Publications

• Debevoise Data Blog: ICO Dawn Raids: How to respond and what you can do to prepare – An FAQ
  25 September 2024
  Debevoise Data Blog
  Robert Maddox
  ,
  Aisling Cowell
• Debevoise Data Blog: European Data Protection Roundup – August 2024
  23 September 2024
  Debevoise Data Blog
  Robert Maddox
  ,
  Dr. Friedrich Popp
  ,
  Aisling Cowell
  ,
  Deniz Tanyolac
• Debevoise Data Blog: European Data Protection Roundup – July 2024
  27 August 2024
  Debevoise Data Blog
  Robert Maddox
  ,
  Dr. Friedrich Popp
  ,
  Stephanie D. Thomas
  ,
  Joshua Plastrik
  ,
  Theo Wilson
  ,
  Deniz Tanyolac
• Debevoise Data Blog: The EU’s Draft NIS2 Regulations: Appropriate ICT Security Measures and Serious Incident Reporting
  12 August 2024
  Debevoise Data Blog
  Robert Maddox
  ,
  Martha Hirst
• Debevoise Data Blog: European Data Protection Roundup – June 2024
  30 July 2024
  Debevoise Data Blog
  Robert Maddox
  ,
  Dr. Friedrich Popp
  ,
  Fanny Gauthier
  ,
  Sophie Michalski
  ,
  Deniz Tanyolac
• Debevoise Data Blog: The EU AI Act is Officially Passed – What We Know and What’s Still Unclear
  12 July 2024
  Debevoise Data Blog
  Avi Gesser
  ,
  Matt Kelly
  ,
  Robert Maddox
  ,
  Martha Hirst
• Debevoise Data Blog: European Data Protection Roundup – May 2024
  27 June 2024
  Debevoise Data Blog
  Robert Maddox
  ,
  Dr. Friedrich Popp
  ,
  Martha Hirst
  ,
  Michiko Wongso
• The UK’s Use of Competition and Consumer Laws to Regulate AI
  25 June 2024
  Avi Gesser
  ,
  Timothy McIver
  ,
  Robert Maddox
  ,
  Martha Hirst
• Debevoise Data Blog: European Data Protection Roundup - April
  28 May 2024
  Debevoise Data Blog
  Robert Maddox
  ,
  Dr. Friedrich Popp
  ,
  Fanny Gauthier
  ,
  Stephanie D. Thomas
  ,
  Michiko Wongso
• Debevoise Data Blog: EU Digital Operational Resilience Act (“DORA”): Incident and Cyber Threat Reporting and Considerations for Incident Response Plans
  13 May 2024
  Debevoise Data Blog
  Robert Maddox
  ,
  Stephanie D. Thomas
  ,
  Annabella M. Waszkiewicz
  ,
  Michiko Wongso
• Debevoise Data Blog: European Data Protection Roundup - March
  26 April 2024
  Debevoise Data Blog
  Robert Maddox
  ,
  Dr. Friedrich Popp
  ,
  Fanny Gauthier
  ,
  Sophie Michalski
  ,
  Michiko Wongso
• CLS Blue Sky Blog: Debevoise & Plimpton Discusses the EU Artificial Intelligence Act
  21 December 2023
  CLS Blue Sky Blog
  Avi Gesser
  ,
  Matt Kelly
  ,
  Robert Maddox
  ,
  Martha Hirst
  ,
  Samuel J. Allaman
• UK Financial Regulators Publish Response to AI Consultation—Seven Takeaways
  1 November 2023
  Avi Gesser
  ,
  Dr. Clare Swirski
  ,
  Robert Maddox
  ,
  Martha Hirst
• NYU: Eight GDPR Questions when Adopting Generative AI
  11 October, 2023
  NYU
  Avi Gesser
  ,
  Robert Maddox
  ,
  Dr. Friedrich Popp
  ,
  Martha Hirst
• Journal of Privacy and Data Protection: 8 Hallmarks of Effective Data Protection by Design and Default
  30 May 2023
  Journal of Privacy and Data Protection
  Robert Maddox
  ,
  Stephanie D. Thomas
• NYU Compliance & Enforcement: EU Digital Operational Resilience Act (DORA): Management Obligations and the Role of the Board
  24 April 2023
  NYU Compliance & Enforcement
  Robert Maddox
• Using Personal Devices for Business: What Should UK Firms Think About?
