News & Analysis as of

Data Processors Data Controller

DLA Piper

Germany: Monitoring and Auditing Obligations of Controllers with Respect to Their Processors

DLA Piper on

In a decision on immaterial damages under Article 82 of the EU General Data Protection Regulation (GDPR), the Higher Regional Court of Dresden, Germany (case number 4 U 940/24), set out important monitoring and auditing...more

Lathrop GPM

New DOJ Limits on Cross-Border Data Transfers Prompt Assessment by Businesses

Lathrop GPM on

On April 8, the National Security Division of the U.S. Department of Justice’s (DOJ) new rule on cross-border data transfers takes effect. It restricts U.S. businesses from transferring certain bulk sensitive personal data to...more

White & Case LLP

Mexico Enacts New Data Protection Regime

White & Case LLP on

On March 20, 2025, the evening edition of the Federal Official Gazette published a decree (the "Decree") enacting the General Law on Transparency and Access to Public Information ("LGTAIP"), the General Law on the Protection...more

BCLP

Mobile Apps: What Does the CNIL Recommend From a Privacy Perspective?

BCLP on

While mobile apps have become one of the major means of access to digital services, their ubiquity is accompanied by significant risks to users' privacy, due to the massive amount of personal data they collect and process....more

Ogletree, Deakins, Nash, Smoak & Stewart,...

Frequently Asked Questions About the New Jersey Data Protection Act, Effective January 15, 2025

The New Jersey Data Protection Act (NJDPA), N.J. Stat. § 56:8-166.4 et seq., will go into effect on January 15, 2025, as New Jersey joins eighteen other states with comprehensive data privacy laws. ...more

BCLP

European Data Protection Board's Opinion on AI Models

BCLP on

On 17 December 2024, the European Data Protection Board (EDPB) adopted its opinion on certain data protection aspects related to the processing of personal data in the context of AI models (Opinion). The Opinion comes as a...more

BCLP

AI Tools in Recruitment - Key Takeaways from the ICO Report

BCLP on

On 6 November 2024, the ICO published an outcomes report on AI tools in recruitment (the “Report”). This Report follows consensual audit engagements carried out by the ICO with developers and providers of AI tools to be used...more

Alston & Bird

Chile Passes New Data Protection Law

Alston & Bird on

On 14 November, and after many years of negotiations, Chile adopted a new Data Protection Act (la Ley que regula la protección y el tratamiento de los datos personales y crea la Agencia de protección de datos personales)....more

Bricker Graydon LLP

Oh My Gourd, Another Data Privacy Law?! 

Bricker Graydon LLP on

In 2018, there were two comprehensive state data privacy bills introduced across the United States and a whopping zero were in effect. Fast forward six years and there have been 41 new data privacy bills considered this year...more

Latham & Watkins LLP

EDPB Issues Guidelines on Processing Personal Data for Legitimate Interests Purposes

Latham & Watkins LLP on

The draft guidelines provide further clarification to the EDPB’s interpretation of legitimate interests, and suggest a potential divergence with the UK ICO....more

DLA Piper

EU: Engaging Vendors in the Financial Sector: EDPB Clarifications Mean More Mapping and Management

DLA Piper on

The European Data Protection Board (“EDPB“) adopted an opinion on 7 October 2024, providing guidance for data controllers relying on processors (and sub-processors) under the GDPR....more

Ogletree, Deakins, Nash, Smoak & Stewart,...

Colorado AG Proposes Amendments to the Colorado Privacy Act Rules to Implement Recent Legislative Updates

Just over one year after the Colorado Privacy Act Rules took effect, the Colorado Attorney General’s Office filed a set of proposed draft amendments that, if implemented, would significantly modify the Rules to reflect recent...more

Fisher Phillips

Brazil Court Reminds Businesses of Key Data Protection Obligations – What Do Those Doing Business in Brazil Need to Know?

