News & Analysis as of October 19, 2024

Compliance

+ Follow

Follow this channel for updates and analysis on all aspects of the European Union's General Data Protection Regulation, a reform of EU's data protection rules that impacts... more +

Follow this channel for updates and analysis on all aspects of the European Union's General Data Protection Regulation, a reform of EU's data protection rules that impacts individuals throughout the Union and all businesses operating therein. less -

Navigating New CNIL Sanctions: What You Need to Know

Goodwin on 10/11/2024

The Commission Nationale de l’Informatique et des Libertés (CNIL) is an independent French administrative regulatory body whose mission is to ensure that the collection, storage, and use of personal data comply with data...more

International Data Transfers Remain Under EU and UK Regulatory Scrutiny

Ogletree, Deakins, Nash, Smoak & Stewart,... on 9/26/2024

Organisations that make international transfers of personal data have undergone significant challenges and changes over the last few years. With the invalidation of the Privacy Shield agreement in 2020 and the introduction of...more

Belgian Data Protection Authority Publishes Guidance on the Interplay between the GDPR and the AI Act

Alston & Bird on 9/26/2024

On 19 September 2024, the Belgian Data Protection Authority (DPA) issued new Guidance on the interplay between the recently adopted EU Regulation on Artificial Intelligence (the AI Act) and the General Data Protection...more

Personal Data Sharing: What Information About Recipients Do We Need to Provide to Individuals Under the GDPR?

Mayer Brown on 9/13/2024

Sharing personal data is necessary for most organisations, but it also entails certain data protection risks. Controllers who share personal data with others must, among other obligations, ensure that they comply with the...more

AI implementation & data protection regulation: German authorities publish guidelines for implementing AI in compliance with the...

White & Case LLP on 5/29/2024

The German federal and state data protection authorities published guidelines for the implementation and use of AI in compliance with the European Union's regulation of personal data ("Guidelines")....more

Limited-Risk AI - A Deep Dive Into Article 50 of the European Union’s AI Act

WilmerHale on 5/29/2024

This blog post focuses on the transparency requirements associated with certain limited-risk artificial intelligence (AI) systems under Article 50 of the European Union’s AI Act....more

General Data Protection Regulation Guidelines

EDRM - Electronic Discovery Reference Model on 4/9/2024

Parties that have possession, custody, or control of evidence potentially relevant to U.S. litigation or investigations are typically required to identify, collect, preserve, and produce such evidence (with limited...more

Six Months Until Enforcement: Key Compliance Steps for Saudi Arabia’s Data Protection Law

Latham & Watkins LLP on 3/13/2024

The PDPL has broad extraterritorial scope and substantial penalties for non-compliance, with full enforcement expected to start in September. The Personal Data Protection Law (PDPL) is the first comprehensive data...more

Demystifying DSARs: A Beginner’s Guide

Integreon on 2/9/2024

This article originally appeared in The Legal Technologist November/December 2023 Issue here. As individuals, we have the legal right to access personal data held by an organisation, and an increasing number of requests are...more

EU verschärft Regeln zur Vollstreckung der DSGVO

Latham & Watkins LLP on 1/12/2024

EU-Parlament soll im Februar 2024 über Neuregelung zur Sanktionierung von DSGVO-Verstößen entscheiden - Die geplante Neuregelung soll im Februar im EU-Parlament verabschiedet werden. Sie wäre sehr nachteilig, wenn ihr...more

EU-U.S. Data Privacy Framework vs. EU Standard Contractual Clauses for Transatlantic Transfers of Personal Data

Alston & Bird on 9/8/2023

The European Commission has approved the EU-U.S. Data Privacy Framework (DPF) for transferring data from the EU to the United States. Our Privacy, Cyber & Data Strategy Team discusses what companies should consider when...more

The Importance of Effective Policies and Training in Data Protection: Lessons from a Scottish Hospital Breach

Thomas Fox - Compliance Evangelist on 9/5/2023

I recently had the chance to visit with Jonathan Armstrong on a recent data breach case that occurred in the health service provider NHS Lanarkshire (Scotland) during the COVID-19 pandemic. This breach serves as a stark...more

EU-US Data Privacy Framework Goes Live: What Are the Practical Implications?

