In Arias v. Superior Court, 46 Cal. 4th 969 (2009), the California Supreme Court ruled that Private Attorneys General Act (PAGA) actions need not satisfy class action requirements, and in the fourteen years since, PAGA...more
On October 30, 2023, FERC accepted the California Independent System Operator Corporation’s (“CAISO”) revisions to its wheeling tariff provisions. The revised provisions allow external load serving entities to obtain, in...more
On 12 October the UK–U.S. “data bridge” becomes operational, providing an additional, compliant route for UK-outbound transfers of personal data to U.S. organisations that are EU-U.S. Data Privacy Framework members. UK...more
At Lighthouse our teams have the benefit of working across numerous clients, cases, and jurisdictions. As a result, we are building deep institutional knowledge across many aspects of eDiscovery that may be more difficult for...more
On 10 July 2023, the European Commission adopted its adequacy decision for the EU-U.S. Data Privacy Framework (“DPF”). The adequacy decision is designed to relieve U.S.-based businesses and other institutions and...more
On Aug. 9, the Commissioner of Data Protection of the Dubai International Financial Centre (DIFC) issued an “Assessment of California’s Data Protection Regime as Substantially Equivalent and Low Risk” (the Decision)...more
California is the first U.S. state to secure an adequacy decision from the Dubai International Financial Center Authority....more
The new framework provides an additional route for personal data transfers from the EEA to the US. On 10 July 2023, the European Commission (EC) took the final step to enable businesses to start relying on the new EU-US...more
The European Commission published a very significant adequacy decision last week, which is expected to facilitate transfers of personal information from Europe to the United States. The decision came as part of the...more
With data privacy landscapes changing around the globe, how can organizations handle cross-border deals while still remaining compliant? This has been a burning question over recent years....more
On July 10, 2023, the European Commission adopted an adequacy decision for the new EU-US Data Privacy Framework (“DPF”), the revamped transatlantic framework designed to support transfers of personal data from the EU to...more
On July 10, 1962, NASA launched Telstar 1, the first active communications satellite linking Europe and the United States through live television transmission. Sixty-one years later, on July 10, 2023, the European Commission...more
On July 10, 2023, the EU Commission approved the EU-U.S. Data Privacy Framework (“EU-US DPF”) as a valid transfer mechanism for sharing personal data from European Economic Area countries (those in the EU plus Iceland,...more
On July 10, 2023, the European Commission adopted its long-awaited adequacy decision for the EU-U.S. Data Privacy Framework (“Adequacy Decision”). This ends a three-year journey to set up a successor to the EU-U.S. Privacy...more
The road to the adoption of a lasting framework for EU-U.S data transfers has been anything but smooth. Much like its predecessor, Safe Harbor, the EU-U.S Privacy Shield met its end in 2020 when the Court of Justice of the...more
In light of the European Union Commission’s examination to renew the adequacy status granted to Israel in 2011, the Israeli Ministry of Justice has promulgated new privacy protection regulations, called “Provisions Regarding...more
Welcome to the latest edition of Updata! Updata is an international report produced by Eversheds Sutherland’s dedicated Privacy and Cybersecurity team – it provides you with a compilation of key privacy and cybersecurity...more
The First Circuit recently reversed the District of Massachusetts’s approval of a settlement award that improperly lacked any subclasses within the 4.8-million-person putative class, finding it “too difficult to determine...more
Two and a half years after the Schrems II decision invalidated the EU-US Privacy Shield, the EU and US are inching closer to a replacement data transfer mechanism for EU to US personal data transfers. On 13 December 2022, the...more
On December 13, 2022, the European Commission initiated the process to adopt an adequacy decision for the EU-U.S. Data Privacy Framework (“EU-U.S. DPF”). The draft adequacy decision follows President Biden’s October Executive...more
In order to satisfy the European Commission that Israel will continue to protect data about Europeans according to the European standards prescribed in the European General Data Protection Regulation (GDPR) as the data enters...more
In November 2022, the UK Government announced that it had put in place UK GDPR ‘adequacy regulations’ in respect of South Korea (the Republic of Korea (“ROK”)). These new regulations will allow UK based organisations to...more
The Data Protection Authority (“DPA”) of the German state Hamburg is one of the first European DPA to publish an optimistic assessment on the U.S. Executive Order on “Enhancing Safeguards for United States Signals...more
The Centers for Medicare & Medicaid Services (CMS) released the final 2023 Notice of Benefit and Payment Parameters (NBPP), the annual rule outlining key policies for the individual and group health insurance markets for plan...more
McGlinchey’s Commercial Law Bulletin is a biweekly update of recent, unique, and impactful cases in state and federal courts in the area of commercial litigation. We’re pleased to expand our Commercial Law Bulletin from its...more