News & Analysis as of October 19, 2024

General Data Protection Regulation (GDPR)

+ Follow

The European Union is an economic and political partnership comprised of 27 nations within the Eurozone. The EU was established in 1948 to promote stability and cooperation among member states in the aftermath of WWII. The EU maintains a common currency as well as several intranational institutions, including the European Parliament and the European Commission. less -

Data Act Frequently Asked Questions Answered by the EU Commission

DLA Piper on 9/26/2024

The EU Data Act is one of the cornerstones of the EU's Data Strategy and introduces a new and horizontal set of rules on data access and use to boost the EU's data economy. Most of the provisions of the Data Act will become...more

Buckle Up: Uber Fined €290M for Failing to Safeguard EU Data Transfers

Baker Botts L.L.P. on 8/27/2024

The Dutch Data Protection Authority (Autoriteit Persoonsgegevens, or AP) has issued a €290 million fine to Uber for violating the EU’s General Data Protection Regulation (GDPR)....more

International Transfers of Personal Data After Schrems II: Practical Compliance Steps

Ogletree, Deakins, Nash, Smoak & Stewart,... on 6/27/2024

Quick Hits Schrems II Recap Most people are now familiar with the Schrems II requirements to “know your transfers” and to protect personal data when such information is subject to processing (including remote access to...more

Data Privacy Guide - Portugal

International Lawyers Network on 5/7/2024

Introduction - Data protection is being driven by rapid technological advances and the increasing digitalization of society. Data protection legislation in Portugal is aligned with European Union law, in particular with...more

CBDF Research Fellow Theodore Christakis Publishes Study on Cross-Border Data Transfers and the EU’s “Zero Risk” Approach

Alston & Bird on 2/21/2024

Theodore Christakis, Professor of International Law at the University Grenoble Alpes and Senior Fellow and Director of Research for Europe at the Cross-Border Data Forum, has published a new comprehensive analysis on...more

Privacy & Cybersecurity Update - July 2023

Skadden, Arps, Slate, Meagher & Flom LLP on 8/2/2023

In this month’s Privacy & Cybersecurity Update, we examine the newly established data privacy framework between the EU and U.S. and new consumer privacy laws in Oregon and Texas. We also review a court ruling that delayed...more

Data Transfer Déjà Vu: European Commission Approves Another EU-U.S. Data Transfer Mechanism

Vinson & Elkins LLP on 7/14/2023

On July 10, 2023, the European Commission (the “Commission”) adopted an adequacy decision for the EU-U.S. Data Privacy Framework (the “Framework”). The Framework provides companies that opt in with a legitimate means of...more

European Commission Adopts EU-U.S. Data Privacy Framework Adequacy Decision

Wiley Rein LLP on 7/11/2023

On July 10, 2023, the European Commission adopted an adequacy decision regarding the EU-U.S. Data Privacy Framework (Framework). The adequacy decision procedure was established by the European Union’s (EU) General Data...more

EDPB Adopts Binding Corporate Rules Recommendations

Sheppard Mullin Richter & Hampton LLP on 7/6/2023

As those in the privacy world await the outcome of the EU-US privacy framework negotiations, the EDPB was in the news recently for a different mechanism for data transfers: Binding Corporate Rules. Namely, it adopted...more

Mega Fine for Meta: $1.3 Billion Penalty Imposed for Data Privacy Violations

Vinson & Elkins LLP on 6/9/2023

The European Union’s (“EU”) Data Protection Commission (the “Commission”) recently fined Meta Ireland $1.3 billion (or €1.2 billion) for improper data transfers from the European Economic Area (“EEA”) to the United States in...more

Ireland’s Data Protection Commission, Meta and Art 49 Derogations: An Overview

Fox Rothschild LLP on 5/31/2023

Ireland’s Data Protection Commission has fined Meta €1.2 billion. What, however, did the commission say in the case about using Art 49 derogations for transfers to the U.S.? An overview: I will discuss the Meta decision...more

Anonymization and the GDPR – Clarity from the European Courts? Not so Fast!

