiny: European AI M&A heats up as the race for dominance intensifies | JD Supra
With industries embracing this evolving technology, Europe is determined not to be left behind, and dealmakers are paying close attention Europe’s artificial intelligence industry is gaining traction but has struggled to step out of the shadows of the US’s ongoing sprint for global supremacy. Illustrating this dominance, AI-first companies globally attracted US$110 billion in venture capital in 2024, with the US claiming 74 percent of it.
AI Watch: Global regulatory tracker - OECD | JD Supra
The OECD's AI recommendations encourage Member States to uphold principles of trustworthy Laws/Regulations directly regulating AI (the “AI Regulations”) The OECD's Recommendation of the Council on Artificial Intelligence1 (the "Recommendation") adopted by 46 governments2 as of July 2021 (the "Adherents"), contains: The OECD's AI Principles (the "Principles"), which were the first intergovernmental standard on AI and formed the basis for the G20's AI Principles3 Five recommendations to be...
AI Watch: Global regulatory tracker - Kenya (UPDATED) | JD Supra
Laws/Regulations directly regulating AI (the “AI Regulations”) Between January 14 and January 19, 2025, the Ministry of Information, Communications, and Technology (the "Ministry") held a consultation on a draft of Kenya's National Artificial Intelligence (AI) Strategy 2025-2030.
AI Watch: Global regulatory tracker - European Union | JD Supra
The EU introduces the pioneering EU AI Act, aiming to become a global hub for human-centric, trustworthy AI. Laws/Regulations directly regulating AI (the “AI Regulations”) The primary legislative framework for regulating AI in the EU is the EU AI Act (here). The EU also proposed the AI Liability Directive, which had been designed to sit alongside the EU AI Act and address some of the challenges that arise from inconsistent liability regimes across the EU, in the context of AI.
Energy efficiency requirements under the EU AI Act | JD Supra
The rapid proliferation of AI technologies in recent years has led to a growing demand for energy-intensive data centers and high-performance hardware. Laws seeking to regulate AI, such as the EU AI Act, increasingly include rules regarding energy consumption and transparency that will impact businesses developing or using AI technologies. Calculating AI's global energy consumption precisely is challenging because accurate data on energy consumption is not readily available.
AI Watch: Global regulatory tracker - United Kingdom | JD Supra
The UK prioritizes a flexible framework over comprehensive regulation and emphasizes sector-specific laws. Laws/Regulations directly regulating AI (the “AI Regulations”) The UK government's AI Regulation White Paper1 of August 3, 2023 (the "White Paper") and its written response of February 6, 2024 to the feedback it received as part of its consultation on the White Paper (the "Response")2 both indicate that the UK does not intend to enact horizontal AI regulation in the near future.
AI Watch: Global regulatory tracker - European Union | JD Supra
Status of the AI Regulations The EU AI Act was published in the EU Official Journal on July 12, 2024, and is the first comprehensive horizontal legal framework for the regulation of AI across the EU. The EU AI Act entered into force on August 1, 2024, and will be effective from August 2, 2026,1 except for the specific provisions listed in Article 113.
AI Watch: Global regulatory tracker - United Kingdom | JD Supra
The UK prioritizes a flexible framework over comprehensive regulation and emphasizes sector-specific laws. Laws/Regulations directly regulating AI (the “AI Regulations”) The UK government's AI Regulation White Paper1 of August 3, 2023 (the "White Paper") and its written response of February 6, 2024 to the feedback it received as part of its consultation on the White Paper (the "Response")2 both indicate that the UK does not intend to enact horizontal AI regulation in the near future.
Long awaited EU AI Act becomes law after publication in the EU’s Official Journal | JD Supra
July 17, 2024 Tim Hickman, Aishwarya Jha, Dr. Sylvia Lorenz, Dr. Constantin Teetzmann White & Case LLP + Follow x Following x Following - Unfollow Contact To embed, copy and paste the code into your website or blog: On 12 July 2024, the European Union's Artificial Intelligence Act, Regulation (EU) 2024/1689 ("EU AI Act") was published in the EU Official Journal, making it the first comprehensive horizontal legal framework for the regulation of AI systems across the EU.
