News & Analysis as of

Data Processors Corporate Counsel

Alston & Bird

EU Data Protection Regulators Publish Additional Guidance On The EU-U.S. Data Privacy Framework

Alston & Bird on

Last month, the European Data Protection Board – which is composed of the national data protection authorities (‘Supervisory Authorities’) of the countries in the European Economic Area (‘EEA’), as well as the European Data...more

Baker Donelson

Colorado Enacts BIPA-Like Regulatory Obligations (and More), Ushering in a New Era of Biometrics Regulation in the U.S.

Baker Donelson on

In late April, Colorado took a major step toward adding further complexity to the already fragmented U.S. biometrics legal landscape with the passage of HB 1130. The bill, which amends the Colorado Privacy Act (CPA), is...more

Jackson Lewis P.C.

Bluegrass State Becomes Third State to Pass a Comprehensive Consumer Privacy Data Law in 2024

Jackson Lewis P.C. on

On April 4, 2024, Kentucky’s Governor signed House Bill 15, which establishes a consumer data privacy law for the state. The state joins New Hampshire and New Jersey in passing comprehensive consumer privacy laws in 2024....more

Husch Blackwell LLP

New Jersey Legislature Passes Consumer Data Privacy Bill

Husch Blackwell LLP on

Keypoint: New Jersey is the thirteenth state to pass consumer data privacy legislation with a bill that is generally based on the Washington Privacy Act model but with some notable differences. On January 8, 2024, the New...more

Morgan Lewis

New EU Data Act: Impact On Data Flows Within And Outside The EU’s Borders

Morgan Lewis on

The Council of the European Union adopted the Data Act on November 27, 2023. The Data Act, together with the Data Governance Act and EU General Data Protection Regulation (GDPR), as key elements of the broader European data...more

Davis Wright Tremaine LLP

Delaware's New Personal Data Privacy Act

The Delaware Personal Data Privacy Act (DPDPA or Act) became law on September 11, 2023, making Delaware the 13th state to enact a comprehensive consumer data privacy law, joining California, Virginia, Colorado, Connecticut,...more

WilmerHale

Delaware Makes a Dozen States with a Comprehensive Privacy Law

WilmerHale on

On June 30, the Delaware legislature passed the Personal Data Privacy Act (“the Act”). The Act now moves to the Delaware Governor’s desk for consideration and, if signed into law, will make Delaware the seventh state this...more

Latham & Watkins LLP

CNIL Fines Adtech Giant for Unlawful Data Processing

Latham & Watkins LLP on

The French Data Protection Authority has imposed a €40 million fine for GDPR infringements. On 15 June 2023 the French Data Protection Authority (the CNIL), acting as Lead Supervisory Authority pursuant to the cooperation...more

Fisher Phillips

FAQs for Businesses as Texas Passes Consumer Privacy Legislation

Fisher Phillips on

Texas became the latest state to pass comprehensive consumer data privacy and security legislation when Governor Abbot signed the Texas Data Privacy and Security Act into law on June 18. It will require businesses to take...more

Fisher Phillips

Florida Likely to Join Growing Trend with Digital Bill of Rights: Top 9 Questions for Businesses

Fisher Phillips on

Florida is expected to be the tenth state to pass comprehensive consumer privacy legislation. The Florida Digital Bill of Rights was approved by the state legislature earlier this month and is expected to soon be signed by...more

Benesch

Montana and Tennessee Join the Fray Enacting Omnibus Data Protection Laws as U.S. State Data Protections Pick Up Pace

Benesch on

Montana and Tennessee are the latest states to pass data protection laws under a “controller” and “processor” model as 2023 is proving to be a year of Privacy and Security overhaul. With 2023 showing no signs of slowing...more

Alston & Bird

International Data Transfers: Lessons from the EDPB’s “101 Task Force”

Alston & Bird on

​​​​​​​In August 2020, privacy activist organization NOYB – European Center for Digital Rights filed 101 complaints with the EU Supervisory Authorities (‘SAs’) in connection with the transfer of personal data from Europe to...more

WilmerHale

Italy’s Privacy Regulator Takes Action Against ChatGPT

WilmerHale on

On March 31, 2023, Italy’s privacy regulator (the “Garante”), announced an immediate temporary limitation on the processing of data of individuals residing in Italy by OpenAI’s ChatGPT, the popular artificial intelligence...more

Ogletree, Deakins, Nash, Smoak & Stewart,...

