The Data Chronicles

There is no global playbook for AI regulation, and there may not even be a national one. In this episode of The Data Chronicles, we examine how approaches are diverging across the EU, the UK, and the United States. We look at whether the EU AI Act will become a global standard like the GDPR, how the US is building an AI accountability architecture based on existing law and self-regulation, and how the UK hopes to act as a broker between the two.

 

The discussion covers skepticism toward voluntary frontier AI commitments, enforcement under existing laws such as the GDPR, and the AI Act's high-risk requirements taking effect in December 2027. It closes with practical guidance for operating in shades of gray: address existing law, emerging law, and contractual risk now, and deploy AI deliberately.

APAC Spotlight is a podcast from the Hogan Lovells Cadwalader APAC Data, Privacy and Cybersecurity team, led by Charmian Aw, exploring the key developments shaping the region's fast-evolving digital regulatory landscape.
 
In this third episode of the series, Charmian Aw speaks to Hogan Lovells Cadwalader associate Florence Seow to tackle one of the most pressing challenges facing organizations today: incident response across APAC. As cyberattacks and data breaches become increasingly complex, businesses must navigate a fragmented web of privacy, cybersecurity, and sector-specific obligations across the region.
 
Charmian and Florence explore how notification thresholds differ across APAC jurisdictions and discuss why responding to an incident requires far more than simply understanding privacy laws. They also share practical perspectives on managing multi-jurisdictional incidents, coordinating regulators and stakeholders, and balancing speed, transparency, and accuracy during a crisis.
 
The key takeaway? Organizations should establish strong governance, clear decision-making structures, and robust response frameworks before a crisis occurs, while remaining agile enough to address local regulatory requirements as facts evolve.
 
Tune in to hear what businesses, legal teams, privacy professionals, and cybersecurity leaders need to know about managing cyber incidents and regulatory notifications across Asia-Pacific.

As data becomes an increasingly valuable business asset, organizations must navigate the growing intersection between data strategy and antitrust and competition law. In this episode of The Data Chronicles, Scott Loughlin sits down with Hogan Lovells Cadwalader counsel Bilal Sayyed, who advises a variety of clients on antitrust and competition matters, to explore how competition authorities are thinking about data in a digital economy where access to information can shape market outcomes.

They discuss when companies can limit access to data, why control of a valuable dataset does not necessarily create market power, and how regulators evaluate issues such as interoperability, exclusivity arrangements, and platform design. The conversation also examines how antitrust authorities assess mergers involving data assets, including whether combining datasets or acquiring critical data suppliers could affect innovation, competition, and future market entry.

Ultimately, Scott and Bilal highlight that antitrust questions are rarely about data alone. Instead, these questions tend to focus on whether companies are competing by building better products and creating value for customers or using control over data to make it more challenging for rivals. As regulators continue to scrutinize digital markets and AI-driven businesses, organizations must understand how their data strategies fit within an evolving regulatory and competition landscape.

APAC Spotlight is a podcast from the Hogan Lovells Cadwalader APAC Data, Privacy and Cybersecurity team, led by Charmian Aw, exploring the key developments shaping the region's fast-evolving digital regulatory landscape.

 

In this second episode of the series, Charmian Aw speaks to Hogan Lovells Cadwalader associate Ciara O’Leary – to tackle one of the biggest issues facing businesses today: AI regulation across APAC. While the EU AI Act has dominated headlines, jurisdictions across Asia-Pacific are taking very different approaches, ranging from China's extensive AI rules and South Korea's AI Basic Act to Singapore's voluntary governance frameworks and emerging laws in Vietnam and Thailand.

 

Charmian and Ciara bust common myths about AI regulation, explore the growing role of national security, data protection, and sector-specific rules, and discuss why EU AI Act compliance alone may not be enough for organizations operating across the region. They also share practical perspectives on navigating APAC's fragmented regulatory landscape as AI regulation continues to accelerate.

 

The key takeaway? There is no one-size-fits-all approach to AI compliance in APAC. Organizations should build a strong governance foundation but be ready to adapt to local requirements as the regulatory landscape evolves.

 

Tune in to hear what businesses, legal teams and technology professionals need to know about the future of AI regulation in Asia-Pacific.

AI is no longer just a legal technology or governance issue – it is increasingly an organizational transformation challenge. In this episode of The Data Chronicles, we sit down with Avi Goldfarb, the Rotman Chair in Artificial Intelligence and Healthcare at the University of Toronto and co-author of Prediction Machines and Power and Prediction, to examine why widespread AI pilots, strategies, deployed tools, and leadership attention have not yet produced the deeper business change many organizations expected.

 

We explore why simply giving teams access to AI tools is not the same as redesigning how a business works, how AI can shift decision-making power among employees, leaders, and vendors, and why organizations must decide what they value before letting external systems define success for them. Ultimately, the conversation reframes AI not as a machine that makes decisions for us, but as a powerful information technology whose transformative value depends on human judgment, clear KPIs, CEO-level commitment, and a deliberate understanding of what the organization is trying to accomplish.