News & Analysis as of May 5, 2025

Cybersecurity › Extraterritoriality Rules › Data Protection

+ Follow

Follow this channel for advisories on one of the biggest threats to businesses today. Read a morning brief of fresh guidance and commentary by leading lawyers on security, privacy, risk... more +

Follow this channel for advisories on one of the biggest threats to businesses today. Read a morning brief of fresh guidance and commentary by leading lawyers on security, privacy, risk management, global regulations, data protection, leaks, hacking, cyber insurance, compliance, HIPAA, and every other aspect of cybersecurity of import to corporate readers right now. less -

PRC Network Data Security Management Regulations

Mayer Brown on 12/24/2024

On 30 September 2024, the State Council of the People's Republic of China published the Network Data Security Management Regulations (the “Regulations”).1 These Regulations finalise the Draft Regulations released for public...more

The UK’s Online Safety Bill – Implications for US and International Businesses

Faegre Drinker Biddle & Reath LLP on 10/18/2023

On 19 September 2023, the UK Parliament passed the Online Safety Bill (“OSB”). The OSB aims to protect individuals from illegal online content and focuses on the protection of children by requiring the removal of content that...more

UK Court of Appeal considers territorial scope of GDPR

Dechert LLP on 1/25/2022

A recent UK Court of Appeal decision highlights ongoing uncertainty regarding the jurisdictional reach of the GDPR and invites intervention from the Information Commissioner’s Office. ...more

China Publishes Draft Regulations on the Administration of Network Data Security

WilmerHale on 12/7/2021

The Cyberspace Administration of China (“CAC”) on November 14, 2021 published the draft Regulations on the Administration of Network Data Security (“Draft Regulations”) for comment through December 13, 2021.1 The Draft...more

China Issues Draft Guidance on Security Assessments for Cross-Border Data Transfers

Jones Day on 11/10/2021

The Cyberspace Administration of China has issued draft guidance on applying for and conducting security assessments for cross-border data transfers for public comment. On October 29, 2021, the Cyberspace Administration of...more

Official Guidelines issued for Japan’s upcoming data privacy law amendments

Hogan Lovells on 8/31/2021

On 3 August 2021, Japan's Personal Information Protection Commission (“PPC”) published its long-awaited Guidelines on amendments enacted in 2020 (the “2020 amendments”) to Japan’s Act on the Protection of Personal Information...more

Highlights of China’s Recently Adopted Personal Information Protection Law

Sheppard Mullin Richter & Hampton LLP on 8/25/2021

On August 20, 2021, the Standing Committee of the National People’s Congress adopted the Personal Information Protection Law of the People’s Republic of China (the “Personal Information Protection Law”). The Personal...more

China’s Data Security Law: A new vision for the regulation of a digital economy

Hogan Lovells on 6/22/2021

China’s National People’s Congress (NPC) promulgated the Data Security Law of the People’s Republic of China (DSL) on June 10, 2021. The DSL will take effect September 1, 2021, making for a very brief transition period...more

The Short Arm of GDPR? UK Court Decision Analyzes Application of GDPR to US-based Company

Wyrick Robbins Yates & Ponton LLP on 3/17/2021

Organizations in the United States often ask us how to comply with GDPR. But starting with that question skips a key inquiry: the extent to which GDPR applies to a US company in the first place....more

Measuring the Reach of GDPR, How Far Is Far Enough?

Knobbe Martens on 2/26/2021

It’s generally recognized that the General Data Protection Regulation (GDPR) can apply to entities outside the European Union. However, scant court rulings guide non-European controllers and processors on this question. The...more

China Unveils Its First Draft of Personal Information Protection Law

Orrick, Herrington & Sutcliffe LLP on 2/1/2021

On October 21, 2020, a draft of China’s Personal Information Protection Law (the “Draft PIPL”) was released for public comment on the website of China’s National People’s Congress – the national legislature. The comment...more

China's Personal Information Protection Law: Legislative Update

Morgan Lewis on 10/28/2020

Long-awaited legislation in China—the Personal Information Protection Law of the People’s Republic of China—was released for public consultation on October 21. Once passed, the law will be the first designated personal...more