Fisher Phillips on

Four years after the Brazilian General Data Protection Law (LGPD) came into force, Brazil’s Superior Court of Justice (STJ) recently issued a list of precedents exploring how the court applied the law and addressed the...more

Alston & Bird

EDPB Adopts Opinion on the Use of Processors and Sub-processors

Alston & Bird on

On October 7, 2024, the European Data Protection Board (“EDPB”) adopted an opinion on obligations following from the use of processors and sub-processors (the “Opinion”). The EDPB is the body that seeks to ensure harmonised...more

Fisher Phillips

Brazil’s New International Data Transfer Rules Could Impact Your Multinational Business: What You Need to Know and Your 6-Step...

Fisher Phillips on

New rules just took effect in Brazil regulating international data transfers, and employers doing business in the country must take note. Covered data processing agents – such as companies in Brazil that transfer data to...more

Goodwin

Navigating Privacy and Data Security Challenges in the Hospitality Industry: Key Considerations for Hotel Management Agreements

Goodwin on

Over the past decade, the hospitality industry has rapidly adopted intensive technologies to meet the rising expectations of guests, personalize each guest’s experience, and cultivate and enhance customer loyalty. Access to...more

Mayer Brown

New ANPD Regulation International Data Transfers

Mayer Brown on

Scope of the Regulation - On August 23, 2024, the Brazilian Data Protection Authority (ANPD) published Resolution CD/ANPD No. 19/2024 (the “Regulation”), which addresses international transfers of personal data....more

Fisher Phillips

Cumplir con las reglas de privacidad de datos de México: 6 consejos clave para negocios estadounidenses y extranjeras

Fisher Phillips on

Las compañías que hacen negocios en México deben revisar las políticas y prácticas pertinentes para asegurarse de que se alinean al marco integral de privacidad de datos del país. Específicamente, querrá evaluar sus avisos de...more

Fisher Phillips

Complying with Mexico’s Data Privacy Rules: 6 Key Tips for U.S. and Other Foreign Businesses

Fisher Phillips on

Companies doing business in Mexico should review relevant policies and practices to ensure they align with the country’s comprehensive data privacy framework. Specifically, you’ll want to assess your privacy notices, data...more

Mayer Brown

ANPD's New Regulation on Guidelines and Responsibilities of Data Protection Officers in Brazil

Mayer Brown on

The Brazilian Data Protection Authority (ANPD) has published its new regulation on the Data Protection Officer’s (DPO) role. A central figure in privacy governance, the DPO serves as the liaison between the data controller,...more

Barnea Jaffa Lande & Co.

Israel: Significant Changes in Privacy Protection Law

The Knesset Constitution, Law, and Justice Committee has approved an amendment to the Israeli Privacy Protection Law (PPL). The amendment proposes extensive changes to the PPL, including granting additional enforcement powers...more

Vinson & Elkins LLP

The TDPSA: A New Sheriff in Town for Texas Data Controllers and Processors

Vinson & Elkins LLP on

The Texas Data Privacy and Security Act (“TDPSA” or the “Act”) came into effect on July 1, 2024. The TDPSA applies to any person who (i) conducts business in the state of Texas or produces a product or service consumed by...more

Hinshaw & Culbertson - Privacy, Cyber & AI...

Florida and Texas Businesses Must Comply With Updated Privacy Regulations Effective July 2024

If you are a business operating in the Sunshine and/or Lonestar state, then this alert is for you. As discussed further below, Florida recently issued regulations, effective July 18, 2024, clarifying certain requirements set...more

Hinshaw & Culbertson - Privacy, Cyber & AI...

Q&A: How Businesses Must Comply with a New Minnesota State Privacy Law

On May 24, 2024, Senate Bill 4757, containing a comprehensive Minnesota Consumer Data Privacy Act (MCDA), was signed into law by Minnesota Governor Tim Walz. It will take effect on July 31, 2025....more

Jackson Lewis P.C.

Colorado Expands Protections for Biometric Information under the Colorado Privacy Act

Jackson Lewis P.C. on

When Colorado enacted the Colorado Privacy Act (CPA), it included “biometric data that may be processed for the purpose of uniquely identifying an individual.” However, the CPA as originally drafted did not cover the personal...more

284 Results
 / 
View per page
Page: of 12

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
- hide
- hide