Insights
Search Results
News Articles
8.17.26
Lexology Pro Quotes Cédric Burton and Laura Brodahl on EU's Cyber Resilience Act Requirements
While the bulk of the EU Cyber Resilience Act's (CRA's) requirements won't take effect until December 2027, the reporting duty takes effect earlier, on September 11, 2026. Under this duty, affected companies must notify authorities and, in some cases, users, of any actively exploited vulnerabilities or severe incidents affecting their products within 24 hours of becoming aware. Wilson Sonsini attorneys Cédric Burton and Laura Brodahl weighed in on the practical implications for companies in Lexology Pro's recent article "Organisations Must Prepare for Mandatory 24-Hour Reporting Under EU Cyber Resilience Act," offering steps companies can take now to prepare.
Alerts
8.03.26
EU AI Act Enforcement Phase Begins
On August 2, 2026, the European Commission (EC), acting through its European AI Office (EU AI Office), became formally entitled to exercise its powers to investigate and enforce the EU AI Act obligations imposed on providers of general-purpose artificial intelligence (GPAI) models, as well as rules on prohibited AI practices. These powers are significant and include requesting information and documentation, obtaining access to models for evaluation, requiring corrective or risk-mitigation measures, and imposing fines of up to the higher of €15 million or 3 percent of the provider’s worldwide annual turnover.
Alerts
7.14.26
EU Commission Publishes AI Transparency Code of Practice
On June 10, 2026, the European Commission published a Code of Practice on marking and labeling of AI-generated content (the Code) following a public consultation that took place last year. The Code is divided into two sections:
Alerts
7.08.26
SCOTUS Ruling Calls into Question EU-U.S. Personal Data Flows
On June 29, 2026, the Supreme Court of the U.S. (SCOTUS) held in Trump v. Slaughter that the U.S. President can dismiss members of the Federal Trade Commission (FTC) at will, rather than only for cause, overruling existing precedent regarding independent agencies. This decision of domestic constitutional law could also change the rules governing transfer of personal data from the European Economic Area (EEA, which includes the 27 European Union countries plus Iceland, Liechtenstein, and Norway) to the U.S.
Bylined Articles
6.22.26
Wilson Sonsini Partners Co-Author Chapter in Third Edition of GCR Data & Antitrust Guide
Wilson Sonsini partners Cédric Burton, Deirdre Carroll, and Maneesha Mithal, along with associates Michelle Zang and Hattie Watson, and Gil Zhang and Michael Han of Fangda Partners, have co-authored a chapter in the third edition of the GCR Data & Antitrust Guide examining the accelerating convergence of data protection, competition, artificial intelligence (AI), and cybersecurity regulation across major jurisdictions. The chapter, “Regulators Target AI as Evolving Technology Threatens Fair Competition in the Digital Economy,” highlights a widespread recognition that traditional privacy and antitrust frameworks are increasingly insufficient on their own to address data-driven market power and AI-enabled competition concerns. In response, regulators are adopting a wide range of approaches, from sector-specific and self-regulatory models to highly prescriptive ex ante regimes.
Alerts
6.17.26
UK Announces Social Media Ban and Broader Online Restrictions for Users Under 16
On June 15, 2026, the UK government announced plans to introduce a social media ban for users under 16 (under-16s), alongside restrictions on features deemed harmful to minors, such as livestreaming and messaging functions, for a wider range of online services, including those in the gaming sector. These measures, which may require platforms active in the UK market to significantly alter their operations, are expected to come into force in Spring 2027.
Alerts
6.05.26
European Commission Publishes Proposal for Act to Reduce Reliance on Foreign Cloud and AI
On June 3, 2026, the European Commission (EC) released its first draft of a proposed Cloud and AI Development Act (Proposal or CADA), marking a significant step forward in the EU’s efforts to strengthen its digital infrastructure and reduce strategic dependence on non-EU cloud providers.
News Articles
5.08.26
Wilson Sonsini Attorneys Named to 2026 Lawdragon Leading Global Cyber Lawyers Guide
On May 8, 2026, Lawdragon announced its 2026 Lawdragon 500 Leading Global Cyber Lawyers guide, recognizing world leaders in privacy, data, security, and incident response, as well as the deals and lawsuits that revolve around all things cyber. The Wilson Sonsini attorneys named to the list included:
Alerts
5.05.26
What’s Next for Age Assurance Laws in Europe?
Developments in law, regulatory guidance, and enforcement practice across Europe are leading to meaningful changes in how online services are offered to minors. A steady stream of announcements in recent months makes clear that this area will continue to develop at pace, requiring providers of online services to keep their approach to age assurance under regular review.
Client Highlights
3.31.26
OpenAI Prevails in Landmark Italian AI and GDPR Enforcement Case
On March 18, 2026, the Court of Rome ruled in OpenAI’s favor, annulling a €15 million fine and an order requiring OpenAI to conduct a media campaign about AI model training that had been imposed by the Italian Data Protection Authority (Garante).
News Articles
3.26.26
Wilson Sonsini's Brussels Team Recognized in Legal 500 2026 EMEA Guide
On March 25, 2026, Wilson Sonsini was recognized as a leading law firm, ranked Tier 1, in Belgium for "EU Regulatory: Privacy and Data Protection" in the 2026 edition of The Legal 500's Europe, Middle East, and Africa (EMEA) guide. The annual guide ranks leading lawyers and law firms in countries across the jurisdictions.
News Articles
3.19.26
Wilson Sonsini’s Brussels Team Recognized in Chambers Europe 2026
On March 19, 2026, Chambers and Partners published its Chambers Europe 2026 guide, recognizing Wilson Sonsini’s Brussels office and attorneys among the leading lawyers and law firms across Europe. Wilson Sonsini’s Brussels team has been ranked in the “TMT: Data Protection” category. Additionally, Wilson Sonsini partners Cédric Burton, Yann Padova, and Laura De Boel have been individually ranked in the “TMT: Data Protection” category.