New DIFC Data Protection Law in Force - What You Need to Know

Akin Gump Strauss Hauer & Feld LLP on 10/2/2020

On October 1, 2020, the three-month grace period for businesses to comply with the Dubai International Financial Centre (DIFC) Data Protection Law (DIFC Law No. 5 of 2020) (“DPL 2020”) came to an end. Regulating the...more

Should I Be Worried About the GDPR? – EDPB’S Guidelines on the GDPR’S Territorial Scope

Hogan Lovells on 12/31/2019

Does the GDPR really apply to my company? From a data protection standpoint, this is the first thing that comes to mind within non-EU companies. In many cases, the GDPR seems like an issue of the Old Continent, so some assume...more

Dark Side of the Moon: Extraterritorial Applicability of the UK Data Protection Act 2018 After Brexit

Hogan Lovells on 3/5/2019

Subject to the deadlock in parliament being broken, or an extension of the Article 50 Brexit process, the UK’s 46-year European Union membership will cease in a matter of days. ...more

Proposed Guidance on the Extraterritorial Scope of the GDPR

Akin Gump Strauss Hauer & Feld LLP on 2/21/2019

The EU General Data Protection Regulation (GDPR), which revised and sought to ensure greater harmonization of the European Union’s data protection framework, took effect in May 2018. Among the changes it introduced was the...more

Massive GDPR Fine Is a Wake-Up Call to Get Compliance and Cyber Insurance Squared Away

Pillsbury - Policyholder Pulse blog on 2/5/2019

Have $57 million (or more) to spare? You’re going to need it if you run afoul of the EU’s General Data Protection Regulation (GDPR) without cyber insurance. In late January 2019, the French data protection authority, CNIL,...more

EDPB Draft Guidelines on Extraterritorial Scope of the GDPR Provide Few Clear Answers for US Companies

Ballard Spahr LLP on 12/3/2018

Since the General Data Protection Regulation (“GDPR”) took effect on May 25, 2018, US companies without facilities or employees in Europe have struggled to understand the extraterritorial scope of the GDPR....more

EU Regulators Publish Guidelines On GDPR Territorial Scope

Goodwin on 12/1/2018

On November 16, 2018, the European Data Protection Board (Board) (comprised of EU member state data protection authorities), published draft guidelines on the territorial scope of the GDPR (Guidelines).The Guidelines provide...more

Your Cyber Insurance Policy May Not Cover GDPR Fines and Liabilities

Womble Bond Dickinson on 9/20/2018

You may be paying for cyber insurance that will not cover the most significant cyber risks faced by your business. Recent studies call into question whether a company can insure against the unprecedented huge fines for...more

Sin Eaters, Moles, and Eternal Damnation: Europe’s Quasi-Religious War Against U.S. Internet Companies

Womble Bond Dickinson on 8/16/2018

Throughout history, people have waged sectarian fights to protect their beliefs. The Europeans, sitting at a crossroads of two major religions charged with converting the unenlightened, have a particularly combative past. ...more

Do I really need to worry about GDPR?

Bricker Graydon LLP on 8/8/2018

A lot has been written about the European Union’s new General Data Protection Regulation (GDPR), which became effective May 25, 2018. Colleges and universities are still sorting through whether it applies to them and how it...more

Data Protection Laws in India

Pillsbury Winthrop Shaw Pittman LLP on 2/7/2018

In August 2017, the Supreme Court of India passed a judgment in the case of Justice K S Puttuswamy vs Union of India (Supreme Court of India, WRIT PETITION (CIVIL) NO 494 OF 2012), in which fundamental rights, as provided in...more

Data Protection Regulation Proposal Approved by the European Parliament

Davis Wright Tremaine LLP on 10/30/2013

The European Parliament has finalized its version of the proposed Data Protection Regulation, which would substantially change personal data protection rules in the 31-country European Economic Area. The Parliament’s LIBE...more

European Parliament Adopts Compromise Amendments on Data Protection Regulation

Wilson Sonsini Goodrich & Rosati on 10/24/2013

Introduction - On October 21, 2013, the European Parliament's Committee on Civil Liberties, Justice and Home Affairs (LIBE Committee) held its long-awaited vote and adopted compromise amendments that would modify the...more

25 Results

/

View per page

Page: of 1