New European Union Data Protection Laws in 2024

Clive Mackintosh, a seasoned lawyer, data protection expert and CEO of GDPR Representative services firm GDPR Rep, explores the European Union data protection laws introduced in 2024.

The European Union (EU) has introduced significant new regulations that organisations must navigate to meet compliance. These changes are part of the EU’s ongoing efforts to enhance data protection and privacy for individuals.

One of the most notable changes is the introduction of the EU AI Act, which became law on 1st August 2024. This sets out a comprehensive framework for the use of artificial intelligence systems across the EU. Its purpose is to control the development of AI technologies ensuring they are proportionate to the risks they pose, in particular to health, safety, and fundamental rights as they relate to protecting an individual’s rights.

The EU has also proposed the introduction of the Cyber Resilience Act, which seeks to bolster cyber security measures across various sectors. This will be particularly relevant to organisations involved in the production, import or distribution of smart technologies and products.

These changes have a significant impact on UK organisations that offer goods or services to individuals in the EU as they will be required to comply with these new laws.

Both EU and UK organisations should conduct thorough assessments of their data protection practices and implement necessary changes. This should include updating privacy policies, improving cyber security procedures, and, most of all, ensuring that any use of AI systems is compliant. 

Organisations should also appoint an EU/UK GDPR representative to facilitate communications with the relevant supervisory authority and data subjects.

Non-compliance can result in significant penalties and the reputational damage associated with data breaches or misuse of AI can be severe.

GDPR Rep is on a mission to help every business achieve and fulfil data protection obligations including EU and UK GDPR, FADP and other international requirements including PDPA.

If you are looking into how your organisation can fulfil its requirements why not schedule a no-commitment call with a GDPR representative expert today, or get a quote to understand how our value pricing makes compliance simple.

‍