  14 April 2023
  Karolos Seeger
  ,
  Robert Maddox
  ,
  Aisling Cowell
  ,
  Andrew H. Lee
• The Drawdown: DORA – A Paradigm Shift
  13 March 2023
  The Drawdown
  Robert Maddox
• Compliance & Enforcement: Legal Risks of Using AI Voice Analytics for Customer Service
  11 January 2023
  Compliance & Enforcement
  Avi Gesser
  ,
  Johanna N. Skrzypczyk
  ,
  Robert Maddox
  ,
  Martha Hirst
• CLS Blue Sky Blog: Debevoise Discusses What the GDPR Can Tell Us About State Privacy Laws
  19 December 2022
  CLS Blue Sky Blog
  Robert Maddox
  ,
  Johanna N. Skrzypczyk
  ,
  Martha Hirst
• CLS Blue Sky Blog: Debevoise & Plimpton Discusses the EU AI Liability Directive’s Impact on Artificial Intelligence Legal Risks
  21 November 2022
  CLS Blue Sky Blog
  Avi Gesser
  ,
  Robert Maddox
  ,
  Michael Pizzi
• CLS Blue Sky Blog: Debevoise & Plimpton Discusses Executive Order Paving Way for New EU-U.S. Data Transfer Framework
  1 November 2022
  CLS Blue Sky Blog
  Robert Maddox
  ,
  Dr. Friedrich Popp
  ,
  Mengyi Xu
• The EU AI Liability Directive Will Change Artificial Intelligence Legal Risks
  24 October 2022
  Avi Gesser
  ,
  Robert Maddox
  ,
  Michael Pizzi
• Russian Data Protection Updates: Key Points for International Businesses
  13 September 2022
  Alan Kartashkin
  ,
  Jane Shvets
  ,
  Konstantin Bureiko
  ,
  Robert Maddox
• The Drawdown: Data, cyber security and AI compliance: managing the evolving landscape
  3 August 2022
  The Drawdown
  Robert Maddox
  ,
  Martha Hirst
• The Digital Markets Act—A New Era for “Big Tech”?
  29 July 2022
  Timothy McIver
  ,
  Robert Maddox
  ,
  Sergej Bräuer
  ,
  Anne-Mette Heemsoth
• NYU Compliance & Enforcement: New Automated Decision-Making Laws: Four Tips for Compliance
  29 June 2022
  NYU Compliance & Enforcement
  Avi Gesser
  ,
  Robert Maddox
  ,
  Mengyi Xu
  ,
  Samuel J. Allaman
• New Automated Decision-Making Laws: Four Tips for Compliance
  27 June 2022
  Avi Gesser
  ,
  Robert Maddox
  ,
  Samuel J. Allaman
  ,
  Mengyi Xu
• The Supreme Court’s Decision in Lloyd v Google: What Impact on UK Mass Claims?
  12 November 2021
  Lord Goldsmith KC
  ,
  Patrick Swain
  ,
  Christopher Boyne
  ,
  Conway Blake
  ,
  Robert Maddox
  ,
  Tom Cornell
  ,
  Mark McCloskey
  ,
  Sara Ewad
• 2021 Private Equity Midyear Review and Outlook
  22 July 2021
  Jonathan Adler
  ,
  Christopher Anthony
  ,
  Katherine Ashton
  ,
  Andrew L. Bab
  ,
  Megan K. Bannigan
  ,
  Sally Bergmann Hardesty
  ,
  David H. Bernstein
  ,
  Paul S. Bird
  ,
  Ezra Borut
  ,
  Geoffrey P. Burgess
  ,
  Jennifer L. Chu
  ,
  Matthew Dickman
  ,
  Christopher Dortschy
  ,
  E. Drew Dutton
  ,
  Jane Engelhardt
  ,
  Peter A. Furci
  ,
  Avi Gesser
  ,
  Jyotin Hamid
  ,
  Morgan J. Hayes
  ,
  Peter J. Irwin
  ,
  Meir D. Katz
  ,
  Rafael Kariyev
  ,
  M. Natasha Labovitz
  ,
  Maurizio Levi-Minzi
  ,
  Andrew M. Levine
  ,
  Sidney P. Levinson
  ,
  Jonathan F. Lewis
  ,
  Marc Ponchione
  ,
  Ryan T. Rafferty
  ,
  Paul D. Rubin
  ,
  Zachary H. Saltzman
  ,
  Kevin M. Schmidt
  ,
  Shannon Rose Selden
  ,
  Scott B. Selinger
  ,
  Steven J. Slutzky
  ,
  Ramya S. Tiller
  ,
  Richard Ward
  ,
  Patricia Volhard
  ,
  Franci J. Blassberg
  ,
  Jeffrey P. Cunard
  ,
  Andrew J. Gershon
  ,
  Stuart Hammer
  ,
  Jin-Hyuk Jang
  ,
  Kim T. Le
  ,
  Sheena Paul
  ,
  Tricia Bozyk Sherno
  ,
  Jacob W. Stahl
  ,
  Jennifer Wheater
  ,
  John Young
  ,
  Adam Aukland-Peck
  ,
  Dominic Blaxill
  ,
  Charles Cartiglia
  ,
  Robert T. Dura
  ,
  Paul Eastham
  ,
