News & Analysis as of May 5, 2025

Cybersecurity › Extraterritoriality Rules › International Data Transfers

+ Follow

Follow this channel for advisories on one of the biggest threats to businesses today. Read a morning brief of fresh guidance and commentary by leading lawyers on security, privacy, risk... more +

Follow this channel for advisories on one of the biggest threats to businesses today. Read a morning brief of fresh guidance and commentary by leading lawyers on security, privacy, risk management, global regulations, data protection, leaks, hacking, cyber insurance, compliance, HIPAA, and every other aspect of cybersecurity of import to corporate readers right now. less -

PRC Network Data Security Management Regulations

Mayer Brown on 12/24/2024

On 30 September 2024, the State Council of the People's Republic of China published the Network Data Security Management Regulations (the “Regulations”).1 These Regulations finalise the Draft Regulations released for public...more

UK Court of Appeal considers territorial scope of GDPR

Dechert LLP on 1/25/2022

A recent UK Court of Appeal decision highlights ongoing uncertainty regarding the jurisdictional reach of the GDPR and invites intervention from the Information Commissioner’s Office. ...more

China Publishes Draft Regulations on the Administration of Network Data Security

WilmerHale on 12/7/2021

The Cyberspace Administration of China (“CAC”) on November 14, 2021 published the draft Regulations on the Administration of Network Data Security (“Draft Regulations”) for comment through December 13, 2021.1 The Draft...more

China Issues Draft Guidance on Security Assessments for Cross-Border Data Transfers

Jones Day on 11/10/2021

The Cyberspace Administration of China has issued draft guidance on applying for and conducting security assessments for cross-border data transfers for public comment. On October 29, 2021, the Cyberspace Administration of...more

Official Guidelines issued for Japan’s upcoming data privacy law amendments

Hogan Lovells on 8/31/2021

On 3 August 2021, Japan's Personal Information Protection Commission (“PPC”) published its long-awaited Guidelines on amendments enacted in 2020 (the “2020 amendments”) to Japan’s Act on the Protection of Personal Information...more

China’s Data Security Law: A new vision for the regulation of a digital economy

Hogan Lovells on 6/22/2021

China’s National People’s Congress (NPC) promulgated the Data Security Law of the People’s Republic of China (DSL) on June 10, 2021. The DSL will take effect September 1, 2021, making for a very brief transition period...more

China Promulgates Data Security Law

WilmerHale on 6/16/2021

The Standing Committee of China's National People’s Congress (NPC) on June 10 enacted the Data Security Law (DSL) which will come into effect on September 1. The NPC reviewed two earlier drafts of the DSL in July 2020 and...more

Measuring the Reach of GDPR, How Far Is Far Enough?

Knobbe Martens on 2/26/2021

It’s generally recognized that the General Data Protection Regulation (GDPR) can apply to entities outside the European Union. However, scant court rulings guide non-European controllers and processors on this question. The...more

China Unveils Its First Draft of Personal Information Protection Law

Orrick, Herrington & Sutcliffe LLP on 2/1/2021

On October 21, 2020, a draft of China’s Personal Information Protection Law (the “Draft PIPL”) was released for public comment on the website of China’s National People’s Congress – the national legislature. The comment...more

China's Personal Information Protection Law: Legislative Update

Morgan Lewis on 10/28/2020

Long-awaited legislation in China—the Personal Information Protection Law of the People’s Republic of China—was released for public consultation on October 21. Once passed, the law will be the first designated personal...more

New DIFC Data Protection Law in Force - What You Need to Know

Akin Gump Strauss Hauer & Feld LLP on 10/2/2020

On October 1, 2020, the three-month grace period for businesses to comply with the Dubai International Financial Centre (DIFC) Data Protection Law (DIFC Law No. 5 of 2020) (“DPL 2020”) came to an end. Regulating the...more

Should I Be Worried About the GDPR? – EDPB’S Guidelines on the GDPR’S Territorial Scope

Hogan Lovells on 12/31/2019

Does the GDPR really apply to my company? From a data protection standpoint, this is the first thing that comes to mind within non-EU companies. In many cases, the GDPR seems like an issue of the Old Continent, so some assume...more

Proposed Guidance on the Extraterritorial Scope of the GDPR

Akin Gump Strauss Hauer & Feld LLP on 2/21/2019

The EU General Data Protection Regulation (GDPR), which revised and sought to ensure greater harmonization of the European Union’s data protection framework, took effect in May 2018. Among the changes it introduced was the...more

EDPB Draft Guidelines on Extraterritorial Scope of the GDPR Provide Few Clear Answers for US Companies

Ballard Spahr LLP on 12/3/2018

Since the General Data Protection Regulation (“GDPR”) took effect on May 25, 2018, US companies without facilities or employees in Europe have struggled to understand the extraterritorial scope of the GDPR....more

Privacy & Cybersecurity Update - August 2018

Skadden, Arps, Slate, Meagher & Flom LLP on 9/7/2018

In this month's edition of our Privacy & Cybersecurity Update, we examine Brazil's new data protection regulation, the French data protection authority's warning to two companies of potential GDPR violations and the U.S....more

Sin Eaters, Moles, and Eternal Damnation: Europe’s Quasi-Religious War Against U.S. Internet Companies

Womble Bond Dickinson on 8/16/2018

Throughout history, people have waged sectarian fights to protect their beliefs. The Europeans, sitting at a crossroads of two major religions charged with converting the unenlightened, have a particularly combative past. ...more

Do I really need to worry about GDPR?

Bricker Graydon LLP on 8/8/2018

A lot has been written about the European Union’s new General Data Protection Regulation (GDPR), which became effective May 25, 2018. Colleges and universities are still sorting through whether it applies to them and how it...more

CLOUD Act Aims for Clear Skies: Bipartisan CLOUD Act Seeks to Clarify Law Enforcement Access to Overseas Data

Bracewell LLP on 2/16/2018

In October 2017, the Supreme Court granted the Department of Justice’s petition to review the Second Circuit’s decision that limits the reach of warrants issued under the Stored Communications Act (“SCA”). Specifically, the...more

GDPR: FAQ for Non-EU Fund Managers

Proskauer on Privacy on 12/27/2017

The General Data Protection Regulation (the “GDPR”) comes into force automatically in each of the European Union Member States (“EU”) on 25 May 2018. Data protection regulation is not new, with the GDPR building on what is...more

19 Results

/

View per page

Page: of 1