The EU’s Artificial Intelligence (AI) Act marks a global first, introducing rules for the use and provision of AI systems. At the heart is a commitment to fostering trust in AI to unlock and maximise the vast social and ­economic possibilities offered by these technologies.

All companies face the risk of cyber-attacks. In general, the question is when and not if an attack will strike. Companies should therefore strengthen their cyber resilience and implement robust measures to be prepared to handle all aspects of an attack if/when it occurs.

On Friday 8 December, after 36 hours of trialogue negotiations, the European institutions finally reached agreement on the AI Act. A joint press conference was held on 9 December where the two  lead MEPs, the Secretary of State for digitalisation and artificial intelligence, and the EU Commissioner in charge presented the key elements of the agreement.

The proposal for regulating artificial intelligence by the European Commission marks a global first, introducing a comprehensive legal structure in this domain. This Act targets both AI system providers and users, emphasising significant penalties for non-compliance — potentially up to 40 million Euros or 7% of the total annual turnover. This underscores the importance of adherence to these regulations. At the heart of the Act is a commitment to fostering trust in artificial intelligence, a cornerstone deemed essential for unlocking and maximising the vast social and economic possibilities offered by AI technologies

As of today, the British decision to approve transfers to the USA comes into effect. This means that transfers to the USA are now legally permissible from both the United Kingdom and the European Union. The decisions currently in place likely also mean that further transfers from the USA can be accepted - these are known as onward transfers.

On 10 July 2023, the European Commission adopted its adequacy decision for the United States.

On 24 February 2023, the Cyber Administration of China ("CAC") issued measures containing a standard contract template for transfers of personal information, detailed guidelines including for a required impact assessment and a filing-requirement for transfers of personal information from China to other countries.

Employment Law

Artificial Intelligence

Consumer, marketing and e-commerce

Cyber Security

Life sciences and healthcare

Investigation and Crisis Management

Data Protection and GDPR

Information Technology

ESG, compliance and risk management

Partner

Gry is a leading lawyer within data protection and digitalization. She is the Head of the firm's Data Protection practice. Her practice also includes assisting clients within IT-law/information security, e- privacy law and marketing law. Gry also works with large and complex projects in the intersection between data protection and legislation concerning the use of personal data within specific sectors such as finance and health. 
 
Gry holds a unique combination of in-depth professional knowledge and a commercial mindset. She has 20 years of experience working as a data protection specialist in the Legislation Department in the Ministry of Justice, in Norway’s largest company Equinor and as a long-standing business lawyer.     
 
She advises leading corporations within a variety of sectors, including large group companies, and public authorities on all aspects related to data protection compliance, including the procurement, implementation and development of new technology and new products and services, including necessary agreement to cover the sharing and transfer of personal data. Over the last years her focus has expanded to include larger and more complex projects related to digital business development and the use of new technologies. 

Gry has assisted several international corporations with the implementation of BCR (Binding Corporate Rules). She also assists clients on a regular basis in relation to handling security incidents and with handling technology transactions. She often works in close cooperation with other Wikborg Rein teams such as Commercial property, Financial regulatory, Risk and crisis management and with our firm’s office in Shanghai.  

With a passion for the intersection between technology, law and business development, Gry takes a particular interest in understanding the client's business and in working closely with clients to find effective and business-oriented solutions.  She is a lecturer at Norwegian universities and a regular speaker at industry events. Gry is a member of the board of The Norwegian Association for Computers and Law (NFJE). She is also responsible for the Norwegian chapter in the International Comparative Legal Guide (ICLG) on Data Protection 2021.

Gry received appreciation as Next Generation Partner in the latest Legal 500 ranking.

Oslo

{"title":{"title":"Gry Hvidsten | Wikborg Rein"}}

Gry is a leading lawyer within data protection and digitalization.

Gry Hvidsten

Partner and Deputy of Technology and Digitalisation practice

Secretary for the Norwegian Advisory Council on Bankruptcy