Schrems II may force companies obligated to produce EU personal data to the task of determining whether to comply with US discovery obligation rules that risk fines under the GDPR for illegal data transfers or to defy the US...more
8/24/2020
/ Corporate Counsel ,
Court of Justice of the European Union (CJEU) ,
Cybersecurity ,
Data Protection ,
EU ,
EU-US Privacy Shield ,
General Data Protection Regulation (GDPR) ,
International Data Transfers ,
Personal Data ,
Personally Identifiable Information ,
Popular ,
Schrems I & Schrems II ,
Standard Contractual Clauses
Global organizations need a clear, legal means to share data across borders, whether to conduct day-to-day business, comply with government regulations, perform under a contract, respond to lawsuits, or simply communicate and...more
2/11/2020
/ Binding Corporate Rules ,
Cybersecurity ,
Data Breach ,
Data Collection ,
Data Management ,
Data Processors ,
Data Protection ,
EU ,
EU Data Protection Laws ,
EU-US Privacy Shield ,
General Data Protection Regulation (GDPR) ,
International Data Transfers ,
Personal Data ,
Personally Identifiable Information ,
Risk Management
New data retention limitations and disposal requirements on some types of businesses in New York will go into effect on March 21, 2020, under the Stop Hacks and Improve Electronic Data Security (SHIELD Act) that was signed...more
1/29/2020
/ Cybersecurity ,
Data Disposal Protocols ,
Data Management ,
Data Protection ,
Data Retention ,
Data Security ,
General Data Protection Regulation (GDPR) ,
New Legislation ,
Personally Identifiable Information ,
Regulatory Oversight ,
Risk Management ,
Security Standards ,
SHIELD Act ,
State and Local Government ,
State Data Breach Notification Statutes
The EU General Data Protection Regulation (GDPR) regulates the use of personal data collected from European data subjects, including activities of non-European companies that target or process European data subject personal...more
Similar to the European General Data Protection Regulation in scope and breadth, Brazil’s newly passed data protection regulation covers the processing of personal data and establishes a fundamental right of privacy for data...more
US legislatures are following the European Union’s lead for defining data protection. California just passed a sweeping new consumer data protection law, giving California consumers more control over how their personal data...more
Social media outlets are the targets of the first complaints filed under the EU’s General Data Protection Regulation, coming in hours after the regulation took effect on May 25....more
The EU General Data Protection Regulation (GDPR) goes into force on May 25, 2018, and the effect is going to be felt all over the world. Companies with operations within the EU, or that process the data of any individuals...more