  Jay E. Evans
  ,
  David J. Hotelling
  ,
  Samuel D. Krawiecz
  ,
  Wen-Wei Lai
  ,
  Robert Maddox
  ,
  Sergio Torres
  ,
  Malina Welman
• Virginia Enacts a Comprehensive Privacy Law—Similarities and Differences Among VCDPA, CCPA and GDPR
  5 March 2021
  Avi Gesser
  ,
  Javier Alvarez-Oviedo
  ,
  Robert Maddox
  ,
  Tricia Reville
• FCPA Update February 2021
  26 February 2021
  Andrew M. Levine
  ,
  Winston M. Paes
  ,
  Karolos Seeger
  ,
  Jane Shvets
  ,
  Robert Maddox
  ,
  Dr. Friedrich Popp
• SEC Information Requests: UK Privacy Regulator Clarifies Position
  8 February 2021
  Karolos Seeger
  ,
  Jane Shvets
  ,
  Charu A. Chandrasekhar
  ,
  Robert Maddox
  ,
  Andrew H. Lee
  ,
  Martha Hirst
• Law360: 5 GDPR Compliance Tips From UK Ticketmaster Fraud Fine
  3 December 2020
  Law360
  Luke Dembosky
  ,
  Robert Maddox
• Companies Face Increased Sanctions Risk for Making Ransomware Payments — Takeaways from the Latest OFAC and FinCEN Advisories
  7 October 2020
  Luke Dembosky
  ,
  Avi Gesser
  ,
  Satish M. Kini
  ,
  Paul M. Rodel
  ,
  Martha Hirst
  ,
  Robert Maddox
  ,
  Mengyi Xu
• It’s Time to Take Credential Stuffing Seriously
  30 September 2020
  Avi Gesser
  ,
  Marc Ponchione
  ,
  Robert Maddox
• Compliance & Enforcement: Schrems II – Where are we now?
  5 August 2020
  Compliance & Enforcement
  Luke Dembosky
  ,
  Avi Gesser
  ,
  Jim Pastore
  ,
  Dr. Friedrich Popp
  ,
  Fanny Gauthier
  ,
  Robert Maddox
  ,
  Mengyi Xu
• Schrems II: Privacy Shield Invalid and Severe Challenges for Standard Contractual Clauses
  17 July 2020
  Jeffrey P. Cunard
  ,
  Luke Dembosky
  ,
  Avi Gesser
  ,
  Jim Pastore
  ,
  Dr. Thomas Schürrle
  ,
  Alexandre Bisch
  ,
  Fanny Gauthier
  ,
  Robert Maddox
  ,
  Dr. Friedrich Popp
• Five Key Proposals to Amend Singapore’s Data Protection Act
  22 May 2020
  Philip Rohlik
  ,
  Robert Maddox
  ,
  Hilary Davidson
• UK Supreme Court Rules Employer Not Liable for Rogue Employee’s Malicious Data Breach
  3 April 2020
  Karolos Seeger
  ,
  Jane Shvets
  ,
  Robert Maddox
• COVID-19: Three Data Protection Tips for the EU and the UK
  23 March 2020
  Avi Gesser
  ,
  Jane Shvets
  ,
  Alexandre Bisch
  ,
  Fanny Gauthier
  ,
  Robert Maddox
  ,
  Dr. Friedrich Popp
• Compliance & Enforcement: U.K. and U.S. Sign Landmark Cross-Border Data Sharing Agreement
  1 November 2019
  Compliance & Enforcement
  Karolos Seeger
  ,
  Jane Shvets
  ,
  Robert Maddox
• FCPA Update October 2019
  31 October 2019
  Kara Brockmeyer
  ,
  Andrew M. Levine
  ,
  Karolos Seeger
  ,
  Jane Shvets
  ,
  Robert Maddox
• U.K. and U.S. Sign Landmark Cross-Border Data Sharing Agreement
  9 October 2019
  Karolos Seeger
  ,
  Jane Shvets
  ,
  Robert Maddox
• Forget Me Not: ‘Right to be Forgotten’ Limited to the EU
  2 October 2019
  Jeffrey P. Cunard
  ,
  Luke Dembosky
  ,
  Dr. Thomas Schürrle
  ,
  Jane Shvets
  ,
  Jim Pastore
  ,
  Alexandre Bisch
  ,
  Robert Maddox
  ,
  Dr. Friedrich Popp
• Proposed £99 Million Marriott GDPR Data Breach Fine Underscores Importance of Cybersecurity in M&A
  16 July 2019
  Jeffrey P. Cunard
  ,
  Luke Dembosky
  ,
  Jim Pastore
  ,
  Paul M. Rodel
  ,
  Jane Shvets
  ,
  Keith J. Slattery
  ,
  Stephanie Cipolla
  ,
  Robert Maddox
• ICO Proposes £183m Fine for British Airways GDPR Breach
  9 July 2019
  Luke Dembosky
  ,
  Jim Pastore
  ,
  Dr. Thomas Schürrle
  ,
  Jane Shvets
  ,
  Alexandre Bisch
  ,
  Stephanie Cipolla
  ,
  Robert Maddox
  ,
  Dr. Friedrich Popp
• GDPR and Data Breach News: Are You Ready?
