News & Analysis as of

Data Privacy Data Security Data Controller

Mayer Brown

China Finalises the Measures for Personal Information Protection Compliance Audits

Mayer Brown on

On 14 February 2025, the Cyberspace Administration of China (“CAC”) issued the “Administrative Measures for Personal Information Protection Compliance Audits” (the "Measures"), which will take effect on 1 May 2025. The...more

Lathrop GPM

New DOJ Limits on Cross-Border Data Transfers Prompt Assessment by Businesses

Lathrop GPM on

On April 8, the National Security Division of the U.S. Department of Justice’s (DOJ) new rule on cross-border data transfers takes effect. It restricts U.S. businesses from transferring certain bulk sensitive personal data to...more

Latham & Watkins LLP

Kingdom of Saudi Arabia Issues New Data Transfer Risk Assessment Guidelines

Latham & Watkins LLP on

The guidelines specify the requirements for data controllers to conduct risk assessments related to the transfer or disclosure of personal data outside the Kingdom. ...more

Fisher Phillips

Brazil Court Reminds Businesses of Key Data Protection Obligations – What Do Those Doing Business in Brazil Need to Know?

Fisher Phillips on

Four years after the Brazilian General Data Protection Law (LGPD) came into force, Brazil’s Superior Court of Justice (STJ) recently issued a list of precedents exploring how the court applied the law and addressed the...more

Goodwin

Navigating Privacy and Data Security Challenges in the Hospitality Industry: Key Considerations for Hotel Management Agreements

Goodwin on

Over the past decade, the hospitality industry has rapidly adopted intensive technologies to meet the rising expectations of guests, personalize each guest’s experience, and cultivate and enhance customer loyalty. Access to...more

Jones Day

Brazil Amps Up Enforcement of Data Protection Law

Jones Day on

Actions in the last six months of the Brazilian National Data Protection Authority (“ANPD”) suggest that it intends to aggressively enforce the Brazilian Data Protection Law (“LGPD”). The LGPD applies to any entity that...more

DLA Piper

China: Important New Guidance on Defining Sensitive Personal Information

DLA Piper on

While the definition of sensitive personal information in China has always been different to other jurisdictions, with a focus on risk of harm at its heart, new draft guidance should make it easier for organisations to map...more

Fisher Phillips

Cumplir con las reglas de privacidad de datos de México: 6 consejos clave para negocios estadounidenses y extranjeras

Fisher Phillips on

Las compañías que hacen negocios en México deben revisar las políticas y prácticas pertinentes para asegurarse de que se alinean al marco integral de privacidad de datos del país. Específicamente, querrá evaluar sus avisos de...more

Fisher Phillips

Complying with Mexico’s Data Privacy Rules: 6 Key Tips for U.S. and Other Foreign Businesses

Fisher Phillips on

Companies doing business in Mexico should review relevant policies and practices to ensure they align with the country’s comprehensive data privacy framework. Specifically, you’ll want to assess your privacy notices, data...more

Hinshaw & Culbertson - Privacy, Cyber & AI...

Florida and Texas Businesses Must Comply With Updated Privacy Regulations Effective July 2024

If you are a business operating in the Sunshine and/or Lonestar state, then this alert is for you. As discussed further below, Florida recently issued regulations, effective July 18, 2024, clarifying certain requirements set...more

Hogan Lovells

Japan: Interim report on the revision of the Act on the Protection of Personal Information

Hogan Lovells on

The 2020 amendment to the Act on the Protection of Personal Information (“APPI”) stipulates that the APPI must be reviewed every three years — the time for a review has arrived. In the past, since its enactment in 2003, major...more

International Lawyers Network

Data Privacy Guide - Ukraine

Introduction - Below is a brief outline of the legal regulation of personal protection in Ukraine. Governing Data Protection Legislation - 2.1. Overview of principal legislation - The main legal act governing...more

