Michiko Wongso – Debevoise Data Blog

Announcement

Debevoise Launches STAAR 2.0 to Help Clients Scale Their AI Adoption

By: Avi Gesser, Charu A. Chandrasekhar, Matt Kelly, Diane Bernabei, Melyssa Eigen, Joshua A. Goland, Kelvin Hawkins, Martha Hirst, Carl Lasker, Jeremy Liss, Amer Mneimneh, Joshua Plastrik, Achutha Raman, Jannely Rodriguez, Lily Schoen, Adam Shankman, Sharon Shaji, Ned Terrace, Stephanie Thomas, Michiko Wongso, Caroline Wallace, Ella Han, Devin Ford, Margot Mooney, Stan Gershengoren, Karen Levy, Carolyn Cecil, Thomas H. Fuell, Peter M. Neddo, Julius Mueller-Auffermann, Oleksiy Pikhmanets, Jinhee Ahn, Cierra Bakhsh, John Mark Ozaeta, William Sadd, Nithya Satiyaselan, Jonathan Schuman and Nicholas T. Ziebell March 9, 2026

Debevoise & Plimpton LLP announced the launch of STAAR 2.0, an enhanced version of its award-winning[1] client-facing AI platform designed to help in-house legal and compliance teams evaluate, govern, and…

Artificial Intelligence

The UK’s New Automated Decision-Making Rules – And How they Compare to the EU GDPR

By: Robert Maddox, Martha Hirst and Michiko Wongso November 19, 2025

This summer, the UK enacted the long-anticipated Data (Use and Access) Act 2025 (“DUAA”), the first major amendments to the UK’s data protection legislation since Brexit. The changes include substantial…

Artificial Intelligence

GDPR Considerations When Developing and Deploying AI Models: The EDPB’s Opinion on Compliance

By: Avi Gesser, Robert Maddox, Martha Hirst, Ned Terrace, Michiko Wongso and Olivia Halderthay April 14, 2025

Given that AI models require large swathes of data to operate, the GDPR’s expansive definition of personal data means that many applications of AI involve complex data protection issues –…

Artificial Intelligence

European Data Protection Roundup – February 2025

By: Robert Maddox, Michiko Wongso, Samuel Thomson, Jeevika Bali, Christina Newall, Olivia Halderthay, Mia Hermann and Dominic O'Leary March 31, 2025

Our top-five European data protection developments from February are: European Commission publishes guidelines on prohibited AI practices: The EU Commission has published non-binding guidance on the EU AI Act’s prohibited…

Artificial Intelligence

European Data Protection Roundup – Q4 2024

By: Robert Maddox, Johanna Skrzypczyk, Aisling Cowell, Stephanie Thomas, Michiko Wongso, Richard Blomqvist, Olivia Halderthay, Mia Hermann, Jeevika Bali, Samuel Thomson, Alexander McGinley, Christina Newall and Oliver Binns January 17, 2025

Our top-eleven European data protection developments for the end of 2024 are: EU Cyber Resilience Act: The Council of the European Union approved the Cyber Resilience Act, introducing cybersecurity requirements…

Artificial Intelligence

Top 10 (Well, 11) Cybersecurity Blog Posts for 2024

By: Charu A. Chandrasekhar, Luke Dembosky, Avi Gesser, Gareth Hughes, Erez Liebermann, Jim Pastore, Caroline Novogrod Swett, Marshal Bozzo, Matt Kelly, Robert Maddox, Johanna Skrzypczyk, HJ Brehmer, Stephanie Cipolla, Jackie Dorward, Melyssa Eigen, Joshua A. Goland, Martha Hirst, Karen Joo, Gabriel Kohan, Jarrett Lewis, Noah L. Schwartz, Ned Terrace, Stephanie Thomas, Annabella M. Waszkiewicz, Michiko Wongso and Mengyi Xu December 10, 2024

As we approach the end of the year, here are the Top 10 Cybersecurity posts on the Debevoise Data Blog in 2024 by page views. If you are not already…

Automated Decision Making

European Data Protection Roundup – May 2024

By: Robert Maddox, Friedrich Popp, Martha Hirst, Michiko Wongso, Anna Chirniciuc, Alexander McGinley, Deniz Tanyolac and Samuel Thomson June 27, 2024

Our top five European data protection developments from May are: UK guidance on ransom payments: The UK NCSC and various insurance industry bodies co-published guidance on key considerations for ransomware…

Artificial Intelligence

European Data Protection Roundup – April 2024

By: Robert Maddox, Friedrich Popp, Fanny Gauthier, Stephanie Thomas, Michiko Wongso, Oliver Binns, Anna Chirniciuc, Barney Lynock, Alfred Scott and Deniz Tanyolac May 28, 2024

Key takeaways from April include: UK FCA’s AI regulation: UK FCA-regulated firms should take note of the FCA’s newly confirmed approach to AI regulation that seeks to be outcome-focused, principle-led,…

Cybersecurity

EU Digital Operational Resilience Act (“DORA”): Incident and Cyber Threat Reporting and Considerations for Incident Response Plans

By: Robert Maddox, Stephanie Thomas, Annabella M. Waszkiewicz and Michiko Wongso May 13, 2024

With the EU Digital Operational Resilience Act (“DORA”) implementation deadline set for January 2025, many financial services firms are spending 2024 preparing for the new regime. Amongst many operational resilience…

CJEU

European Data Protection Roundup – March 2024

By: Robert Maddox, Friedrich Popp, Fanny Gauthier, Sophie Michalski, Michiko Wongso, Barney Lynock, Alexander McGinley, Deniz Tanyolac, Samuel Thomson and Alexia Turpin April 26, 2024

Key takeaways from March include: CNIL data security practice guide: The French DPA published an update of its data security practice guide for data protection officers, chief information security officers,…