  5 March 2019
  Luke Dembosky
  ,
  Antoine F. Kirry
  ,
  Jim Pastore
  ,
  Dr. Thomas Schürrle
  ,
  Jane Shvets
  ,
  Alexandre Bisch
  ,
  Fanny Gauthier
  ,
  Robert Maddox
  ,
  Dr. Friedrich Popp
• GDPR Means Business: Google Hit with €50 Million Fine
  29 January 2019
  Antoine F. Kirry
  ,
  Dr. Thomas Schürrle
  ,
  Jane Shvets
  ,
  Fanny Gauthier
  ,
  Robert Maddox
• Uber Fined over $1.1Million by EU Data Protection Authorities: Six Lessons Learned
  17 December 2018
  Jane Shvets
  ,
  Robert Maddox
• New Guidance on the GDPR’s Territorial Scope – Are You Covered?
  30 November 2018
  Jane Shvets
  ,
  Robert Maddox
• Beyond The Headline Fines: Preparing For Post-GDPR ICO Scrutiny and Enforcement
  29 October 2018
  Global Data Review
  Karolos Seeger
  ,
  Jane Shvets
  ,
  Robert Maddox
• What Not to Expect When You’re Expecting: UK Company Fined for Selling Mother and Baby Personal Data
  14 August 2018
  Jane Shvets
  ,
  Robert Maddox
• FCPA Update June 2018
  Vol. 9, No. 11
  Andrew M. Levine
  ,
  Philip Rohlik
  ,
  Jane Shvets
  ,
  Robert Maddox
• GDPR Is Here: Now What?
  11 June 2018
  Jim Pastore
  ,
  Jane Shvets
  ,
  Robert Maddox
• GDPR: Should I Care?
  14 May 2018
  Jane Shvets
  ,
  Robert Maddox
• Legal precedent banks: it's nothing personal
  1 March 2018
  PLC
  Jane Shvets
  ,
  Robert Maddox
• UK Telecoms Retailer Fined for Data Security Failures – What Can Others Learn?
