News & Analysis as of

Data Processors Cybersecurity International Data Transfers

Mayer Brown

PRC Guidelines on Identifying Sensitive Personal Information

Mayer Brown on

The PRC National Technical Committee 260 on Cybersecurity of SAC (“TC260”) published new Guidelines on Identifying Sensitive Personal Information (“Guidelines”) on 18 September 2024, nearly three months after it released the...more

WilmerHale

Navigating China’s Data Security Laws in US Discovery

WilmerHale on

The enactment of China’s Cybersecurity Law (CSL), Data Security Law (DSL), and Personal Information Protection Law (PIPL, together with the CSL and the DSL, “Data Security Laws”) has significantly reshaped the landscape of...more

WilmerHale

Details of the EU Data Act (2) - Obligations of Cloud and Other Data Processing Services: Switching and Interoperability...

WilmerHale on

On November 27, 2023, the Council of the European Union adopted the EU Data Act, a new regulation providing harmonized rules on access to data, switching cloud providers and interoperability requirements across the EU. The...more

Morgan Lewis

New EU Data Act: Impact On Data Flows Within And Outside The EU’s Borders

Morgan Lewis on

The Council of the European Union adopted the Data Act on November 27, 2023. The Data Act, together with the Data Governance Act and EU General Data Protection Regulation (GDPR), as key elements of the broader European data...more

White & Case LLP

China’s Standard Contract for the Outbound Cross-border Transfer of Personal Information is in Effect

White & Case LLP on

China's Cybersecurity Law ("CSL"), Personal Information Protection Law ("PIPL") and Data Security Law ("DSL") set a series of rules and requirements for the cross-border transfer of personal information located in China....more

A&O Shearman

Pakistan – MITT releases final draft of the personal data protection bill

A&O Shearman on

The Pakistan Ministry of Information Technology and Telecommunication (MITT) released a new draft of the Personal Data Protection Bill, 2023 (the PDPB) on 19 May 2023. The PDPB aims to regulate the collection, processing,...more

Osano

GDPR Compliance in the U.S.: What to Know

Osano on

In 1992, Singapore banned the sale of all chewing gum. But if you owned a cornerstore in the U.S. and a Singaporean tourist came to visit your business, there would be nothing to stop you from selling them a pack of gum—in...more

Orrick, Herrington & Sutcliffe LLP

Court of Justice of the European Union holds non-material damages stemming from unlawful data processing may be eligible for...

On May 4, the Court of Justice of the European Union (CJEU) issued a judgment concluding that while not every infringement of the EU’s data protection law gives rise, by itself, to a right to compensation, non-material damage...more

Pillsbury Winthrop Shaw Pittman LLP

Cross-Border Data Transfer Mechanisms and Requirements in China

In recent years, alongside the rapid development of the digital economy and the concomitant increase in data generation, collection, processing and monitoring in the People’s Republic of China (PRC or China), the Chinese...more

Pillsbury Winthrop Shaw Pittman LLP

China Publishes Measures on Standard Contract for Cross-border Transfer of Personal Information

The Personal Information Protection (PIP) Law of the People’s Republic of China (PRC) provides three legal mechanisms for a personal information processor (data controller) in the mainland PRC to transfer personal information...more

WilmerHale

CCRC is First to Be Qualified to Conduct Personal Information Protection Certification for Export of Personal Information

WilmerHale on

Article 38 of China’s Personal Information Protection Law (“PIPL”) enacted in 2021, which is more demanding than GDPR in Europe, provides three channels to conduct the outbound transfer or export of personal information...more

WilmerHale

China Updates Specification on Security Certification for Cross-Border Personal Information Processing Activities

WilmerHale on

On December 16, 2022 – less than six months after the initial version (“V1.0”) was released in June 2022, and within six weeks after the draft revision was issued on November 8 – the National Information Security...more

