News & Analysis as of September 26, 2024

Personal Data

+ Follow

Follow this channel for updates and analysis on all aspects of the European Union's General Data Protection Regulation, a reform of EU's data protection rules that impacts... more +

Follow this channel for updates and analysis on all aspects of the European Union's General Data Protection Regulation, a reform of EU's data protection rules that impacts individuals throughout the Union and all businesses operating therein. less -

Personal Data Sharing: What Information About Recipients Do We Need to Provide to Individuals Under the GDPR?

Mayer Brown on 9/13/2024

Sharing personal data is necessary for most organisations, but it also entails certain data protection risks. Controllers who share personal data with others must, among other obligations, ensure that they comply with the...more

AI implementation & data protection regulation: German authorities publish guidelines for implementing AI in compliance with the...

White & Case LLP on 5/29/2024

The German federal and state data protection authorities published guidelines for the implementation and use of AI in compliance with the European Union's regulation of personal data ("Guidelines")....more

Limited-Risk AI - A Deep Dive Into Article 50 of the European Union’s AI Act

WilmerHale on 5/29/2024

This blog post focuses on the transparency requirements associated with certain limited-risk artificial intelligence (AI) systems under Article 50 of the European Union’s AI Act....more

Dechert Cyber Bits - Issue 54

Dechert LLP on 5/6/2024

European Data Protection Board Publishes Strategy for 2024-27 - The European Data Protection Board (“EDPB” - the EU body tasked with promoting consistency and cooperation in enforcement of the GDPR) has outlined its...more

GDPR Compliance: At the Intersection of AI and Life Sciences

TransPerfect Legal on 5/2/2024

Late last month, the Association of Corporate Counsel (ACC) hosted a panel on artificial intelligence and how it is rapidly transforming the life sciences sector, allowing companies to leverage large datasets to accelerate...more

Almost there: The European Parliament passes the EU Data Act, with new rules for data access, switching cloud providers and...

WilmerHale on 11/16/2023

On November 9, 2023, the European Parliament adopted the EU Data Act, a new regulation providing harmonized rules on access to data, switching cloud providers and interoperability requirements across the EU. It is widely...more

Client Alert: European Commission’s Adequacy Decision Sets Standards for US Companies to Receive Personal Data from EU Under the...

Neal, Gerber & Eisenberg LLP on 7/13/2023

On July 10, 2023, the European Commission concluded that the US ensures an adequate level of protection for personal data transferred from the European Union to US companies under the new EU-US Data Privacy Framework. Based...more

The European Health Data Space - Panacea or Poison Pill?

Latham & Watkins LLP on 11/2/2022

On 3 May 2022, the European Commission launched its proposal for a Regulation for the European Health Data Space to “unleash the full potential of health data”. However, questions arise as to whether this proposal is a...more

Anonymization Governance: Why It's Important for GDPR and for CPRA

Fox Rothschild LLP on 3/11/2022

What does the United Kingdom's Information Commissioner's Office's draft guidance say about governance and anonymization? Why is it important for GDPR and for the host of new US Privacy laws, including CPRA, CDPA and CPA? ...more

The Belgian Data Protection Authority Publishes Recommendation Concerning Data Processing for Direct Marketing Purposes

Hogan Lovells on 3/6/2020

On January 17, The Belgian Data Protection Authority (DPA) published Recommendation no 01/2020 providing Guidance on direct marketing. The Recommendation provides a methodology on how to comply with the General Data...more

European Parliament Weighs in on Automated Decision-Making

Sheppard Mullin Richter & Hampton LLP on 2/25/2020

The European Parliament recently issued a resolution directed at the European Commission on its concerns with automated decision-making processes and artificial intelligence. While the EU Parliament addresses several areas of...more

European Data Protection Supervisor Issues Opinion on Conducting Research Involving European Personal Data

McDermott Will & Emery on 1/24/2020

The European Data Protection Supervisor, the independent European Union authority responsible for data protection regulatory oversight, issued a preliminary opinion on data protection and scientific research. The Opinion...more