  18 January 2018
  Jim Pastore
  ,
  Jane Shvets
  ,
  Robert Maddox
• European Funds Comment: The Hidden Traps in Europe’s Impending Data Protection Revolution
  28 July 2017
  Issue 5
  Sally Gibson
  ,
  Geoffrey Kittredge
  ,
  Jane Shvets
  ,
  Patricia Volhard
  ,
  Robert Maddox
  ,
  John W. Rife III
• Petya Ransomware Attacks
  28 June 2017
  Luke Dembosky
  ,
  Mark Johnson
  ,
  Jim Pastore
  ,
  Jane Shvets
  ,
  Stephanie Cipolla
  ,
  Robert Maddox
• GDPR – 12 Months to Go – 10 Steps You Should Consider Now
  23 May 2017
  Pierre Clermontel
  ,
  Jim Pastore
  ,
  Dr. Thomas Schürrle
  ,
  Jane Shvets
  ,
  Fanny Gauthier
  ,
  Robert Maddox
  ,
  Dr. Friedrich Popp
• Global Ransomware Attack: Essential Steps To Manage The Risks
  14 May 2017
  Luke Dembosky
  ,
  Mark Johnson
  ,
  Jim Pastore
  ,
  Jane Shvets
  ,
  Stephanie Cipolla
  ,
  Robert Maddox
• UK Information Commissioner’s Office Issues GDPR Consent Guidance: What Business Should Know and Do
  7 March 2017
  Jane Shvets
  ,
  Robert Maddox
• Cybersecurity for Funds
  6 February 2017
  Luke Dembosky
  ,
  Jane Shvets
  ,
  Robert Maddox
• Seven Takeaways from the UK Government’s Cybersecurity Regulation and Incentives Review
  6 February 2017
  Luke Dembosky
  ,
  Jim Pastore
  ,
  Jane Shvets
  ,
  Robert Maddox
• French Parliament Adopts “Digital Republic” Bill: Greater Rights and Greater Risk
  30 November 2016
  Antoine F. Kirry
  ,
  Fanny Gauthier
  ,
  Robert Maddox
• UK Government Launches Five Year National Cyber Security Strategy
  2 November 2016
  Luke Dembosky
  ,
  Jim Pastore
  ,
  Jane Shvets
  ,
  Robert Maddox
• UK Telco Fined for Cyber Breach: Lessons Learned
  19 October 2016
  Luke Dembosky
  ,
  Jim Pastore
  ,
  Jane Shvets
  ,
  Robert Maddox
• SFC Cybersecurity Review of Internet/Mobile Trading Systems
  17 October 2016
  Luke Dembosky
  ,
  Mark Johnson
  ,
  Jim Pastore
  ,
  Robert Maddox
• Debevoise Publishes Spring 2016 Edition of UK, US and Hong Kong Banking Litigation, Regulatory and Competition Law Update
  April 2016
  Lord Goldsmith KC
  ,
  Karolos Seeger
  ,
  Christopher Boyne
  ,
  Robert Maddox
  ,
  Paul R. Berger
  ,
  Helen V. Cantwell
  ,
  Courtney M. Dankworth
  ,
  Eric Dinallo
  ,
  Mary Beth Hogan
  ,
  Robert B. Kaplan
  ,
  David A. O'Neil
  ,
  Jim Pastore
  ,
  Jonathan R. Tuttle
  ,
  Bruce E. Yannett
  ,
  Mark Johnson
  ,
  Philip Rohlik
  ,
  Emily Lam
  ,
  Timothy McIver
  ,
  Anne-Mette Heemsoth
• UK Getting More Serious About Sanctions
  27 April 2016
  Satish M. Kini
  ,
  Carl Micarelli
  ,
  Robert Maddox
• Debevoise Publishes UK, U.S. and Hong Kong Banking Litigation, Regulatory and Competition Law Update
  3 August 2015
  Mark Johnson
  ,
  Courtney M. Dankworth
  ,
  David A. O'Neil
  ,
  Tony Dymond
  ,
  Lord Goldsmith KC
  ,
  Christopher Boyne
  ,
  Helen V. Cantwell
  ,
  Eric Dinallo
  ,
  Mary Beth Hogan
  ,
  Jonathan R. Tuttle
  ,
  Bruce E. Yannett
  ,
  Karolos Seeger
  ,
  Robert Maddox
  ,
  Timothy McIver
  ,
  Anne-Mette Heemsoth
• UK Financial Conduct Authority Fines and Bans Two for LIBOR-Related Misconduct
  March 2015
  FCPA Update - Vol. 6, No. 8
  Karolos Seeger
  ,
  Robert Maddox
• FCPA Update - December 2014
  Volume 6, No. 5
  Andrew M. Levine
  ,
  Bruce E. Yannett
  ,
  Frederick T. Davis
  ,
  Paul R. Berger
  ,
  Karolos Seeger
  ,
  Robert Maddox
• FCA Enforcement Process Under Review
  4 June 2014
  Karolos Seeger
  ,
  Robert Maddox
• U.K. Financial Conduct Authority Imposes Fine on Besso Limited
  May 2014
  Financial Fraud Law Report
  Karolos Seeger
  ,
  Bruce E. Yannett
  ,
  Robert Maddox
• FCPA Update
  March 2014, Vol. 5, No. 8
  Andrew M. Levine
  ,
  Philip Rohlik
  ,
  Karolos Seeger
  ,
  Bruce E. Yannett
  ,
  Robert Maddox
• FCPA Update
  February 2014, Vol. 5, No. 7
  Karolos Seeger
  ,
  Bruce E. Yannett
  ,
  Robert Maddox
  ,
  Andrew M. Levine
• Introducers and Associated Corruption Risks in Commercial Broking
  25 February 2014
  Thomson Reuters Accelus
  Karolos Seeger
  ,
  Robert Maddox