Foley Hoag LLP - Security, Privacy and the... on 5/19/2023

As we’ve written about before, the question of anonymization can be tricky. When is something “anonymized” or merely “de-identified” or “pseudonymous” — and when does it matter? This is a particularly fraught issue under...more

CJEU clarifies GDPR obligation to disclose details of recipients

White & Case LLP on 1/18/2023

The GDPR allows individuals to request information about the “recipients or categories of recipients” to whom their personal data has been disclosed. In a recent ruling, the EU’s Court of Justice said data subjects get to...more

Dechert Cyber Bits - Issue 25

Dechert LLP on 12/16/2022

SEC Division of Examinations Issues Risk Alert on Regulation S-ID and Identity Theft Prevention Programs - On December 5, 2022, the Securities and Exchange Commission (“SEC”) Division of Examinations (“EXAMS”) issued a...more

European Commission Begins Process for Adoption of US Adequacy Decision

McDermott Will & Emery on 12/15/2022

Since Schrems II invalidated the US/EU Privacy Shield, the flow of personal data from the European Union to the United States has been subject to intense regulatory scrutiny. Companies transferring personal data to the United...more

EU-U.S. and UK-U.S. Data Transfer Deals Advance with White House Executive Order

Proskauer on Privacy on 10/20/2022

A new legal mechanism to allow for transfers of personal data between the EU and the U.S. is now advancing after an October 7th, 2022 Executive Order was issued by U.S. President Biden (the “Executive Order”). The new...more

[Webcast Transcript] The State of US Privacy Law: What to Expect in 2023 and Beyond

HaystackID on 10/12/2022

Editor’s Note: On September 29, 2022, HaystackID shared an educational webcast on the topic of US privacy law. As privacy continues to move to the forefront of not only information consideration but of business concern for...more

EU Personal Data Transfers Deadline: New SCCs must be put in place by December 27, 2022

Mintz - Privacy & Cybersecurity Viewpoints on 10/6/2022

Deadline to adopt EU Standard Contractual Clauses - Many organizations uses the European Union’s Standard Contractual Clauses (SCCs) to govern their transfers of personal data from the European Economic Area (EEA) to other...more

[Webcast Transcript] You’ve Got to Move It: Data Protection and Privacy with Cross-Border Transfers

HaystackID on 6/29/2022

...This session, led by industry-acknowledged experts in areas ranging from data protection and privacy to data transfer and legal discovery, provided a professional forum for the explanation of the best approaches,...more

Key Takeaways from the IAPP Global Privacy Summit 2022

Brooks Pierce on 5/13/2022

After two-plus years of mostly attending CLEs, webinars, and other knowledge-building events via Zoom, Teams or some other virtual platform, it was great to get together with like-minded privacy professionals in Washington,...more

New Privacy Shield Framework in the Works, Favoring Continuity Over Change for Businesses

Foley Hoag LLP - Security, Privacy and the... on 5/13/2022

President Biden and EU leaders announced on March 25, 2022 an agreement in principle to craft a replacement for the Privacy Shield and expand options for trans-Atlantic data transfers in accordance with the General Data...more

Special Report: Developments in UK Life Sciences – Spring Update 2022

McDermott Will & Emery on 4/29/2022

MHRA LAUNCHES UK CLINICAL TRIAL REGULATION CONSULTATION - The UK Government, through the Medicines and Healthcare Products Regulatory Agency (MHRA) (the medicines and medical device regulator in the United Kingdom),...more

Where Is a Transfer? Datatilsynet Says Almost Everywhere!

Fox Rothschild LLP on 4/15/2022

Let’s say you are an EU company. You engage a processor. Data is processed in the EU. There is no transfer. But in the processor-sub-processor data processing agreement, the data processor reserves the right to disclose...more

Clear & Concise and Everything Nice: What the IMY Decision Means for Your Privacy Notice

Fox Rothschild LLP on 4/1/2022

What can we learn about disclosures and how to draft privacy notices from the Sweden IMY decision and why is it important for both GDPR companies and CPRA, CDPA, CPA and UCPA companies:... ...more

Political Agreement on a New Framework for EU-U.S. Personal Data Transfers

Wilson Sonsini Goodrich & Rosati on 3/30/2022

On March 25, 2022, the U.S. and EU announced that they reached a political agreement in principle on a new "Trans-Atlantic Data Privacy Framework" (the Framework). This would be the third framework for EU-U.S. personal data...more

77 Results

View per page

Page: of 4

European Union › Data Transfers › General Data Protection Regulation (GDPR)

"My best business intelligence, in one easy email…"