News & Analysis as of September 19, 2024

Cybersecurity › Data Controller

+ Follow

Follow this channel for advisories on one of the biggest threats to businesses today. Read a morning brief of fresh guidance and commentary by leading lawyers on security, privacy, risk... more +

Follow this channel for advisories on one of the biggest threats to businesses today. Read a morning brief of fresh guidance and commentary by leading lawyers on security, privacy, risk management, global regulations, data protection, leaks, hacking, cyber insurance, compliance, HIPAA, and every other aspect of cybersecurity of import to corporate readers right now. less -

ANPD's New Regulation on Guidelines and Responsibilities of Data Protection Officers in Brazil

Mayer Brown on 8/2/2024

The Brazilian Data Protection Authority (ANPD) has published its new regulation on the Data Protection Officer’s (DPO) role. A central figure in privacy governance, the DPO serves as the liaison between the data controller,...more

Japan: Interim report on the revision of the Act on the Protection of Personal Information

Hogan Lovells on 7/10/2024

The 2020 amendment to the Act on the Protection of Personal Information (“APPI”) stipulates that the APPI must be reviewed every three years — the time for a review has arrived. In the past, since its enactment in 2003, major...more

ANPD Approves Data Breach Notifying Regulation

Mayer Brown on 5/9/2024

Resolution No. 15, of April 24, 2024, of the Brazilian Data Protection Authority ("ANPD"), approved the Data Breach Notifying Regulation (the “Regulation”). The Regulation establishes procedures for data controllers to notify...more

Responsabilité conjointe dans le secteur de la publicité digitale : retour sur l’arrêt IAB Europe de la CJUE

Hogan Lovells on 5/2/2024

La Cour de justice de l'Union européenne (« CJUE ») a récemment examiné une affaire impliquant IAB Europe, une association sans but lucratif établie en Belgique, représentant les entreprises du secteur de la publicité...more

ANPD’s Compiled Technical Notes In 2023

Mayer Brown on 2/2/2024

In 2023, the Brazilian Data Protection Authority (ANPD) made public several Technical Notes, with the aim of increasing transparency on ANPD actions on several matters, and to provide guidance on specific topics in the...more

New Jersey Becomes Most Recent State to Sign a Comprehensive Consumer Privacy Law

Epstein Becker & Green on 1/23/2024

On January 16, 2024, New Jersey Governor Phil Murphy signed into law Senate Bill No. 332, “An Act concerning online services, consumers, and personal data” (“SB 332”). New Jersey is the fourteenth state to pass a...more

Discover the Montana Consumer Data Privacy Act – Your Guide to the MTCDPA

Osano on 11/15/2023

On May 19, 2023, Montana officially became the ninth state to approve a state-level consumer data privacy law, joining the trend of states opting not to wait for a federal privacy law to mandate the protection of its...more

Legislative Update: Swiss Data Protection Act took effect September 1

Constangy, Brooks, Smith & Prophete, LLP on 9/11/2023

The new Swiss Federal Act on Data Protection, known by the acronym “nFADP,” took effect on September 1. The law was enacted by the Swiss parliament in 2020. The law introduces new rights for Swiss citizens, but also...more

GDPR Compliance Checklist: 8 Steps You Need to Complete

Osano on 9/7/2023

GDPR compliance can be tricky. Even if you summon the willpower to read through the law’s text, it can be tough to know where to start. As an alternative to pouring through the GDPR’s legalese, one way to establish a...more

India – Digital Personal Data Protection Act receives Presidential assent

A&O Shearman on 8/18/2023

The President of India gave assent for the Digital Personal Data Protection Bill 2023 on 11 August 2023, a matter of days after it had been passed by both the Lower and Upper House. The Digital Personal Data Protection Act...more

U.S. Companies Now Have a Framework for EU-U.S. Personal Data Transfers

Brownstein Hyatt Farber Schreck on 7/18/2023

In a significant milestone for EU-U.S. cross-border transfers of personal data under Article 45 of the General Data Protection Regulation (GDPR), the European Commission adopted an adequacy decision for the new EU-U.S. Data...more

Tennessee Passes Comprehensive Data Privacy Law

White & Case LLP on 6/26/2023

On May 11, 2023, Governor Bill Lee signed the Tennessee Information Protection Act (TIPA) into law. Tennessee now joins the rapidly increasing group of states, California, Utah, Colorado, Connecticut, Virginia, Iowa and...more