BCLP

PRC Legal Update: China’s Security Assessment Process of Outbound Data Transfers

BCLP on

Under the PRC Cybersecurity Law, PRC Personal Information Protection Law and PRC Data Security Law, certain organisations (as well as individuals) are now required to conduct a security assessment of outbound transfers of...more

Kilpatrick

5 Key Takeaways - How GDPR has Impacted American Companies and the Future of Transatlantic Data Transfers

Kilpatrick on

The European Union’s General Data Protection Regulation (“GDPR”) marked a turning point in privacy and data protection practices globally and transformed how American companies approach the protection of personal data....more

Hogan Lovells

RODO – ostatni moment na dostosowanie klauzul umownych w przypadku przekazywania danych do państw trzecich

Hogan Lovells on

Przekazywanie danych do państw trzecich dotyczy sytuacji, w których administrator lub podmiot przetwarzający dane osobowe dokonuje transferu danych osobowych do państwa trzeciego, czyli do państwa spoza Europejskiego Obszaru...more

Latham & Watkins LLP

China Unveils Draft Standard Contract and Provides Clarifications on Cross-Border Data Transfer Mechanisms

Latham & Watkins LLP on

China’s CAC publishes guidance on cross-border data transfers, including draft standard contractual clauses and regulatory guidance on certification and security assessment. Key Points: ..Security Assessment:...more

Orrick, Herrington & Sutcliffe LLP

The Irish Data Protection Commission Widens the Definition of “Personal Data Breach,” as Well as the Approach to Timely...

On 14 March 2022 the Data Protection Commission of Ireland (DPC) handed down a decision in respect of 22 personal data breach notifications made by the Bank of Ireland Group Plc (BOI) between November 2018 and June 2019. The...more

BakerHostetler

International Data Protection Update - Winter 2021/2022

BakerHostetler on

This Update highlights some of the international data protection issues that caught our attention and the attention of our clients over the winter, including updates on European data transfers and cookie compliance,...more

Hogan Lovells

Clinical trials in Spain: Takeaways from the new code of conduct (Part 1)

Hogan Lovells on

Last week we raised our hands to inform you about the Spanish Data Protection Authority’s approval of the "Code of Conduct on the processing of personal data in the field of clinical trials and other clinical research as well...more

Jones Day

UK Proposes New Standard Contractual Clauses for Data Transfers to Third Countries

Jones Day on

EU and UK data protection rules each restrict transfers of personal data to third countries not regarded as having an adequate level of protection, such as the United States, China, Russia and India....more

Goodwin

China is Entering a New Era in Data Protections

Goodwin on

On November 1, 2021, the Personal Information Protection Law of the People’s Republic of China (the “PRC”) (the “Personal Information Protection Law”) went into effect, two months after the Data Security Law of the PRC (the...more

Sunstein LLP

The EU’s New Privacy Rules: The Promise and Peril for US Data Processors

Sunstein LLP on

The European Union’s General Data Protection Regulation (GDPR) prohibits transfers of personal information about Europeans to destinations outside of the EU unless one of several tests is satisfied. As pertains to transfers...more

WilmerHale

China Publishes Draft Regulations on the Administration of Network Data Security

WilmerHale on

The Cyberspace Administration of China (“CAC”) on November 14, 2021 published the draft Regulations on the Administration of Network Data Security (“Draft Regulations”) for comment through December 13, 2021.1 The Draft...more

Hogan Lovells

Key features of the new Rwandan data protection law

Hogan Lovells on

On 13 October 2021, almost two years after the adoption of a bill on data protection, Rwanda's first data protection legislation, Law No. 058/2021 Relating to the Protection of Personal Data and Privacy ("Data Protection Law"...more

K&L Gates LLP

What Multinational Companies Need to Know about Collecting Personal Information from Their Employees in China

K&L Gates LLP on

The Personal Information Protection Law (PIPL), which is considered the first comprehensive law on personal information protection in People’s Republic of China (PRC or China), came into effect on 1 November 2021. Prior to...more

156 Results
 / 
View per page
Page: of 7

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
- hide
- hide