Latham & Watkins LLP on 8/1/2023

The new framework provides an additional route for personal data transfers from the EEA to the US. On 10 July 2023, the European Commission (EC) took the final step to enable businesses to start relying on the new EU-US...more

Information Transferred from European Economic Area

Barnea Jaffa Lande & Co. on 5/15/2023

In light of the European Union Commission’s examination to renew the adequacy status granted to Israel in 2011, the Israeli Ministry of Justice has promulgated new privacy protection regulations, called “Provisions Regarding...more

Data Privacy: What Founders Need to Know to Avoid Disaster, with Lucas Beal

Hutchison PLLC on 5/1/2023

In an increasingly online world, we’ve become comfortable with volunteering more and more of our personal data to websites and applications, and it’s the companies’ responsibility to keep that data safe. When you’re moving...more

Monetizing Sports Data and Protecting Athlete Privacy: Where is the Balance?

Ankura on 3/15/2023

The collection of personal data by organizations in the sports industry creates unique data privacy challenges. Generally, a business-to-consumer organization is focused on the personal data of its customers and separately...more

Cookies, Compliance and GDPR

Thomas Fox - Compliance Evangelist on 2/27/2023

Are you feeling overwhelmed by GDPR enforcement and data privacy regulations? Are you concerned about the implications of big tech companies, such as Facebook and Instagram, on the data privacy of your customers? The recent...more

Virginia’s Data Privacy Law Just Went Into Effect – What You Should Know.

Butler Snow LLP on 1/13/2023

On January 1, 2023, Virginia’s Consumer Data Protection Act (“Virginia Privacy Law”) went into effect, the second in the US aimed to protect consumers’ personal data. We previously blogged about its passage. Here’s what you...more

Is Privacy Shield 2.0 on the Horizon?

BCLP on 10/24/2022

On October 7, President Joe Biden signed an Executive Order (EO) on Enhancing Safeguards for United States Signals Intelligence Activities, which is intended to move forward next steps in the EU US Privacy Shield Framework...more

UK Data Protection Bill: Examination of Key Provisions (Part 2)

Latham & Watkins LLP on 8/19/2022

Areas of interest include anonymisation, “recognised legitimate interests”, and the ICO’s role. The UK Data Protection and Digital Information Bill (the Bill) sets out the government’s proposals for reforming the current...more

Europe: Amazon Slapped with Record-Breaking Privacy Fine

Barnea Jaffa Lande & Co. on 8/25/2021

E-commerce giant Amazon reported in its financial statements at the end of last month that the Luxembourg data protection authority had imposed on it a fine totaling EUR 746 million. The fine appears to have been laid on...more

Data Deletion under CPRA and GDPR, And How to Operationalize a Deletion Program

Ankura on 7/20/2021

Authors: David Manek, Joe Shepley and Mark Melnychenko The California Privacy Rights Act (CPRA) which goes live January 1, 2023 introduces data retention and deletion requirements very similar to those that we see in the...more

European Commission Adopts Two New Sets of Standard Contractual Clauses: What Employers Need to Know

Ogletree, Deakins, Nash, Smoak & Stewart,... on 6/14/2021

On June 4, 2021, the European Commission adopted two new sets of standard contractual clauses (SCCs): one for data transfers from data controllers to data processors and one for data transfers from data exporters to data...more

Virginia Becomes the Second State—and the First on the Eastern Seaboard—to Adopt a Comprehensive Data Protection Law

Brooks Pierce on 3/31/2021

In March of 2021, Virginia became the second state to adopt a comprehensive data protection law. The Virginia Consumer Data Protection Act (VCDPA), which goes into effect on Jan. 1, 2023, borrows many concepts from the...more

Virginia Is For Lovers . . . Of Data Privacy - UPDATED March 2021

Vinson & Elkins LLP on 3/9/2021

Update: The VCDPA was signed into law by Governor Ralph Northam without amendment on March 2, 2021. The VCDPA will become operative on January 1, 2023, and businesses should remain mindful of pending legislation in states...more

61 Results

View per page

Page: of 3

General Data Protection Regulation (GDPR) › Personal Data › Compliance

"My best business intelligence, in one easy email…"