Skip to main content
Home > Insights > Tech Law Key Developments – January 2025

Tech Law Key Developments – January 2025

January 15th, 2025September 30th, 2025Marija NonkovicNo CommentsReading duration: 3 min

This month’s update from Marija Nonkovic’s on key tech law developments for the month ahead:

DateDescriptionFurther Information
1 January 2025CMA guidance on digital markets competition regime comes into forceLink to Guidance here
1 January 2025The digital markets and competition law sections of DMCC Act come into force through The Digital Markets, Competition and Consumers Act 2024 (Commencement No. 1 and Savings and Transitional Provisions) Regulations 2024Link to Regulations here
1 January 2025Critical Third Parties Regime comes into forceLink to CTP Regime here
17 January 2025The Online Safety Act 2023 (Commencement No 4) Regulations 2024 (SI 2024/1333) come into forceLink to Regulations here
17 January 2025DORA starts to applyLink to Regulation text here
21 January 2024Report Stage (1/2) for Data (Use and Access) BillLink to Parliament page here
28 January 2024Report Stage (2/2) for Data (Use and Access) BillLink to Parliament page here
27 January 2025Deadline for responses to EDPB consultation on guidelines on Article 48 GDPRLink to Consultation here
29 January 2025Deadline for responses to DSIT consultation on AI management self-assessment toolLink to Consultation here
31 January 2025Deadline for ICO consultation on revised approach to public sector regulationLink to Consultation here

In addition, here are some developments from December 2024 which weren’t captured in the last month’s update.

DateDescriptionFurther Information
2 December 2024Council of the EU formally adopted the Cyber Solidarity Act and Cybersecurity ActLink to press release here
3 December 2024National Cyber Security Centre published its annual reportLink to annual report here
3 December 2024EDPB published draft guidelines on Art.48 GDPR about data transfers to third country authoritiesLink to Guidelines here
3 December 2024ENISA published its first report on the state of cybersecurity in the EU in accordance with Article 18 of the NIS 2 DirectiveLink to Report here
10 December 2024ICO published report on outcome of generative AI consultation seriesLink to Report here
10 December 2024Online Safety Act 2023 (Commencement No 4) Regulations 2024 (SI 2024/1333) (Regulations) were madeLink to Regulations here
11 December 2024Deadline for European AI Office consultation on guidelines relating to EU AI ActLink to Consultation here
13 December 2024Public Authority Algorithmic and Automated Decision-Making Private Members’ Bill had its second reading in the House of LordsLink to Bill here
17 December 2024DSIT published consultation on proposals to give creative industries and AI developers clarity over copyright lawsLink to press release hereLink to Consultation here
17 December 2024Irish DPC fined Meta €251 MillionLink to press release here
17 December 2024The UK government published consultation on using copyright material to train AI modelsLink to Consultation here
17 December 2024EDPB adopted Opinion on the use of personal data for the development and deployment of AI modelsLink to Opinion here
19 December 2024CMA and ICO signed MoU in relation to Digital Markets, Competition and Consumers Act 2024Link to MoU here
20 December 2024Online Safety Act 2023 (Commencement No 4) Regulations 2024 (SI 2024/1333) were publishedLink to Regulations here
20 December 2024Ofcom published first-edition codes of practice and guidance on tackling illegal harmsLink to codes here

About the author

Marija is an Associate at Kemp IT Law, having joined the firm in September 2023. She advises a broad range of technology-driven businesses across the IT, digital and data sectors in relation to commercial, data protection and technology matters. Her experience includes drafting and advising on agreements for software licensing and development, IT managed services, and SaaS and other cloud based solutions.

Subscribe