News & Analysis as of September 26, 2024

Data Controller

+ Follow

Follow this channel for updates and analysis on all aspects of the European Union's General Data Protection Regulation, a reform of EU's data protection rules that impacts... more +

Follow this channel for updates and analysis on all aspects of the European Union's General Data Protection Regulation, a reform of EU's data protection rules that impacts individuals throughout the Union and all businesses operating therein. less -

Data Protection Rulings by European Regulators Offer Insights Into Their Security Expectations

Skadden, Arps, Slate, Meagher & Flom LLP on 4/15/2024

Valuable insights into the measures European regulators expect businesses to take to protect data privacy can be found in a report from the European Data Protection Board (EDPB) summarizing decisions under the EU’s General...more

China Issues Rules to Clarify and Relax Cross-Border Data Transfer Controls

Pillsbury Winthrop Shaw Pittman LLP on 4/9/2024

A data controller that is not a critical information infrastructure operator that cumulatively exports personal information (excluding any sensitive personal information) of less than 100,000 individuals since January 1 of...more

GDPR Compliance Checklist: 8 Steps You Need to Complete

Osano on 9/7/2023

GDPR compliance can be tricky. Even if you summon the willpower to read through the law’s text, it can be tough to know where to start. As an alternative to pouring through the GDPR’s legalese, one way to establish a...more

European Commission Proposes New Rules for Cross Border GDPR Enforcement

Wilson Sonsini Goodrich & Rosati on 7/5/2023

On July 4, 2023, the European Commission (EC) published its proposal for a regulation laying down additional procedural rules for the enforcement of the EU General Data Protection Regulation (GDPR) (proposal). The proposal...more

UK Data Protection Bill: Examination of Key Provisions (Part 2)

Latham & Watkins LLP on 8/19/2022

Areas of interest include anonymisation, “recognised legitimate interests”, and the ICO’s role. The UK Data Protection and Digital Information Bill (the Bill) sets out the government’s proposals for reforming the current...more

Privacy Roundup Part Two: Significant International Updates

Epiq on 1/12/2022

Last week’s blog detailed the wave of state legislation that occurred in the U.S. during 2021. It is no surprise that there were also many data privacy developments abroad. It is crucial that organizations affected by...more

Nowhere To Hide: Controllers have “Constructive Awareness” Of Processor Data Breaches

Goodwin on 1/20/2021

On December 15, 2020, Ireland’s Data Protection Commission (“DPC”) announced its decision to fine Twitter International Company (“Twitter”) €450,000 for failing to notify the DPC promptly of a data breach affecting EU...more

New DIFC Data Protection Law in Force - What You Need to Know

Akin Gump Strauss Hauer & Feld LLP on 10/2/2020

On October 1, 2020, the three-month grace period for businesses to comply with the Dubai International Financial Centre (DIFC) Data Protection Law (DIFC Law No. 5 of 2020) (“DPL 2020”) came to an end. Regulating the...more

European Data Protection Board Forms Two New Taskforces to Address Schrems II Aftermath

Akin Gump Strauss Hauer & Feld LLP on 9/14/2020

On Friday September 4, 2020, the European Data Protection Board (EDPB), a body consisting of representatives of all the Data Protection Authorities (DPAs) in the European Economic Area, announced that it had formed two new...more

Cybersecurity 2020 – The Year in Preview: New Guidance Continues to Clarify GDPR’s Scope

Foley Hoag LLP - Security, Privacy and the... on 1/14/2020

Editors’ Note: This is the sixth in our fourth-annual end-of-year series examining important trends in data privacy and cybersecurity in the coming year. Our previous entry discussed the CCPA, energy, Brexit, health care...more

European Guidance On Data Controller And Processor Relationship Has Takeaways For GDPR, CCPA Compliance

Fox Rothschild LLP on 11/14/2019

The European Data Protection Supervisor (EDPS) has issued guidance on the concepts of data controller and processor for European Union organizations. Though it covers EU institutions, the guidance contains many concepts that...more

CNIL Issues Record-Keeping Guidance

Sheppard Mullin Richter & Hampton LLP on 9/30/2019

Under GDPR, companies are required to keep certain records of their processing activities. There has been some question about the types of records controllers should keep. To help clarify the questions arising from many...more

Chapter 11: Obligations of processors – Unlocking the EU General Data Protection Regulation