Long awaited EU AI Act becomes law after publication in the EU’s Official Journal
On 12 July 2024, the European Union's Artificial Intelligence Act, Regulation (EU) 2024/1689 ("EU AI Act") was published in the EU Official Journal, making it the first comprehensive horizontal legal framework for the regulation of AI systems across the EU. The EU AI Act enters into force across all 27 EU Member States on 1 August 2024, and the enforcement of the majority of its provisions will commence on 2 August 2026.
AI Watch: Global regulatory tracker - Kenya | JD Supra
Laws/Regulations directly regulating AI (the “AI Regulations”) There are currently no specific laws or regulations in Kenya that directly regulate AI. Status of the AI Regulations As indicated above, there are currently no specific laws or regulations in Kenya that directly regulate AI. However, the Ministry of Information, Communications and The Digital Economy (ICT) is working with different stakeholders to spearhead the development of a National AI Strategy (the "AI Strategy").
AI Watch: Global regulatory tracker - Nigeria | JD Supra
June 19, 2024 To embed, copy and paste the code into your website or blog: Nigeria's draft National AI Policy underway and will pave the way for a comprehensive national AI strategy. Laws/Regulations directly regulating AI (the “AI Regulations”) There is currently no specific law or regulation that directly regulates AI in Nigeria.
AI Watch: Global regulatory tracker - Norway | JD Supra
Position paper informs Norwegian approach to AI, with sector-specific legislative amendments to regulate developments in AI. Laws/Regulations directly regulating AI (the “AI Regulations”) Currently, there are no specific laws, statutory rules, or regulations in Norway that directly regulate AI.
AI Watch: Global regulatory tracker - OECD | JD Supra
The OECD's AI recommendations encourage Member States to uphold principles of trustworthy AI.
AI Watch: Global regulatory tracker - Nigeria
Laws/Regulations directly regulating AI (the “AI Regulations”) There is currently no specific law or regulation that directly regulates AI in Nigeria. However, the National Information Technology Development Agency (NITDA) announced in 2022 that it was seeking the contributions of stakeholders to enable the development of the National Artificial Intelligence Policy (NAIP). In March 2023, the NITDA announced that it had completed the first draft of the NAIP.
El puente de datos entre el Reino Unido y los Estados Unidos y sus implicaciones para las organizaciones del Reino Unido
El puente de datos entre el Reino Unido y los Estados Unidos ya está en vigor. Como resultado, las organizaciones del Reino Unido pueden transferir datos personales a organizaciones estadounidenses que se hayan autocertificado según el Marco de Privacidad de Datos (DPF) UE-EE.UU. sin necesidad de implementar salvaguardias adicionales. ¿Qué es el puente de datos y qué busca abordar?
AI Watch: Global regulatory tracker - United Nations | JD Supra
The UN's new draft resolution on AI encourages Member States to implement national regulatory and governance approaches for a global consensus on safe, secure and trustworthy AI systems. Laws/Regulations directly regulating AI (the “AI Regulations”) The United Nations (UN) adopted a draft resolution on AI, entitled "Seizing the opportunities of safe, secure and trustworthy artificial intelligence systems for sustainable development" (the "Resolution") on March 21, 2024.
AI Watch: Global regulatory tracker - G7 | JD Supra
The G7's AI regulations mandate Member States' compliance with international human rights law and relevant international frameworks.
AI Watch: Global regulatory tracker - European Union | JD Supra
The EU introduces the pioneering EU AI Act, aiming to become a global hub for human-centric, trustworthy AI. Laws/Regulations directly regulating AI (the “AI Regulations”) The primary legislative proposal for regulating AI in the EU is the EU AI Act (here) and current text (here). The EU has also proposed the AI Liability Directive (here) which is designed to ensure that liability rules are appropriately applied to AI-related claims.
AI Watch: Global regulatory tracker - Council of Europe | JD Supra
May 16, 2024 To embed, copy and paste the code into your website or blog: The Council of Europe is developing a new Convention on AI to safeguard human rights, democracy, and the rule of law in the digital space covering governance, accountability and risk assessment.
AI Watch: Global regulatory tracker | JD Supra
The global dash to regulate AI Artificial intelligence (AI) has made enormous strides in recent years and has increasingly moved into the public consciousness. Increases in computational power, coupled with advances in machine learning, have fueled the rapid rise of AI. This has brought enormous opportunities, as new AI applications have given rise to new ways of doing business.