Privacy & Cybersecurity Update - December 2019

Skadden, Arps, Slate, Meagher & Flom LLP on 1/3/2020

In this month's edition of our Privacy & Cybersecurity Update, we take a look at guidance on artificial intelligence released by the U.K. Information Commissioner's Office and the Turing Institute, as well as guidance...more

Artificial Intelligence v. General Data Protection Regulation: Complex Risks in Changing Times

Robins Kaplan LLP on 12/5/2019

Artificial Intelligence (“AI”) Is A Complicated Technology Developed With Data. This Saddles AI It With A Host Of Potential Privacy Regulations, Including Europe’s Data Protection Law, The General Data Protection Regulation...more

Spanish DPA on Use of Cookies: Continued Browsing is Consent

Hogan Lovells on 11/20/2019

On November 8, the Spanish data protection authority (AEPD) published new Guidelines on the Use of Cookies (Guidelines) (Spanish only). The Guidelines have been prepared in collaboration with different organisations in the...more

Spanish DPA Publishes Guide for Satisfying PbD Obligation

Hogan Lovells on 11/7/2019

On October 17, the Spanish data protection authority (AEPD) published the Guide to Privacy by Design (Guide). While Privacy by Design (PbD) first became a legal requirement in the EU with implementation of the General Data...more

California Consumer Privacy Act: A Reference Guide for Compliance

Carlton Fields on 10/22/2019

California passed a sweeping new privacy law that will impact many businesses. The California Consumer Privacy Act of 2018 (CCPA) is the first U.S. law to grant consumers extensive rights as to their personal information and...more

E-Commerce Businesses Beware: The Freedom to Contract does not Trump Reasonable Privacy Expectations

Orrick, Herrington & Sutcliffe LLP on 10/22/2019

The EDPB’s new Guidelines on Article 6(1)(b) may severely limit e-commerce business’ ability to enhance data processing by unilaterally defining contractual services....more

Privacy and Data Security Alert | September 2019

Shook, Hardy & Bacon L.L.P. on 9/25/2019

California Adds Biometric Restrictions to Data-Breach Law, Potentially Creating a De Facto Biometric Privacy Law Subject to the governor’s signature, California’s breach-notification law will gain additional requirements...more

Chapter 9: Rights of data subjects – Unlocking the EU General Data Protection Regulation

White & Case LLP on 4/16/2019

Why does this topic matter to organisations? EU data protection law provides data subjects with a wide array of rights that can be enforced against organisations that process personal data. These rights may limit the...more

Cookie Audit from Bavarian Data Protection Authority May Serve As GDPR Warning

Ballard Spahr LLP on 3/8/2019

Following numerous privacy complaints, the State Office for Data Protection Supervision (BayLDA) recently conducted a random audit on 40 companies and found widespread problems with their cookie disclosures....more

Google’s Fine and the French Data Protection Authority’s Far-reaching GDPR Compliance Measures

Kramer Levin Naftalis & Frankel LLP on 2/27/2019

On Jan. 21, 2019, the French Data Protection Authority (CNIL) levied a 50 million euros sanction against Google LLC for violating the EU General Data Protection Regulation2 (GDPR) in the context of the first enforcement...more

EDPB Advises on Lawful Grounds for Processing Personal Data in Clinical Trials

Hogan Lovells on 2/14/2019

With the coming into effect of the General Data Protection Regulation (GDPR), those conducting clinical trials in the EU face a complex set of rules ranging from lawful grounds for processing and transparency to restrictions...more

Google To Pay $57 Million For GDPR Violations

Orrick, Herrington & Sutcliffe LLP on 2/14/2019

On January 21, 2019, the French data protection supervisory authority (“CNIL”) fined Google €50 million (approximately $57 million) for violating the European General Data Protection Regulation (“GDPR”). ...more

GDPR Alert: Google Gets Biggest Fine Ever Issued by a European Data Protection Authority

Foley Hoag LLP - Security, Privacy and the... on 1/23/2019

On 21 January 2019, the French Data Protection Authority (the “French DPA”) fined Google LLC 50 million euros for breach of the GDPR. As we reported on this blog, just after GDPR became applicable, noyb.eu (None of Your...more

29 Results

View per page

Page: of 2

General Data Protection Regulation (GDPR) › Transparency › Personal Data

"My best business intelligence, in one easy email…"