News & Analysis as of May 5, 2025

General Data Protection Regulation (GDPR)

+ Follow

Follow this channel for advisories on one of the biggest threats to businesses today. Read a morning brief of fresh guidance and commentary by leading lawyers on security, privacy, risk... more +

Follow this channel for advisories on one of the biggest threats to businesses today. Read a morning brief of fresh guidance and commentary by leading lawyers on security, privacy, risk management, global regulations, data protection, leaks, hacking, cyber insurance, compliance, HIPAA, and every other aspect of cybersecurity of import to corporate readers right now. less -

The Evolving Framework of Data Governance: A Global Perspective

Morgan Lewis on 3/12/2025

Data privacy laws are evolving rapidly worldwide, with jurisdictions such as California, Japan, Canada, and Brazil adopting frameworks inspired by the EU’s General Data Protection Regulation (GDPR). Businesses operating...more

Data, Privacy & Cyber: Ten Top Trends for 2025

Ius Laboris on 1/31/2025

In the fast-paced, ever-changing world of data, privacy, cyber, and AI, staying ahead of the curve is crucial. To mark Data Protection Day 2025, we've identified ten key themes that might significantly impact our clients in...more

Sheppard Mullin’s 2024 Eye on Privacy Year in Review

Sheppard Mullin Richter & Hampton LLP on 1/22/2025

It is hard to believe that another year is upon us! As we have done in years past (including 2023, 2022, 2021, 2020, 2019 and 2018), we have created a comprehensive resource of all our www.eyeonprivacy.com posts from 2024. As...more

Australia’s Privacy Reforms: Claus for Concern?

Ropes & Gray LLP on 12/17/2024

In the six years since the EU’s General Data Protection Regulation (“GDPR”) took effect, governments around the world have updated their data protection laws to reflect the seismic changes in data processing that were created...more

German Data Protection Authorities on Asset Deals: Restrictions on Data Transfers Under GDPR

Morgan Lewis on 9/23/2024

The German Data Protection Conference (DSK) on September 11, 2024 published guidance on asset deals (the Guidelines) that distinguishes between various stages of a sale process and the relevant personal data that can be...more

Will the U.S. Have a GDPR? With Rachael Ormiston of Osano

Osano on 7/9/2024

In this episode of The Privacy Insider Podcast, host Arlo Gilbert is joined by Rachael Ormiston, Head of Privacy at Osano, to dive into the complex world of U.S. privacy regulations. How does the U.S. view privacy differently...more

Changes to the UK GDPR Shelved (For Now)

Mayer Brown on 5/29/2024

With the announcement of UK General Election for Thursday 4 July 2024, the Data Protection and Digital Information Bill has not completed the legislative process before the end of the current parliamentary session and will...more

China Officially Promulgates New Cross-Border Data Transfer Requirements

Benesch on 4/1/2024

The newly promulgated measures increase the threshold of data triggering security assessments and contract requirements while leaving room for Chinese authorities to heavily restrict cross-border data transfers. In...more

EDPB Provides Guidance On Determining A 'Main Establishment' And The 'One-Stop-Shop' Mechanism

Mayer Brown on 2/29/2024

The opinion was issued in response to a request by the French Data Protection Authority and provides guidance on the conditions for determining a controller's main establishment where that controller has establishments in...more

Italian Data Protection Authority Alleges Breaches of GDPR by ChatGPT Platform

Robinson+Cole Data Privacy + Security Insider on 2/2/2024

On January 29, 2024, the Italian Data Protection Authority (Garante) notified OpenAI of breaches of data protection laws involving its ChatGPT platform....more

Second time´s a charm – Spanish DPA's decision on NOYB vs. Google Analytics Part 2

Hogan Lovells on 2/1/2024

Following NOYB's filing of 101 complaints over continuous EU-U.S. data transfers by websites operators in the European Economic Area (EEA) in the post-Schrems II era, the Spanish Data Protection Agency (AEPD) issued its first...more

Fact Sheet on the Digital Markets Act

Wilson Sonsini Goodrich & Rosati on 1/25/2024

The EU’s Digital Markets Act (DMA) imposes far-reaching ex ante obligations on the largest digital platforms, so-called “gatekeepers.” It applies in parallel with antitrust rules, national regulation (which can go beyond the...more

Details of the EU Data Act (2) - Obligations of Cloud and Other Data Processing Services: Switching and Interoperability...