AI Watch: Global regulatory tracker - Norway
Currently, there are no specific laws, statutory rules, or regulations in Norway that directly regulate AI. Norway is not expected to enact its own comprehensive AI legislation, with the exception of the EU AI Act, which is expected to become Norwegian law in the same manner as for all European Economic Area (EEA) Member States.
AI Watch: Global regulatory tracker - OECD
Laws/Regulations directly regulating AI (the “AI Regulations”) The OECD's Recommendation of the Council on Artificial Intelligence1 (the "Recommendation") adopted by 46 governments2 as of July 2021 (the "Adherents"), contains: The OECD's AI Principles (the "Principles"), which were the first intergovernmental standard on AI and formed the basis for the G20's AI Principles3 Five recommendations to be implemented in the Adherents' national policies and international cooperation for trustworthy...
AI Watch: Global regulatory tracker - G7
The G7 nations have progressed the Hiroshima AI Process Comprehensive Policy Framework, which consists of four pillars: (i) the International Guiding Principles for Organizations Developing Advanced AI Systems (the "Guiding Principles");1 (ii) the International Code of Conduct for Organizations Developing Advanced AI Systems (the "Code of Conduct")2 designed to supplement the Guiding Principles and provide voluntary guidance to organizations developing Advanced AI systems; (iii) analysis of...
AI Watch: Global regulatory tracker - United Nations
Laws/Regulations directly regulating AI (the “AI Regulations”) The United Nations (UN) adopted a draft resolution on AI, entitled "Seizing the opportunities of safe, secure and trustworthy artificial intelligence systems for sustainable development" (the "Resolution") on March 21, 2024.
AI Watch: Global regulatory tracker - European Union
Laws/Regulations directly regulating AI (the “AI Regulations”) The primary legislative proposal for regulating AI in the EU is the EU AI Act (here) and current text (here). The EU has also proposed the AI Liability Directive (here) which is designed to ensure that liability rules are appropriately applied to AI-related claims. Status of the AI Regulations The EU AI Act has now been finalized and was endorsed by all 27 EU Member States on February 2, 2024.
The UK-US data bridge and its implications for UK organizations
The UK-US data bridge is now in effect. As a result, organizations in the UK can transfer personal data to US organizations that have self-certified to the EU-US Data Privacy Framework (DPF) without needing to implement additional safeguards. What is the data bridge, and what does it seek to address?
UK's Context-Based AI Regulation Framework: The Government's Response | JD Supra
March 1, 2024 Tim Hickman, Aishwarya Jha, Jaak Poldma, Jenna Rennie White & Case LLP + Follow x Following x Following - Unfollow Contact To embed, copy and paste the code into your website or blog: White & Case Tech Newsflash In March 2023, the UK government published the AI Regulation White Paper (the White Paper), setting out its proposed regulatory framework for AI.1 Unlike the EU's AI Act, which will create new compliance obligations for a range of AI actors (such as providers, importers,...
The pre-final text of the EU’s AI Act leaked online | JD Supra
February 7, 2024 Clare Connellan, Clara Hainsdorf, Tim Hickman, Dr. Sylvia Lorenz, Jenna Rennie White & Case LLP + Follow x Following x Following - Unfollow Contact To embed, copy and paste the code into your website or blog: White & Case Tech Newsflash On January 22, 2024, the pre-final text of the European Union's Artificial Intelligence Act ("EU AI Act") – the world's first comprehensive horizontal legal framework for the regulation of AI systems across the EU – leaked online as an...
The pre-final text of the EU’s AI Act leaked online
On January 22, 2024, the pre-final text of the European Union's Artificial Intelligence Act ("EU AI Act") – the world's first comprehensive horizontal legal framework for the regulation of AI systems across the EU – leaked online as an 892-page table comparing different mandates of the EU AI Act, followed by a 258-page document setting out the consolidated text. The upcoming law has now been finalized and was endorsed by all 27 EU Member States on February 2. What's new?
The UK-US Data Bridge: How to Simplify Transfers Across the Atlantic
The UK-US Data Bridge was brought into effect in October 2023, with the aim of simplifying data transfers across the Atlantic. It allows UK organizations to send personal data to US organizations that have signed up, without the need for additional compliance mechanisms that would otherwise be required. The Data Bridge and its Intended Purpose The Data Bridge seeks to make it much simpler for UK organizations to send personal data to some organizations based in the US.
