Following on the heels of the launch of the EU-U.S. Data Privacy Framework (DPF) this summer, the U.S. Department of Commerce has extended the DPF to cover transfers of personal data from the United Kingdom (UK) (and...more
As of July 17, 2023, U.S.-based multinational employers that can access the personal data of their workforce members in the European Union (EU) via a human resources information system (HRIS), or otherwise transfer the...more
7/20/2023
/ Cybersecurity Framework ,
Data Privacy ,
Data Protection ,
Data Security ,
Employer Liability Issues ,
EU ,
EU-US Privacy Shield ,
General Data Protection Regulation (GDPR) ,
International Data Transfers ,
Personal Data ,
Regulatory Reform ,
Regulatory Requirements ,
Schrems I & Schrems II ,
Standard Contractual Clauses
At long last, the European Commission, on June 4, 2021, adopted new Standard Contractual Clauses (“new SCCs”) to permit lawful transfers of personal data from the European Union (EU) to third countries such as the United...more
The Court of Justice of the European Union (“CJEU”), on July 16, 2020, invalidated the European Union-U.S. Privacy Shield Framework (“Privacy Shield”), which more than 5,300 U.S. organizations had relied on to lawfully...more
7/21/2020
/ Court of Justice of the European Union (CJEU) ,
Cybersecurity ,
Data Processors ,
Data Protection ,
EU ,
EU-US Privacy Shield ,
General Data Protection Regulation (GDPR) ,
International Data Transfers ,
Ireland ,
Personal Data ,
Personally Identifiable Information ,
Popular ,
Schrems I & Schrems II ,
Standard Contractual Clauses
On July 16, 2020, the European Court of Justice (CJEU)?the “supreme court” of the European Union (EU)?issued a surprise decision that for the second time in five years completely invalidates the special EU-to-U.S. personal...more
As COVID-19 continues to spread throughout the United States, employers that currently have employees reporting into their facility each day are being forced to consider stringent measures to protect the health and safety of...more
The announcement by Equifax, Inc. that it had been victimized in a hacking incident involving the personal information of 143 million Americans generated headlines this past week. The sheer size of the hack means that most...more
9/18/2017
/ Corporate Counsel ,
Data Breach ,
Equifax ,
EU ,
General Data Protection Regulation (GDPR) ,
Gramm-Leach-Blilely Act ,
Health Insurance Portability and Accountability Act (HIPAA) ,
Personal Data ,
Personally Identifiable Information ,
Popular ,
Risk Mitigation ,
State Data Breach Notification Statutes ,
Vendors
In response to the February 2, 2016, announcement by the European Commission (the "Commission") and the U.S. Commerce Department of a new framework, called the "Privacy Shield," to replace the invalidated U.S.-European Union...more
In a long-awaited and much-anticipated announcement, the U.S. Department of Commerce and the European Commission (the “Commission”) declared on February 2, 2016, that they had struck a deal on a new cross-border data transfer...more
The European Union’s (EU) new data protection framework, known as the General Data Protection Regulation (the “Regulation”), is, at bottom, a response to the astonishing evolution in online commerce. As a result, only one of...more