The privacy organisation noyb will file more than 10,000 complaints for use of cookies contrary to its interpretation of compliance.
On 31 May 2021, the nonprofit privacy organisation noyb (short for “none of your...more
The Technology, Media and Telecommunications Review is now in its 11th edition, and I am excited to be taking the reins of this publication after a decade under the steady hand of long-time editor John Janka. This Review...more
Organisations face fines of up to 10% of annual global turnover or £18 million (whichever the greater) for failure to comply.
On 15 December 2020, the UK government published its full response to the Online Harms White...more
2/24/2021
/ Corporate Fines ,
Duty of Care ,
Enforcement Authority ,
Instant Messaging Apps ,
OFCOM ,
Online Platforms ,
Proportionality ,
Regulatory Agenda ,
Risk-Based Approaches ,
Search Engines ,
Social Networks ,
UK ,
White Papers
As the Brexit transition period draws to a close, businesses will need to consider their data protection efforts to comply with both UK and EU regimes.
The end of the Brexit transition period on 31 December 2020 will have...more
The French data protection authority’s decisions cite violations of the cookie rules under the ePrivacy Directive and provide important insights on explicit consent.
Between December 2019 and May 2020, the French data...more
The European Commission has published draft updated standard contractual clauses in light of the Schrems II decision.
On 12 November 2020, the European Commission (the Commission) published a draft implementing decision,...more
12/8/2020
/ Data Controller ,
Data Processors ,
EU ,
European Commission ,
European Data Protection Board (EDPB) ,
General Data Protection Regulation (GDPR) ,
International Data Transfers ,
Member State ,
Personal Data ,
Public Consultations ,
Schrems I & Schrems II ,
Standard Contractual Clauses ,
UK
The EDPB takes a strict approach in its recent guidance on international data transfers following Schrems II, posing a difficult challenge for businesses.
On 10 November, the European Data Protection Board (EDPB) released...more
Swiss companies are advised to take additional measures when transferring personal data from Switzerland to the US.
On 8 September 2020, the Swiss data protection authority, Adrian Lobsiger (the Federal Data Protection and...more
Latham develops new resource to identify considerations for assessing SCC and BCR data transfers in Europe.
Following the Schrems II decision in July 2020, organisations relying on the standard contractual clauses (SCCs) or...more
The proposed Data Security Law has a broad jurisdictional scope and will expand the PRC’s regulatory framework for information and data.
On July 3, 2020, the Standing Committee of China’s National People’s Congress issued...more
A ruling by the EU’s top court invalidates the key mechanism for transferring personal data from the EU to the US and imposes additional conditions for use of the standard contractual clauses.
On 16 July 2020, the Court of...more
New tracking and privacy-related features will apply to all iOS apps when iOS 14 is released in September 2020.
Key Points:
..During Apple’s WWDC 2020 keynote address on June 22, 2020, Apple announced two key privacy...more
After the recent two-year anniversary of the GDPR, one fundamental question remains — who does the GDPR apply to?
Last month marked the two-year anniversary of the General Data Protection Regulation (GDPR), but its...more
Update confirms the introduction of an active “duty of care” and a dedicated regulator, as part of a comprehensive new online regulatory regime.
Following a wave of commentary from industry, the social sector, and other...more
2/21/2020
/ Digital Services ,
Duty of Care ,
Enforcement ,
EU ,
EU Directive ,
Likelihood of Harm ,
New Regulations ,
Online Platforms ,
Public Communications ,
Regulatory Standards ,
Social Networks ,
UK ,
White Papers
IT companies face higher fines in Russia for noncompliance with data privacy and content moderation rules.
In December 2019, Russia imposed large fines for certain types of violations of the Russian data privacy and...more
“Business as usual” for UK-EU data protection transition in 2020.
On 29 January 2020, the EU Parliament approved the UK Withdrawal Agreement after the UK Parliament’s ratification via the EU Withdrawal Act 2020 on 23 January...more
2/14/2020
/ Corporate Counsel ,
EU ,
EU-US Privacy Shield ,
European Data Protection Board (EDPB) ,
European Economic Area (EEA) ,
General Data Protection Regulation (GDPR) ,
Information Commissioner's Office (ICO) ,
International Data Transfers ,
Privacy and Electronic Communications Regulation 2003 (PECR). ,
Transitional Arrangements ,
UK ,
UK Brexit ,
Withdrawal Agreement
Potential amendments to the PDPO would impose much stricter controls on organisations that process personal data of individuals located in Hong Kong.
Key Points:
..On 20 January 2020 the Legislative Council debated...more
As it has since inception, this tenth edition of The Technology, Media and Telecommunications Review provides a survey of evolving legal constructs in 21 jurisdictions around the world. It remains a business-focused framework...more
Data protection violations may result in German authorities imposing significantly increased fines.
The Conference of the German Data Protection Authorities (DSK) ? the joint body of the German data protection authorities...more
10/4/2019
/ Administrative Proceedings ,
Calculation of Penalties ,
Corporate Counsel ,
Corporate Fines ,
Data Breach ,
Data Protection Authority ,
Enforcement Actions ,
EU ,
General Data Protection Regulation (GDPR) ,
Germany ,
Risk Management
How can private equity firms identify and mitigate inherited liability risk from vulnerable portfolio companies?
Ongoing big ticket regulatory fines coupled with high profile corporate veil cases indicate that private...more
9/30/2019
/ Acquisitions ,
British Airways ,
Data Breach ,
Due Diligence ,
General Data Protection Regulation (GDPR) ,
Information Commissioner's Office (ICO) ,
Mergers ,
Piercing the Corporate Veil ,
Portfolio Companies ,
Private Equity ,
Private Equity Firms ,
Risk Assessment ,
Risk Mitigation ,
Successor Liability ,
UK
UK confirms reciprocal requirements for digital services providers to appoint UK representatives for NIS purposes, following Brexit.
Following a consultation process, the UK government has now confirmed that it will put...more
Das ICO kündigt an, Bußgelder gegen British Airways und Marriott zu verhängen. Was ist passiert, wie geht es weiter?
Am 8. Juli 2019 kündigte das Information Commissioner’s Office (ICO) an, gegen British Airways wegen...more
The proposals would grant consumers increasing rights to require providers to share access to their data directly with chosen third parties.
The UK government has released a consultation advocating the introduction of...more
8/2/2019
/ BEIS ,
Consultation ,
Data-Sharing ,
Digital Marketplace ,
Financial Services Industry ,
Open Banking ,
Personal Data ,
Portability ,
Social Networks ,
Third-Party ,
UK
The ICO issued notices of intent to fine British Airways and Marriott. What happened?
On 8 July 2019, the UK Information Commissioner’s Office (ICO) announced a notice of intent to fine British Airways £183.39 million (about...more
7/12/2019
/ British Airways ,
Corporate Fines ,
Cybersecurity ,
Data Breach ,
Data Protection ,
Data Security ,
General Data Protection Regulation (GDPR) ,
Information Commissioner's Office (ICO) ,
Marriott ,
Popular ,
UK
Companies should act now to prepare for the full implementation of the MDR and IVDR.
On 26 May 2020, Regulation (EU) 2017/745 on medical devices (MDR) will become fully active, reflecting an overhaul of the current...more