International Lawyers Network

Data Privacy Guide - Canada

Introduction - As a federal state with law-making powers shared between federal and provincial/territorial governments, Canada has both federal and provincial/territorial privacy laws that govern the private and public...more

International Lawyers Network

Data Privacy Guide - Brazil

Introduction - The Brazilian General Data Protection Law (“LGPD”), enacted in 2018 and enforced since 2020, serves as the cornerstone of the country's data protection framework. Its primary objective is to ensure the...more

International Lawyers Network

Data Privacy Guide - Argentina

In Argentina, data protection is governed by comprehensive legislation aimed at safeguarding individuals' personal data. Below you will find an outline of the key aspects including governing legislation, exploring their scope...more

Mayer Brown

ANPD’s Compiled Technical Notes In 2023

Mayer Brown on

In 2023, the Brazilian Data Protection Authority (ANPD) made public several Technical Notes, with the aim of increasing transparency on ANPD actions on several matters, and to provide guidance on specific topics in the...more

Epstein Becker & Green

New Jersey Becomes Most Recent State to Sign a Comprehensive Consumer Privacy Law

Epstein Becker & Green on

On January 16, 2024, New Jersey Governor Phil Murphy signed into law Senate Bill No. 332, “An Act concerning online services, consumers, and personal data” (“SB 332”).  New Jersey is the fourteenth state to pass a...more

Osano

GDPR Compliance Checklist: 8 Steps You Need to Complete

Osano on

GDPR compliance can be tricky. Even if you summon the willpower to read through the law’s text, it can be tough to know where to start. As an alternative to pouring through the GDPR’s legalese, one way to establish a...more

Fisher Phillips

7 Steps to Success: China Releases New Guidelines on Standard Contracts for Exporting Personal Information

Fisher Phillips on

Chinese government data privacy officials recently implemented Guidelines for Filing of Standard Contracts for Export of Personal Information that carry significant consequences for non-compliance – which means organizations...more

Fisher Phillips

FAQs for Businesses as Texas Passes Consumer Privacy Legislation

Fisher Phillips on

Texas became the latest state to pass comprehensive consumer data privacy and security legislation when Governor Abbot signed the Texas Data Privacy and Security Act into law on June 18. It will require businesses to take...more

McDermott Will & Emery

Nevada and Connecticut Pass Consumer Health Data Laws

McDermott Will & Emery on

Following in the footsteps of Washington State’s My Health My Data Act, Nevada SB 370 and Connecticut SB 3 were both recently approved by their respective governors. As detailed below, the laws impose a number of new...more

White & Case LLP

Tennessee Passes Comprehensive Data Privacy Law

White & Case LLP on

On May 11, 2023, Governor Bill Lee signed the Tennessee Information Protection Act (TIPA) into law. Tennessee now joins the rapidly increasing group of states, California, Utah, Colorado, Connecticut, Virginia, Iowa and...more

Bass, Berry & Sims PLC

Texas Data Privacy and Security Act Goes Into Effect with Impact Far Beyond Its Borders

Bass, Berry & Sims PLC on

On June 18, Texas became the eleventh state to enact a comprehensive consumer privacy law by passing the Texas Data Privacy and Security Act (TDPSA) (HB 4). The TDPSA will take effect on July 1, 2024, which is the same day as...more

Fisher Phillips

Transferring Employee or Customer Data Out of China Without Proper Reporting May Have Criminal Consequences: A 4-Step Compliance...

Fisher Phillips on

The compliance grace period for China’s cross-border data security assessment measures has expired — but many international companies with operations or employees in China are still not compliant. In light of the diminishing...more

Kilpatrick

Mystic Privacy: Connecticut's New Law Makes it Clearer

Kilpatrick on

Connecticut’s new privacy law, an Act Concerning Personal Data Privacy and Online Monitoring, also known as the Connecticut Data Privacy Act (“CTDPA”), generally continues the pattern of non-California states enacting...more

51 Results
 / 
View per page
Page: of 3

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
- hide
- hide