White & Case LLP on 4/18/2019

Why does this topic matter to organisations? Under the GDPR, the concept of a "processor" has not changed. Any entity that was a processor under the Directive likely continues to be a processor under the GDPR. However,...more

Chapter 10: Obligations of controllers – Unlocking the EU General Data Protection Regulation

White & Case LLP on 4/16/2019

Why does this topic matter to organisations? Each time an organisation processes personal data, it will do so as either a controller or a processor. These roles bear different responsibilities. Therefore, it is critically...more

The Paris District Court Invalidates 38 Clauses of Google+ Terms of Use and Privacy Policy

Foley Hoag LLP - Security, Privacy and the... on 4/15/2019

It has been rough weather for Google in France. Three weeks after the French ?Data Protection Authority imposed a record fine against Google for non-compliance with the GDPR, the Paris District Court (“Tribunal de Grande...more

GDPR Implementation By The (Really Big) Numbers

Fox Rothschild LLP on 2/27/2019

Since May 25, 2018, 206,326(!) GDPR cases have been reported by Supervisory Authorities (SAs) from 31 European Economic Area (EEA) countries. Of those, 94,622 were initiated by individual complaints and 64,684 due to data...more

Proposed Guidance on the Extraterritorial Scope of the GDPR

Akin Gump Strauss Hauer & Feld LLP on 2/21/2019

The EU General Data Protection Regulation (GDPR), which revised and sought to ensure greater harmonization of the European Union’s data protection framework, took effect in May 2018. Among the changes it introduced was the...more

Skadden's 2019 Insights: European Data Protection and Cybersecurity in 2019

Skadden, Arps, Slate, Meagher & Flom LLP on 1/25/2019

Data protection laws in Europe evolved substantially in 2018, with the implementation of the General Data Protection Regulation (GDPR) and the Directive on Security of Network and Information Systems (NIS Directive) becoming...more

GDPR Alert: Google Gets Biggest Fine Ever Issued by a European Data Protection Authority

Foley Hoag LLP - Security, Privacy and the... on 1/23/2019

On 21 January 2019, the French Data Protection Authority (the “French DPA”) fined Google LLC 50 million euros for breach of the GDPR. As we reported on this blog, just after GDPR became applicable, noyb.eu (None of Your...more

The GDPR at Six Months: The Hard Work Starts

Faegre Drinker Biddle & Reath LLP on 11/28/2018

Six months have now passed since the implementation of the EU General Data Protection Regulation (GDPR). The GDPR has raised awareness of the importance of personal privacy as a fundamental right and placed data protection...more

Getting to Data Nirvana: Data lakes and GDPR - A User's guide

Hogan Lovells on 8/9/2018

A data lake is an infrastructure that permits different data sets from within a group to be combined and analysed together. To analyse a data lake under GDPR, it is helpful to think of a data lake in two phases, which we...more

Internet of Things Part 2: Dogs, Cameras, and Cybersecurity

Jackson Walker on 7/6/2018

I recently purchased an Internet Protocol (IP) camera to monitor my dog, Ruben, during those times that he has free reign of the house. Since “RubenCam” has been online, I’m not sure he has been any less rambunctious, but I’m...more

What is GDPR and how does it impact American businesses?

Butler Snow LLP on 6/6/2018

On May 25, 2018, the European Union’s General Data Protection Regulation (GDPR) took effect. Although EU laws typically don’t have a worldwide impact, the GDPR will impact business across the globe. The GDPR has an extremely...more

GDPR Is Here: Not Yet Compliant? What Employers Need to Consider

Fisher Phillips on 5/31/2018

After much anticipation, the General Data Protection Regulation (GDPR) finally went into effect on May 25, 2018. For employers, that means some enhanced employee rights, and the risk of significant penalties for...more

Parallel Universe or Coincidence: The CFPB’s New Data Consumer Protection Principles’ Relationship to GDPR

Bradley Arant Boult Cummings LLP on 11/29/2017

On October 18, 2017, the Consumer Financial Protection Bureau (CFPB) outlined nine non-binding Consumer Protection Principles (the Principles) for the access and sharing of consumer information between third-party companies....more

26 Results

View per page

Page: of 2

General Data Protection Regulation (GDPR) › Data Security › Data Controller

"My best business intelligence, in one easy email…"