Pakistan – MITT releases final draft of the personal data protection bill

A&O Shearman on 6/5/2023

The Pakistan Ministry of Information Technology and Telecommunication (MITT) released a new draft of the Personal Data Protection Bill, 2023 (the PDPB) on 19 May 2023. The PDPB aims to regulate the collection, processing,...more

Montana joins eight other states in enacting comprehensive privacy legislation

Orrick, Herrington & Sutcliffe LLP on 5/26/2023

On May 19, the Montana governor signed SB 384 to enact the Consumer Data Privacy Act (CDPA) and establish a framework for controlling and processing consumer personal data in the state. Montana is now the ninth state in the...more

Tennessee becomes 8th state to enact comprehensive privacy legislation

Orrick, Herrington & Sutcliffe LLP on 5/15/2023

On May 11, the Tennessee governor signed HB 1181 to enact the Tennessee Information Protection Act (TIPA) and establish a framework for controlling and processing consumers’ personal data in the state...more

China Releases Standard Contract for Cross-Border Transfer of Personal Information

Cooley LLP on 3/3/2023

On February 24, 2023, the Cyberspace Administration of China (CAC) released the final version of the Measures on the Standard Contract for the Cross-Border Transfer of Personal Information, accompanied by a standard contract...more

Meta Fines Expose EU Regulators’ Differences and Highlight Fundamental Issues for Data Controllers

Faegre Drinker Biddle & Reath LLP on 1/18/2023

Meta Ireland (Meta) has recently been issued with two fines by the Irish Data Protection Commission (DPC) for breaches of the EU General Data Protection Regulation (GDPR) relating to advertisements run on its Facebook and...more

[Webinar] Analyzing the Colorado Privacy Act Draft Rules - October 20th, 12:00 pm - 1:00 pm CT

Husch Blackwell LLP on 10/6/2022

The Colorado Attorney General’s Office published draft Colorado Privacy Act (CPA) rules on September 30, 2022. The draft rules are a complex and lengthy set of regulations that, if adopted without substantial modification,...more

Indonesian House of Representative passes the Data Protection Bill into law

Hogan Lovells on 9/22/2022

After years of discussions, as of 20 September 2022, the Indonesian House of Representatives (HOR) has passed the Personal Data Protection Bill into Law (PDP Law). However, the PDP Law is yet to be effective and is not...more

Connecticut Privacy Law: What Businesses Need to Know

Kohrman Jackson & Krantz LLP on 6/1/2022

CONNECTICUT BECOMES THE FIFTH STATE TO PASS CONSUMER PRIVACY LEGISLATION - Connecticut passed An Act Concerning Personal Data Privacy and Online Monitoring (CPDPA) on May 10, 2022. The CPDPA becomes effective on July 1,...more

Mystic Privacy: Connecticut's New Law Makes it Clearer

Kilpatrick on 5/16/2022

Connecticut’s new privacy law, an Act Concerning Personal Data Privacy and Online Monitoring, also known as the Connecticut Data Privacy Act (“CTDPA”), generally continues the pattern of non-California states enacting...more

Utah Becomes Fourth State to Enact a Comprehensive Data Privacy Law

Jones Day on 4/7/2022

On March 24, 2022, Utah followed California, Virginia, and Colorado in adopting a comprehensive consumer data privacy law. On March 24, 2022, Utah Governor Spencer Cox signed the Consumer Privacy Act ("Act"), making Utah...more

Clinical trials in Spain: Takeaways from the new code of conduct (Part 1)

Hogan Lovells on 3/10/2022

Last week we raised our hands to inform you about the Spanish Data Protection Authority’s approval of the "Code of Conduct on the processing of personal data in the field of clinical trials and other clinical research as well...more

Belgian DPA Fines IAB: Rough Waters Ahead for Ad Industry

Dechert LLP on 2/7/2022

On February 2, 2022, the Belgian Data Protection Authority (“DPA”) issued a decision finding that the Interactive Advertising Bureau ("IAB”) Europe’s Transparency and Consent Framework (“TCF”) violates key provisions of the...more

‘Controller,’ ‘Processor’ and ‘Transfer’: Some GDPR Concepts Re-Explained

Cooley LLP on 1/31/2022

Happy Data Privacy Day! Many companies are still struggling with some basic concepts of the General Data Protection Regulation, such as “controller,” “processor” and “transfer” of personal data. The European Data Protection...more

143 Results

/

View per page

Page: of 6

Next »