Dawn of the EU's AI Act: political agreement reached on world's first comprehensive horizontal AI regulation
On Friday, December 8, 2023 – after months of intensive trilogue negotiations – the European Parliament and Council reached political agreement on the European Union's Artificial Intelligence Act ("EU AI Act").
The Data Act – the EU's bid to "ensure fairness in the digital environment and a competitive data market" – has been adopted | JD Supra
November 30, 2023 Hope Anderson, Clara Hainsdorf, Tim Hickman, Dr. Sylvia Lorenz, Jenna Rennie White & Case LLP + Follow x Following x Following - Unfollow Contact To embed, copy and paste the code into your website or blog: On November 27, 2023, the European Union ("EU") adopted the final text of the Data Act, marking an effort to create a harmonized, cross-sectoral data sharing framework with the stated goal of ensuring fair access to and use of data.
The UK-US Data Bridge: Practical Considerations for UK Organisations | JD Supra
October 13, 2023 To embed, copy and paste the code into your website or blog: The UK-US Data Bridge (the "Data Bridge") has now come into effect, potentially simplifying transfers of personal data from the UK to the US. On 12 October 2023, the Data Bridge took effect.
US and EU Approve Framework for Personal Data Transfers | JD Supra
The United States ("U.S.") and the European Union ("EU") have settled on a framework for transfers of personal data for the first time since the European Court of Justice ("CJEU") effectively invalidate the EU-U.S. Privacy Shield in July 2020. Chapter V of Regulation (EU) 2016/679 (the "GDPR") imposes restrictions on cross-border transfers of personal data to recipients located outside the European Economic Area ("EEA").
US and EU Approve Framework for Personal Data Transfers
The United States ("U.S.") and the European Union ("EU") have settled on a framework for transfers of personal data for the first time since the European Court of Justice ("CJEU") effectively invalidate the EU-U.S. Privacy Shield in July 2020. Chapter V of Regulation (EU) 2016/679 (the "GDPR") imposes restrictions on cross-border transfers of personal data to recipients located outside the European Economic Area ("EEA").
Data Protection Laws and Regulations Report 2025 The Rapid Evolution of Data Protection Laws
Privacy and data protection laws are continuing to adapt to fit an ever-changing world. The evolution of these laws has been especially remarkable over the last two decades. The highly networked and interconnected world in which we live today was merely a glimmer on the horizon in the mid-1990s. The internet itself was still a fairly new innovation to many people. Many businesses did not yet have public websites.
Somewhere Between a Summary and a Data Dump - CJEU Finds Controllers Must Provide Data Subjects a “Faithful And Intelligible” Copy of Their Personal Data | White & Case LLP - JDSupra
The Court of Justice of the EU (CJEU)1 has held that the General Data Protection Regulation (GDPR) requires controllers to provide data subjects a "faithful reproduction" of their personal data, which takes into account the rights of others and includes any additional information that is "essential" to enable the data subject to exercise their data protection rights. This means that a raw data dump is unlikely to be compliant in many cases.
Somewhere Between a Summary and a Data Dump - CJEU Finds Controllers Must Provide Data Subjects a “Faithful And Intelligible” Copy of Their Personal Data
The Court of Justice of the EU (CJEU) has held that the General Data Protection Regulation (GDPR) requires controllers to provide data subjects a "faithful reproduction" of their personal data, which takes into account the rights of others and includes any additional information that is "essential" to enable the data subject to exercise their data protection rights. This means that a raw data dump is unlikely to be compliant in many cases.
Civil Plaintiffs Must Prove GDPR Damages, says CJEU | JD Supra
The Court of Justice of the European Union (CJEU)1 ruled out automatic damages awards for civil litigants establishing infringements of the General Data Protection Regulation (GDPR). At the same time, the CJEU suggested that Member State courts should compensate any sufficiently proven non-material damage claim, however minor.
Show More
loading
Actions
Is this you?
As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.Get in touch with Tim
Contact Tim, search articles and posts on X, monitor coverage, and track replies from one place.
Learn more about Muck Rack