On 30 June 2022, the EDPB published the documents adopted during its 66th plenary session....more
On 16 June 2022, the Canadian Minister of Innovation, Science and Industry and Minister of Justice and Attorney General of Canada introduced the Digital Charter Implementation Act 2022 to modernise the regulation on...more
On 23 May 2022, the data privacy activist group ‘none of your business’ (noyb) published an open letter on the planned EU-US data transfer deal. ...more
On 6 April 2022, the European Parliament adopted the draft Data Governance Act (the DGA), following trilogue negotiations between EU legislators....more
On 6 April 2022, following the announcement of the political agreement on a new EU-US Trans-Atlantic Data Privacy Framework having been reached between the European Commission and the United States on 25 March 2022, the...more
On 4 March 2022, the European Data Protection Board (EDPB) published a final version of its Guidelines on Codes of Conduct as tools for transfers of personal data to third countries (Guidelines), adopted during the EDPB...more
On 2 February 2022, the Department for Digital, Culture, Media and Sport (DCMS) laid before Parliament the international data transfer agreement (IDTA), the international data transfer addendum to the European Commission’s...more
On 2 December 2021, the Court of Justice of the European Union (CJEU) published the Advocate General’s (AG) opinion in case C-319/20 (Facebook Ireland) (the AG Opinion) relating to the issue of whether Member State law may...more
On 24 November 2021, the DCMS announced a new bill that would require manufacturers, importers and distributors of digital tech products (including physical shops and online retailers) to ensure that consumer...more
In the past two weeks, there has been significant progress in relation to a number of pieces of proposed EU legislation relating to data protection, data governance, and digital markets....more
On 3 November 2021, the Committee of Ministers of the Council of Europe (the Committee) adopted Recommendation CM/Rec (2021)8 on the protection of individuals with regard to automatic processing of personal data in the...more
On 22 October 2021, the UK government’s Department for International Trade announced that the G7 countries (Canada, France, Germany, Italy, Japan, the UK and the US) had agreed a set of Digital Trade Principles at the G7...more
On 19 October 2021, the European Data Protection Board (EDPB) announced that it has published its final guidelines on the restrictions under Article 23 GDPR (Guidelines) following the end of its public consultation and...more
On 1 October 2021, the Council of the European Union (Council) reached agreement about the text of the proposed European Commission Data Governance Act (DGA) and issued a mandate to the EU Presidency to start trilogue...more
On 22 September 2021 the UK Government published its promised National Artificial Intelligence (AI) Strategy, coming on the back of a raft of related plans, strategies and roadmaps, such as 2020’s National Data Strategy, the...more
On 9 September 2021, the UK’s Digital Secretary, Oliver Dowden, announced a series of reforms to drive innovation and growth in the UK’s data sector. The Government clarifies that one of the key objectives of the reforms is...more
On 15 July 2021, the European Data Protection Board (the EDPB) issued a press release concerning its first urgent binding decision adopted under Article 66(2) GDPR (the Decision) in response to a request of the Hamburg...more
The UK Department for Digital, Culture, Media & Sport (DCMS) published a policy paper (on 6 July 2021) in connection with the UK Government’s Plan for Digital Regulation now that the UK has exited the EU. The paper, Digital...more
The European Data Protection Board (EDPB) published its long-awaited final Recommendations on measures that supplement data transfer tools (the Recommendations), following the Schrems II decision of the CJEU (on 18 June...more
On 28 June 2021, just two days before the interim EU-UK data transfer “bridging mechanism” expired under the Trade and Cooperation Agreement, the European Commission (EC) adopted two adequacy decisions for the UK to...more
The Standing Committee of the National People’s Congress of the People’s Republic of China (NPC) announced the adoption of the new Data Security Law (the Law), which will regulate broadly defined data processing activities...more
On 19 May 2021, the European Data Protection Board (EDPB) held its plenary session with a busy agenda. The first outcomes of the plenary have now been published by the EDPB....more
On 27 April 2021, the supervisory authority of Portugal (CNPD) issued a resolution that required the National Institute of Statistics (INE) to suspend, within twelve hours, the transfer of data collected as part of the 2021...more
On 14 April 2021, the European Data Protection Board (EDPB) announced the outcomes of its 48th plenary session held on 13 April 2021. ...more
In the past weeks, there have been a number of developments related to the consequences of the European Union Court of Justice (CJEU) decision in Schrems II. The most noteworthy developments are summarised below....more