On May 4, 2020, the European Data Protection Board (EDPB) adopted two important revisions to its 33-page Guidelines on Consent (Guidelines) under the General Data Protection Regulation (GDPR). The Guidelines are highly...more
On April 15, 2020, the Information Commissioner’s Office (ICO), the U.K.’s data protection authority, issued further guidance on its regulatory approach during the global COVID-19 pandemic. Following its March note that we...more
4/21/2020
/ Coronavirus/COVID-19 ,
Corporate Counsel ,
Cybersecurity ,
Data Breach ,
Data Protection ,
Data Protection Authority ,
Enforcement Actions ,
Freedom of Information ,
Guidance Update ,
Information Commissioner's Office (ICO) ,
Public Health Emergency ,
UK
On April 1, 2020, the U.K. Supreme Court handed down its judgment in the case of WM Morrison Supermarkets plc v Various Claimants [2020] UKSC 12, the first class action-type claim concerning a data breach in the U.K.. In this...more
4/9/2020
/ Class Action ,
Cybersecurity ,
Data Breach ,
Data Protection ,
Employee Misconduct ,
General Data Protection Regulation (GDPR) ,
Personal Data ,
Popular ,
UK ,
UK Data Protection Act ,
UK Supreme Court ,
Vicarious Liability
We reported in July 2019 that the Court of Justice of the European Union (CJEU) heard a case brought by privacy-rights activist Max Schrems, challenging the validity of Standard Contractual Clauses (SCCs), which are widely...more
12/24/2019
/ Advocate General ,
Binding Corporate Rules ,
Court of Justice of the European Union (CJEU) ,
Data Privacy ,
Data Protection ,
Data Subjects Rights ,
EU ,
EU-US Privacy Shield ,
European Commission ,
International Data Transfers ,
National Security ,
Personal Data ,
Privacy Laws ,
Standard Contractual Clauses ,
US-EU Safe Harbor Framework
On November 18, 2019, the U.K. Jurisdiction Taskforce (UKJT), one of six taskforces established by the LawTech Delivery Panel (set up by the U.K. government, the judiciary and the Law Society to promote the use of technology...more
12/13/2019
/ Blockchain ,
Cryptoassets ,
Cryptocurrency ,
Data Protection ,
Digital Assets ,
Distributed Ledger Technology (DLT) ,
Investment Management ,
Investors ,
Smart Contracts ,
UK ,
UKJT
On September 24, 2019, the highest court of the European Union (EU), the Court of Justice of the EU (CJEU), attempted to limit the territorial scope and authority of EU data protection authorities in its recent decision...more
10/4/2019
/ CNIL ,
Data Privacy ,
Data Protection ,
Data Protection Authority ,
Delisting ,
EU Data Protection Laws ,
European Court of Justice (ECJ) ,
France ,
General Data Protection Regulation (GDPR) ,
Geo-Blocking ,
Google ,
Member State ,
Right to Be Forgotten ,
Search Engines ,
Website Accessibility ,
Website Owner Liability
On 15 July 2019, an unprecedented cyber-attack in Bulgaria was announced. Hackers have stolen data from the National Revenue Agency (“NRA”) relating to around 70% of Bulgaria’s population, including foreign nationals and...more
7/22/2019
/ Bulgaria ,
Cyber Attacks ,
Cybersecurity ,
Data Breach ,
Data Controller ,
Data Privacy ,
Data Processors ,
Data Protection ,
Hackers ,
Investigations ,
Personal Data ,
Personally Identifiable Information ,
Popular ,
Risk Mitigation