Bill in U.K. Parliament Would Facilitate Certain Types of Data Processing by Redefining ‘Personal Data’ Parameters

On March 8, 2023, the Data Protection and Digital Information (No. 2) Bill was introduced to the UK Parliament by the Department for Science, Innovation and Technology (DSIT). If enacted, the Bill will make changes to the UK...more

Wilson Sonsini Goodrich & Rosati

CJEU Finds That Companies Must Provide Individuals with the Identity of Data Recipients When Responding to Data Access Requests

On January 12, 2023, the Court of Justice of the European Union (CJEU) ruled that the data subject’s right of access to personal data requires controllers to provide the data subject with the identity of the companies that...more

Alston & Bird

AI Regulation in the U.S.: What’s Coming, and What Companies Need to Do in 2023

Alston & Bird on

Artificial intelligence (AI) is expanding into more industries (often in surprising ways) and has inevitably caught the attention of federal and state regulators. Our Privacy, Cyber & Data Strategy Team summarizes the...more

Morgan Lewis

China Releases Standard Contractual Clauses for Cross-Border Data Transfers

Morgan Lewis on

The Cyberspace Administration of China released for public consultation its long-awaited template for the cross-border data transfer agreement on June 30, 2022, under the draft Provisions on the Prescribed Agreement on...more

BakerHostetler

International Data Protection Update - Winter 2021/2022

BakerHostetler on

This Update highlights some of the international data protection issues that caught our attention and the attention of our clients over the winter, including updates on European data transfers and cookie compliance,...more

Orrick, Herrington & Sutcliffe LLP

6 Things You Need to Know About United Kingdom (UK) International Data Transfers

In February 2022, the United Kingdom (UK) Information Commissioner’s Office (“ICO”), along with the data protection authority (“DPA”) in the UK, published three new documents ("UK Documents") which update the UK's position on...more

BCLP

BCLP Global Data Privacy FAQs: What counts as a “transfer” of data under the EU GDPR? New draft EU Guidelines released

BCLP on

It is well known that the EU GDPR (specifically, Chapter V) restricts transfers of personal data from the EU to a “third country” (i.e. a jurisdiction outside the EEA) or to an international organisation. But what is meant by...more

K&L Gates LLP

What Multinational Companies Need to Know about Collecting Personal Information from Their Employees in China

K&L Gates LLP on

The Personal Information Protection Law (PIPL), which is considered the first comprehensive law on personal information protection in People’s Republic of China (PRC or China), came into effect on 1 November 2021. Prior to...more

Polsinelli

Five Immediate Steps to Take in Preparation for China’s New Comprehensive Privacy Law

Polsinelli on

China has recently joined the list of countries that have adopted the world’s strictest data-privacy laws. Given China’s desirability as both a market for and a source of data, companies worldwide have started making early...more

Alston & Bird

September 27 Deadline Looming for EU Standard Contractual Clauses

Alston & Bird on

On June 4th, the European Commission issued modernized Standard Contractual Clauses (SCCs) under the EU General Data Protection Regulation (GDPR) for data transfers from controllers or processors in the EU/EEA (or otherwise...more

Hogan Lovells

The journey has just begun: China passes its Personal Information Protection Law

Hogan Lovells on

On 20 August 2021, China’s National People’s Congress passed the Personal Information Protection Law (PIPL). The PIPL has a rapid timeframe for implementation, taking effect on 1 November 2021. The brief transition period...more

Morgan Lewis

Personal Information Protection Law: China’s GDPR Is Coming

Morgan Lewis on

China’s long-awaited Personal Information Protection Law (PIPL), after two rounds of draft versions, was finally passed by the Standing Committee of the National People's Congress on August 20, 2021, with the law effective...more

76 Results
 / 
View per page
Page: of 4

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
- hide
- hide