News & Analysis as of September 22, 2024

European Union › Data Subjects Rights

+ Follow

The European Union is an economic and political partnership comprised of 27 nations within the Eurozone. The EU was established in 1948 to promote stability and cooperation among member states in the aftermath of WWII. The EU maintains a common currency as well as several intranational institutions, including the European Parliament and the European Commission. less -

GDPR Compliance Checklist: 8 Steps You Need to Complete

Osano on 9/7/2023

GDPR compliance can be tricky. Even if you summon the willpower to read through the law’s text, it can be tough to know where to start. As an alternative to pouring through the GDPR’s legalese, one way to establish a...more

Cybersecurity Incidents: 10 Things a General Counsel Must Know About EU Cyber Incidents

Latham & Watkins LLP on 6/29/2023

Cybersecurity incidents pose legal challenges for in-house counsel, alongside their technical implications. This overview highlights key aspects that legal departments must know when reacting to data breaches. ...more

EU-U.S. Transfers: Privacy Shield replacement not adequate says European Parliament

BCLP on 5/19/2023

The road to the adoption of a lasting framework for EU-U.S data transfers has been anything but smooth. Much like its predecessor, Safe Harbor, the EU-U.S Privacy Shield met its end in 2020 when the Court of Justice of the...more

CJEU Sets High Bar for Responses to Data Subject Access Requests

Latham & Watkins LLP on 5/5/2023

Organisations must provide individuals with information on the specific recipients of their data upon request. The Court of Justice of the European Union (CJEU) has ruled that organisations must generally disclose the...more

AG CJEU addresses data subject rights and automated decision-making by credit rating agencies

A&O Shearman on 3/23/2023

The Advocate General (AG) Pikamäe of the Court of Justice of the European Union (CJEU) issued his opinions in three cases concerning the credit rating agency SCHUFA Holding AG (SCHUFA) on 16 March 2023....more

Who Has My Data? EU Court Rules GDPR Requires Disclosure of Data Recipient Identities, Not Just Categories, in Response to Data...

Bradley Arant Boult Cummings LLP on 2/7/2023

Under the European Union’s General Data Protection Regulation (GDPR), individual data subjects have the right to request that the data controller share information regarding the data subject’s personal information...more

New EU guidance on GDPR right of access (open for public consultation)

Hogan Lovells on 2/1/2022

The “right of access” recognized by art.15 GDPR is one of the most fervently exercised rights by individuals. Nowadays, where companies tend to amass considerable amounts of information and carry out data processing...more

EDPB Issues Draft Guidelines on Data Subject Access Rights

Alston & Bird on 1/31/2022

On January 28, 2022, the European Data Protection Board (“EDPB”) published draft regulatory guidelines (“draft guidance”) on the right of data subjects to have access to their personal data under the EU General Data...more

NGE On Demand: Personal Data Protection Travels: The New Standard Contractual Clause with John Koenigsknecht and David Wheeler

Neal, Gerber & Eisenberg LLP on 7/15/2021

NGE Corporate & Securities partner John Koenigsknecht recently interviewed Data Privacy & Information Governance partner David Wheeler about the new standard contractual clauses and the complex task of assessing and...more

Trend zu Klagen auf immateriellen Schadensersatz wegen DSGVO-Verstößen?

Latham & Watkins LLP on 10/15/2020

Kürzlich hat mit dem LG Darmstadt erstmals ein deutsches ordentliches Zivilgericht ein Unternehmen dazu verurteilt, immateriellen Schadensersatz nach Art. 82 DSGVO zu zahlen. Zuvor hatte bereits das Arbeitsgericht Düsseldorf...more

An Update on International and Cross-Border Discovery

Association of Certified E-Discovery... on 10/7/2020

Parties in the US are allowed broad and liberal discovery of electronically stored information (ESI) relevant and proportional to the claims and defenses in a legal action. When a US-based litigant seeks ESI stored in other...more

GDPR and the Uniform Foreign Country Money Judgments Recognition Act

Hinshaw & Culbertson LLP on 9/3/2020

You are an American company. While you sell product or otherwise interact with Europe, and thereby collect personal information about European residents, you have no assets or facilities on that continent. Nonetheless, you...more

DSARs 101: What to Expect When Doing Business with EU Customers

Association of Certified E-Discovery... on 6/4/2020

For any organization that deals with privacy issues in the European Union and other privacy-centric jurisdictions like the United Kingdom, an effective information governance program is a must. A program that includes a...more

UK Business Exposure To The California Consumer Privacy Act 2018 ("CCPA")

White & Case LLP on 2/1/2020

The CCPA took effect on 1 January 2020, introducing significant compliance burdens for most businesses that collect personal information about California residents. The reach of the CCPA extends beyond California and the US;...more

European Data Protection Supervisor Issues Opinion on Conducting Research Involving European Personal Data

McDermott Will & Emery on 1/24/2020

The European Data Protection Supervisor, the independent European Union authority responsible for data protection regulatory oversight, issued a preliminary opinion on data protection and scientific research. The Opinion...more