WilmerHale on 12/19/2023

On November 27, 2023, the Council of the European Union adopted the EU Data Act, a new regulation providing harmonized rules on access to data, switching cloud providers and interoperability requirements across the EU. The...more

India’s Digital Personal Data Protection Act 2023 vs. the GDPR: A Comparison

Latham & Watkins LLP on 12/13/2023

Companies subject to India’s new data protection law should assess practical implications. The Indian parliament enacted India’s first comprehensive data protection law on 11 August 2023, namely the Digital Personal Data...more

New EU Data Act: Impact On Data Flows Within And Outside The EU’s Borders

Morgan Lewis on 12/6/2023

The Council of the European Union adopted the Data Act on November 27, 2023. The Data Act, together with the Data Governance Act and EU General Data Protection Regulation (GDPR), as key elements of the broader European data...more

Privacy Regulations Are Built on Hope - A Deep Dive Into India’s Digital Personal Data Protection Act

K&L Gates LLP on 10/27/2023

In this episode, our privacy lawyers, Claude-Étienne Armingaud, Whitney McCollum, and Camille Scarparo, sit down with Arya Tripathy, a partner at Priti Suri & Associates in New Dehli, and discuss together India’s newly...more

EU-US Data Privacy Framework, UK-US Data Bridge Ease Transatlantic Data Transfers

Miles & Stockbridge P.C. on 10/13/2023

Sharing personal data across borders is critical for organizations operating and doing business internationally. Doing so in compliance with data security and privacy laws, however, can be a complex and challenging exercise...more

Data Transfers Permitted Across the Pond via New EU-U.S. Data Privacy Framework

Bond Schoeneck & King PLLC on 7/25/2023

On July 10, 2023, the European Commission adopted its adequacy decision on data transfers for the EU-U.S. (European Union/United States) Data Privacy Framework (DPF). The adequacy decision concluded that the United States...more

European Data Protection Board clarifies GDPR transfers

Orrick, Herrington & Sutcliffe LLP on 7/24/2023

On July 18, the European Data Protection Board (EDPB) published an information note to provide clarity on data transfers under the GDPR to the United States following the European Commission’s adoption of the adequacy...more

How to Comply with the New EU-US Data Privacy Framework

Morgan Lewis on 7/24/2023

The EU-US Data Privacy Framework (DPF) became effective on July 10, and on the same day, the European Commission adopted an Adequacy Decision relating to the DPF. As a successor of the EU-US Privacy Shield, the EU-US DPF...more

European Union and United States Reach New Agreement for Data Flow Across the Atlantic

Jones Day on 7/20/2023

On July 10, 2023, the EU Commission adopted its adequacy decision for the EU-U.S. Data Privacy Framework, concluding that the United States ensures an adequate level of protection for personal data transferred from the...more

Privacy, Data and Cybersecurity Quick Clicks | Issue 7

Katten Muchin Rosenman LLP on 7/20/2023

Katten's Privacy, Data and Cybersecurity Quick Clicks is a monthly newsletter highlighting the latest news and legal developments involving privacy, data and cybersecurity issues across the globe....more

EU-U.S. Data Privacy Framework: Next Steps for U.S. Companies

Orrick, Herrington & Sutcliffe LLP on 7/19/2023

On July 10, 2023, the European Commission formally approved the EU-U.S. Data Privacy Framework (“DPF"). You can view our brief video discussion about the DPF or read our initial update. Companies that maintained their...more

U.S. Companies Now Have a Framework for EU-U.S. Personal Data Transfers

Brownstein Hyatt Farber Schreck on 7/18/2023

In a significant milestone for EU-U.S. cross-border transfers of personal data under Article 45 of the General Data Protection Regulation (GDPR), the European Commission adopted an adequacy decision for the new EU-U.S. Data...more

Data Transfer Déjà Vu: European Commission Approves Another EU-U.S. Data Transfer Mechanism

Vinson & Elkins LLP on 7/14/2023

On July 10, 2023, the European Commission (the “Commission”) adopted an adequacy decision for the EU-U.S. Data Privacy Framework (the “Framework”). The Framework provides companies that opt in with a legitimate means of...more

440 Results

View per page

Page: of 18

Cybersecurity › International Data Transfers › General Data Protection Regulation (GDPR)

"My best business intelligence, in one easy email…"