General Data Protection Regulation (GDPR), Personal Data, Data Retention

New guidelines for retention of emails

Ius Laboris on 8/8/2024

The Italian Data Protection Authority has adopted an updated version of a guideline document on email retention that it originally issued in December 2023, but which had been suspended....more

Data Privacy Guide - Czech Republic

International Lawyers Network on 5/3/2024

Introduction - The General Data Protection Regulation (Regulation (EU) 2016/679) is the EU regulation which is directly applicable in all member states of the EU, including the Czech Republic, as of 25 May 2018. The new...more

CJEU considers approach to retention of personal data from public debt registers

A&O Shearman on 1/11/2024

In joined Cases C‑26/22 and C‑64/22, related to the German Credit Reference Agency Schufa (see A&O blog on the automated decision making case), the CJEU considered the retention of personal data regarding individuals who had...more

Österreichische Post: The CJEU Specifies the Requirements for Compensation for Breaches of the GDPR

Faegre Drinker Biddle & Reath LLP on 5/16/2023

On 4 May 2023, the European Court of Justice (CJEU) delivered its highly anticipated judgement in Österreichische Post (Case C-300/21) on a crucial issue: the extent to which data subjects affected by a breach of the GDPR...more

New Privacy Laws, Data Minimization, and Challenges with Collaboration Data

Hanzo on 3/7/2023

2023 may be the year of privacy laws. Five states have new laws that go into effect this year, which will likely usher in a new era of consumer privacy protections in the United States....more

Data Protection in the British Virgin Islands

Walkers on 2/9/2023

The British Virgin Islands ("BVI") Data Protection Act, 2021 ("DPA") came into force on 9 July 2021. It was introduced so the BVI would have a data protection framework which is broadly similar to EU and UK standards. To...more

Deeper Dive: Why Personal Data Deletion Matters

BakerHostetler on 7/15/2022

Our 2022 Data Security Incident Response Report discussed how businesses can be better positioned to meet the tight data breach notification deadlines now imposed in dozens of countries worldwide. In particular, we...more

Making the Case for Information Governance and Why You Should Address it Now

Lighthouse on 8/17/2021

You know that cleaning out the garage is a good idea. You would have more storage space and would even be able to put the car into the garage, which is better for security, for keeping it clean, and for ensuring an easy start...more

Updata: Your quarterly privacy & cybersecurity update - April to June 2021

Eversheds Sutherland (US) LLP on 7/16/2021

Welcome to the latest edition of Updata - the international update from Eversheds Sutherland’s dedicated Privacy and Cybersecurity team. Updata provides you with a compilation of privacy and cybersecurity regulatory and...more

France – CNIL releases guidance on data protection aspects of chatbots

A&O Shearman on 3/2/2021

On 19 February 2021, CNIL released guidance on the use of chatbots in compliance with data protection law (the Guidelines). The CNIL notes that in order to operate the chatbots, controllers will often need to process personal...more

Further Tension Between National Security and Protecting Privacy: Latest EU Judgments

Akin Gump Strauss Hauer & Feld LLP on 10/14/2020

United Kingdom, French and Belgian national security laws (and such laws of other EU Member States) fell under the scrutiny of the Court of Justice of the European Union (CJEU), which on October 6, 2020, ruled on whether such...more

H&M Fined 37.8 Million Dollars for Alleged GDPR Violations

Polsinelli on 10/14/2020

What Happened? On October 1, 2020, the Hamburg Data Protection Commissioner (“Hamburg DPA”) fined clothing retailer H&M 37.8 million dollars (EURO 35.2 million) for several violations of the GDPR....more

Client Update: H&M Fined 37.8 Million Dollars for Alleged GDPR Violations

Polsinelli on 10/13/2020

What Happened? On October 1, 2020, the Hamburg Data Protection Commissioner (“Hamburg DPA”) fined clothing retailer H&M 37.8 million dollars (EURO 35.2 million) for several violations of the GDPR....more

The Tech Factor: Special eDiscovery Considerations for the Tech Sector

Epiq on 1/29/2020

Many questions arise during the discovery process: What type of data do parties need to preserve? How should they obtain, review, and disclose it? Are third-party subpoenas necessary? These are just a few things parties need...more

Data Governance And Data Management: What’s The Difference?

Mitratech Holdings, Inc on 11/19/2019

A lot of attention is now being paid to the topic of data governance, and what it means versus data management. Within the last few years, data governance has leapt from an esoteric term bandied about only by IT...more

Lithuanian Data Protection Inspectorate Levies Fine For GDPR Data Management Violations

Fox Rothschild LLP on 5/20/2019

The Lithuanian data protection inspectorate issued a 61,500 EUR fine against a payment services provider for violations of the data minimization, adequate security measures and data breach reporting requirements of GDPR....more

Privacy & Cybersecurity Update - August 2018

Skadden, Arps, Slate, Meagher & Flom LLP on 9/7/2018

In this month's edition of our Privacy & Cybersecurity Update, we examine Brazil's new data protection regulation, the French data protection authority's warning to two companies of potential GDPR violations and the U.S....more

A Human Resources Manager’s Guide to the GDPR (Part 4)

Schwabe, Williamson & Wyatt PC on 6/11/2018

This article is Part 4 of our series on the GDPR for U.S.-based companies. Part 1 assisted U.S.-based companies in determining whether the GDPR applies to them; Part 2 provided an overview of the GDPR’s key concepts and...more

Privacy Matters, Featuring Data Flows - February 2018

Katten Muchin Rosenman LLP on 2/14/2018

This issue of Privacy Matters examines the flow of personal data. Creating a data map is a quick way to identify, understand and record what happens to any personal data you have. Data maps should be kept on file and should...more

Internet Privacy – What the U.S. Can Learn from the European Union

Pierce Atwood LLP on 4/27/2017

With respect to Internet privacy, as a result of recent U.S. government action, Americans now have less protection and are more at risk of government surveillance and potential misuse of their personal information, as...more

European DPAs Issue First GDPR Guidance

Proskauer on Privacy on 12/20/2016

On Friday, the Article 29 Working Party issued official guidance relating to the General Data Protection Regulation, or GDPR. The Article 29 Working Party is comprised of representatives of the various EU Member States’ data...more

Privacy Shield – Rejected. GDPR – Accepted: What This Means to Your Organization and What You Should Consider Doing Now

Foley & Lardner LLP on 4/18/2016

The European Union Article 29 Working Party (Article 29) issued an opinion on the proposed EU-U.S. Privacy Shield framework agreement (Privacy Shield) last week, stating that although the Privacy Shield was a “great step...more

Article 29 Working Party has “Strong Concerns” About Privacy Shield

Proskauer - Privacy & Cybersecurity on 4/18/2016

On April 13, 2016, the EU’s Article 29 Working Party issued its much-anticipated statement on the viability of the proposed EU-US Privacy Shield. As we’ve detailed previously, EU and US officials reached agreement on the...more

General Data Protection Regulation (GDPR) › Personal Data › Data Retention

"My best business intelligence, in one easy email…"