News & Analysis as of

Data Processors Cybersecurity Personal Data

Barnea Jaffa Lande & Co.

New EDPB Opinion on Personal Data Protection in AI

Recently, the European Data Protection Board (EDPB) adopted an opinion addressing key data protection concerns arising from the use of Artificial Intelligence (AI) models. The opinion specifically focuses on how GDPR...more

Mintz

Kentucky’s Consumer Privacy Law Is Coming, But on a Slow Track

Mintz on

To round out this year’s series on new state consumer privacy laws, we are covering the statute passed by Kentucky earlier this year. Please also keep your eye out for our 2024 round-up article that will be published soon, as...more

Mayer Brown

Amendment to ANATEL's Cybersecurity Regulations - Incident Notification and Prior Evaluation of Suppliers

Mayer Brown on

The National Telecommunications Agency (ANATEL) published Resolution No. 767 of August 2024 (the “Resolution”), which amended Resolution No. 740 of 2020, also known as the Cybersecurity Regulation Applied to the...more

Mayer Brown

ANPD's New Regulation on Guidelines and Responsibilities of Data Protection Officers in Brazil

Mayer Brown on

The Brazilian Data Protection Authority (ANPD) has published its new regulation on the Data Protection Officer’s (DPO) role. A central figure in privacy governance, the DPO serves as the liaison between the data controller,...more

Mayer Brown

ANPD’s Compiled Technical Notes In 2023

Mayer Brown on

In 2023, the Brazilian Data Protection Authority (ANPD) made public several Technical Notes, with the aim of increasing transparency on ANPD actions on several matters, and to provide guidance on specific topics in the...more

Epstein Becker & Green

New Jersey Becomes Most Recent State to Sign a Comprehensive Consumer Privacy Law

Epstein Becker & Green on

On January 16, 2024, New Jersey Governor Phil Murphy signed into law Senate Bill No. 332, “An Act concerning online services, consumers, and personal data” (“SB 332”).  New Jersey is the fourteenth state to pass a...more

McGuireWoods LLP

New Jersey Becomes the Latest State to Enact a Comprehensive Data Privacy Law

McGuireWoods LLP on

On January 16, 2024, New Jersey became the thirteenth state to enact a comprehensive data privacy law, named the New Jersey Data Privacy Act (the “NJDPA”)....more

WilmerHale

Details of the EU Data Act (2) - Obligations of Cloud and Other Data Processing Services: Switching and Interoperability...

WilmerHale on

On November 27, 2023, the Council of the European Union adopted the EU Data Act, a new regulation providing harmonized rules on access to data, switching cloud providers and interoperability requirements across the EU. The...more

Morgan Lewis

New EU Data Act: Impact On Data Flows Within And Outside The EU’s Borders

Morgan Lewis on

The Council of the European Union adopted the Data Act on November 27, 2023. The Data Act, together with the Data Governance Act and EU General Data Protection Regulation (GDPR), as key elements of the broader European data...more

Osano

GDPR Compliance Checklist: 8 Steps You Need to Complete

Osano on

GDPR compliance can be tricky. Even if you summon the willpower to read through the law’s text, it can be tough to know where to start. As an alternative to pouring through the GDPR’s legalese, one way to establish a...more

Kilpatrick

Vendor Management from a U.S. Data Privacy Perspective

Kilpatrick on

Given the increasing number of data privacy laws in the U.S., entering into appropriate data processing agreements (“DPAs”) with vendors has now become a critical component of vendor management. It can also be one of the most...more

A&O Shearman

Pakistan – MITT releases final draft of the personal data protection bill

A&O Shearman on

The Pakistan Ministry of Information Technology and Telecommunication (MITT) released a new draft of the Personal Data Protection Bill, 2023 (the PDPB) on 19 May 2023. The PDPB aims to regulate the collection, processing,...more

Osano

GDPR Compliance in the U.S.: What to Know

Osano on

In 1992, Singapore banned the sale of all chewing gum. But if you owned a cornerstore in the U.S. and a Singaporean tourist came to visit your business, there would be nothing to stop you from selling them a pack of gum—in...more

Orrick, Herrington & Sutcliffe LLP

Court of Justice of the European Union holds non-material damages stemming from unlawful data processing may be eligible for...

