Automated Decision Making – Debevoise Data Blog

Artificial Intelligence

Debevoise Data Blog: Top 14 AI Posts of 2025

By: Charu A. Chandrasekhar, Andrew J. Ceresney, Courtney M. Dankworth, Avi Gesser, Robert B. Kaplan, Gordon Moodie, Jim Pastore, Julie M. Riewe, Jeff Robins, Kristin Snyder, Matt Kelly, Johanna Skrzypczyk, Karen Levy, Diane Bernabei, Michael Bloom, HJ Brehmer, Suchita Mandavilli Brundage, Melyssa Eigen, Joshua A. Goland, Martha Hirst, Gabriel Kohan, Carl Lasker, Jeremy Liss, Andreas Constantine Pavlou, Joshua Plastrik, Achutha Raman, Adam Shankman, Stephanie Thomas, Nathaniel Waldman, Annabella M. Waszkiewicz, Stan Gershengoren, William Sadd, Nicholas T. Ziebell, Patty (Virtual AI Specialist) and Sergio (Virtual AI Specialist) December 8, 2025

Why Agentic AI Often Fails and the Enduring Value of Human Judgment (11/4/2025) We’ve been doing a lot of work recently on agentic AI workflows. In this post, we share…

Artificial Intelligence

The UK’s New Automated Decision-Making Rules – And How they Compare to the EU GDPR

By: Robert Maddox, Martha Hirst and Michiko Wongso November 19, 2025

This summer, the UK enacted the long-anticipated Data (Use and Access) Act 2025 (“DUAA”), the first major amendments to the UK’s data protection legislation since Brexit. The changes include substantial…

Artificial Intelligence

AI Discrimination Risk in Lending: Lessons from the Massachusetts AG’s Recent $2.5 Million Settlement

By: Avi Gesser, Johanna Skrzypczyk, Stephanie Thomas, Melyssa Eigen and Achutha Raman July 20, 2025

Using AI to make important decisions about individuals carries a risk of bias, especially for underwriting, credit, employment, and educational admission decisions. In this Debevoise Data Blog post, we discuss…

Automated Decision Making

CPPA Proposed Rulemaking Package Part 2 – Automated Decision-Making Technology

By: Avi Gesser, Matt Kelly, Johanna Skrzypczyk, HJ Brehmer, Amer Mneimneh, Ned Terrace and Mengyi Xu February 13, 2025

In Part 1 of this series, we discussed the annual cybersecurity audit requirements in the proposed rulemaking package (the “Draft Regulations”) of the California Privacy Protection Agency (the “CPPA”). In…

Artificial Intelligence

European Data Protection Roundup – July 2024

By: Robert Maddox, Friedrich Popp, Stephanie Thomas, Joshua Plastrik, Theo Wilson, Barney Lynock and Deniz Tanyolac August 27, 2024

Our top five European data protection developments from July are: EU AI guidance: Businesses should consider reviewing their AI policies and practices following guidance from the French CNIL and the…

Artificial Intelligence

Guidelines on the Use of Generative AI Tools by Professionals from the American Bar Association

By: Avi Gesser, Erez Liebermann, Michelle Huang and Joshua A. Goland August 5, 2024

On July 29, 2024, the Standing Committee on Ethics and Professional Responsibility of the American Bar Association (“ABA”) published Formal Opinion 512, providing guidance on the ethical use of generative…

Automated Decision Making

European Data Protection Roundup – June 2024

By: Robert Maddox, Friedrich Popp, Fanny Gauthier, Sophie Michalski, Léa Lascoux, Deniz Tanyolac and Samuel Thomson July 30, 2024

Our top five European data protection developments from June are: Non-material damage under GDPR: The CJEU clarified the scope of compensation for non-material damage in the context of identity theft…

Automated Decision Making

European Data Protection Roundup – May 2024

By: Robert Maddox, Friedrich Popp, Martha Hirst, Michiko Wongso, Anna Chirniciuc, Alexander McGinley, Deniz Tanyolac and Samuel Thomson June 27, 2024

Our top five European data protection developments from May are: UK guidance on ransom payments: The UK NCSC and various insurance industry bodies co-published guidance on key considerations for ransomware…

Automated Decision Making

Debevoise Attorneys Recognized in The Legal 500 for Cyber Law

By: Luke Dembosky, Avi Gesser, Erez Liebermann, Jim Pastore, Matt Kelly, Johanna Skrzypczyk and Christopher S. Ford June 17, 2024

Luke Dembosky, Avi Gesser, Erez Liebermann, Jim Pastore, Matt Kelly, and Johanna Skrzypczyk were all recognized by The Legal 500 US in the category Cyber Law (Including Data Privacy and Data…