Alston & Bird Privacy, Cyber & Data Strategy Blog

Alice Portnoy

Avatar photo

About Alice Portnoy

Alice Portnoy is an associate in Alston & Bird’s Brussels office and a member of the Privacy, Cyber & Data Strategy Team. Alice focuses her practice on technology and data privacy matters with experience counseling national and international companies across the media and entertainment, pharma, scientific research, education, nonprofit, and food and retail sectors.

[Read Bio]

Belgian Data Protection Authority Publishes Guidance on the Interplay between the GDPR and the AI Act

By and

On 19 September 2024, the Belgian Data Protection Authority (DPA) issued new Guidance on the interplay between the recently adopted EU Regulation on Artificial Intelligence (the AI Act) and the General Data Protection Regulation (the GDPR), which aims to provide further insight into the use of artificial intelligence (AI) systems that process personal data. The […]

CBDF Research Fellow Theodore Christakis Publishes Study on Cross-Border Data Transfers and the EU’s “Zero Risk” Approach

By , and

Theodore Christakis, Professor of International Law at the University Grenoble Alpes and Senior Fellow and Director of Research for Europe at the Cross-Border Data Forum, has published a new comprehensive analysis on cross-border transfers of personal data and the EU’s data protection authorities’ “Zero Risk” theory developed since the CJEU Schrems II Judgment. Prof. Christakis looks […]

EU’s Highest Court Issues Major AI Decision With Wide-Reaching Impact

By , and

On 7 December 2023, the Court of Justice of the European Union (CJEU) issued an important decision on how the GDPR governs AI-assisted decisions. The case arose in the financial services context, with the court holding that the GDPR’s AI rules apply when banks use credit scores to make consumer credit decisions. But, the decision […]

UK Government Makes a Bridge to The EU-U.S. Data Privacy Framework

By and

On 21 September 2023, the UK Government adopted the Data Protection (Adequacy) Regulations 2023, also referred to as the “UK-U.S. Data Bridge”. The UK-U.S. Data Bridge will allow companies to legitimately transfer personal data from the UK to the U.S. on the basis of the recently enacted EU-U.S. Data Privacy Framework (“DPF”). The UK Government […]

International Data Transfers: European Commission Gives Green Light to EU-U.S. Data Privacy Framework

By , and

What Happened? On July 10, 2023, the European Commission (‘EC’) adopted its long-awaited adequacy decision approving the EU-U.S. Data Privacy Framework (‘DPF’). By doing so, the EC is confirming that personal data transferred to the U.S. under the DPF is adequately protected in line with the EU GDPR’s international data transfer rules. Transfers of personal […]