Please see the table below for an overview of key developments coming up in the month ahead.
| Date | Description | Further Information |
| 2 November 2024 | Deadline under the EU AI Act (Art 77(2)) for Member States to identify and publicly list the authorities / bodies responsible for fundamental rights protection, and to notify the Commission and other Member States | Link to EU AI Act text here |
| 8 November 2024 | Deadline for Bank of England’s call for interest in membership of Artificial Intelligence Consortium | Link to call for interest here |
| 18 November 2024 | European Data Protection Board (EDPB) to hold stakeholder event on the upcoming guidelines on the application of data protection legislation in the context of ‘Consent or Pay’ models. | Link to event page here |
| 20 November 2024 | Deadline for EDPB consultation on guidelines on processing of personal data based on Article 6(1)(f) GDPR (legitimate interests) | Link to consultation here |
In addition, here are some developments from October 2024 which weren’t captured in the last month’s update.
| Date | Description | Further Information |
| 7 October 2024 | ICO published new data protection audit framework | Link to press release here Link to toolkits here |
| 8 October 2024 | EDPB published guidance on legitimate interests (public consultation is ongoing until 20 November 2024) | Link to guidance here |
| 8 October 2024 | UK’s Department for Science, Innovation and Technology established a new Regulatory Innovation Office | Link to press release here |
| 9 October 2024 | EDPB adopted its Work Programme 2024-2025 | Link to Work Programme here |
| 9 October 2024 | ICO published a report setting out its early stage thinking on the intersection of quantum technologies and data protection | Link to report here |
| 10 October 2024 | Council of the EU formally adopted Cyber Resilience Act | Link to press release here Link to CRA text here |
| 10 October 2024 | EDPB published an Opinion on certain obligations following from reliance on the processors and subprocessors | Link to Opinion here |
| 10 October 2024 | First UK-US online safety agreement in relation to children’s safety was signed | Link to press release here |
| 10 October 2024 | EDPB chose topic for next year’s Coordinated Enforcement Action: implementation of the right to erasure (‘right to be forgotten’) by controllers | Link to press release here |
| 16 October 2024 | EDPB published version 2.0 of Guidelines 2/2023 on Technical Scope of Art. 5(3) of ePrivacy Directive following a public consultation | Link to Guidelines here |
| 17 October 2024 | Deadline for Member States to implement NIS 2 Directive | |
| 17 October 2024 | European Commission adopted Implementing Regulation on requirements for cybersecurity risk management measures and significant incidents under NIS 2 Directive | Link to press release here Link to the Implementing Regulation here |
| 18 October 2024 | NIS 2 Directive came into force | |
| 22 October 2024 | House of Lords European Affairs Committee provided its key conclusions and recommendations following its inquiry into UK-EU data adequacy | Link here |
| 23 October 2024 | DSIT published their Artificial Intelligence sector study 2023 | Link to study here |
| 23 October 2024 | Data (Use and Access) Bill was introduced to Parliament | Link to press release here |
| 30 October 2024 | UK government published its Autumn Budget 2024 | Link to press release here Link to Budget report here |
| 31 October 2024 | ICO published its response to the Data (Use and Access) Bill | Link to ICO response here |