On May 4, the Court of Justice of the European Union (CJEU) issued a judgment concluding that while not every infringement of the EU’s data protection law gives rise, by itself, to a right to compensation, non-material damage...more

BCLP

PRC Legal Update: China’s Security Assessment Process of Outbound Data Transfers

BCLP on

Under the PRC Cybersecurity Law, PRC Personal Information Protection Law and PRC Data Security Law, certain organisations (as well as individuals) are now required to conduct a security assessment of outbound transfers of...more

Kilpatrick

5 Key Takeaways - How GDPR has Impacted American Companies and the Future of Transatlantic Data Transfers

Kilpatrick on

The European Union’s General Data Protection Regulation (“GDPR”) marked a turning point in privacy and data protection practices globally and transformed how American companies approach the protection of personal data....more

Hogan Lovells

RODO – ostatni moment na dostosowanie klauzul umownych w przypadku przekazywania danych do państw trzecich

Hogan Lovells on

Przekazywanie danych do państw trzecich dotyczy sytuacji, w których administrator lub podmiot przetwarzający dane osobowe dokonuje transferu danych osobowych do państwa trzeciego, czyli do państwa spoza Europejskiego Obszaru...more

A&O Shearman

Netherlands - VoetbalTV decision offers no further clarity on validity of a purely commercial interest as a legitimate interest...

A&O Shearman on

On 27 July 2022, the Council of State (RVS), the highest administrative court of the Netherlands, published its decision in the VoetbalTV case regarding the interpretation of the legitimate interest legal basis for...more

Perkins Coie

CAC Seeks Public Comment on China’s New Personal Privacy Contract

Perkins Coie on

The Cyberspace Administration of China (CAC), the country’s internet watchdog, began collecting feedback on the draft provisions with respect to the release of its Standard Contract for Outbound Cross-border Transfer of...more

Skadden, Arps, Slate, Meagher & Flom LLP

Privacy & Cybersecurity Update - May 2022

In this month’s Privacy & Cybersecurity Update, we review Connecticut’s passage of a comprehensive privacy law (making it the fifth state to do so), the newly enacted federal Better Cybercrime Metrics Act, New York’s new law...more

Orrick, Herrington & Sutcliffe LLP

The Irish Data Protection Commission Widens the Definition of “Personal Data Breach,” as Well as the Approach to Timely...

On 14 March 2022 the Data Protection Commission of Ireland (DPC) handed down a decision in respect of 22 personal data breach notifications made by the Bank of Ireland Group Plc (BOI) between November 2018 and June 2019. The...more

Jones Day

Utah Becomes Fourth State to Enact a Comprehensive Data Privacy Law

Jones Day on

On March 24, 2022, Utah followed California, Virginia, and Colorado in adopting a comprehensive consumer data privacy law. On March 24, 2022, Utah Governor Spencer Cox signed the Consumer Privacy Act ("Act"), making Utah...more

Morgan Lewis

Utah Passes More Business-Friendly Consumer Data Privacy Law

Morgan Lewis on

Utah has become the fourth state in the United States to pass a comprehensive consumer data privacy law—the most business-friendly state privacy law yet....more

Hogan Lovells

ANPD publishes Resolution regulating the application of LGPD provisions to small businesses

Hogan Lovells on

On January 27, 2022, the National Data Protection Authority (ANPD) published Resolution nr. 2, regulating the application of certain provisions of the General Personal Data Protection Act (LGPD) to small processing agents,...more

Hogan Lovells

ANPD publica Resolução regulamentando aplicação de dispositivos da LGPD a empresas de pequeno porte

Hogan Lovells on

No dia 27 de janeiro de 2022, a Autoridade Nacional de Proteção de Dados (ANPD) publicou a Resolução n.º 2, regulamentando a aplicação de determinados dispositivos da Lei Geral de Proteção de Dados Pessoais (LGPD) a agentes...more

227 Results
 / 
View per page
Page: of 10

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
- hide
- hide