Data Law Trends 2025: Leading the Change (Freshfields)

Summary

• AI-specific regulation is now in force across the EU and China, and planned in Brazil, Canada, South Korea, Thailand and Vietnam.p.5
• The EU AI Act is the world's first comprehensive AI-specific legislation.p.6
• 13% of S&P 500 companies have at least one director with AI expertise, rising to 30% in the IT sector and up to 60% in automotive.p.7
• 18% of the FTSE 100 have at least one director with AI expertise.p.7
• The report identifies eight key trends including AI governance, international data transfers and new cyber threats.p.2

Key insights

1. Pressure to develop AI governance frameworks comes from regulators, shareholders, customers and rising litigation risk.p.5
2. Financial regulators, particularly in the US, are clamping down on AI washing.p.8
3. The US is leading AI litigation with a number of class actions.p.8
4. Data protection authorities are particularly active in the AI space.p.8
5. Emerging global standards such as ISO/IEC JTC 1/SC 42 may serve as a badging of an organization's AI maturity.p.6