News & Analysis as of

Data Processors Data Controller United Kingdom

Latham & Watkins LLP

EDPB Issues Guidelines on Processing Personal Data for Legitimate Interests Purposes

Latham & Watkins LLP on

The draft guidelines provide further clarification to the EDPB’s interpretation of legitimate interests, and suggest a potential divergence with the UK ICO....more

A&O Shearman

EDPB launches website auditing tool

A&O Shearman on

The EDPB launched a website auditing tool to help legal and technical auditors at data protection authorities check whether websites are compliant with the law on 29 January 2024. Controllers and processors can also use the...more

BCLP

Data Protection Reform - Will the UK Score its Burden-Reducing Goals?

BCLP on

On 8 March 2023, the newly-created Department for Science, Innovation and Technology (“DSIT”) introduced the UK government’s updated proposals for data protection reform in the shape of the Data Protection and Digital...more

Epiq

International Data Transfers: Knowing Which Rules Apply to Comply

Epiq on

While countries all over the globe continue to make data privacy strides, comparing similarities and differences between the EU and U.K. is important in light of Brexit. It is also crucial to know the differences as they...more

Latham & Watkins LLP

UK Data Protection Bill: Examination of Key Provisions (Part 2)

Latham & Watkins LLP on

Areas of interest include anonymisation, “recognised legitimate interests”, and the ICO’s role. The UK Data Protection and Digital Information Bill (the Bill) sets out the government’s proposals for reforming the current...more

BCLP

UK Data Reforms - Cautious First Steps Along the EU Adequacy “Tightrope”

BCLP on

The UK government set out its detailed proposals for data protection reform on 18 July 2022 in the form of the Data Protection and Digital Information Bill. Compared with some of the radical ideas in the 2021 public...more

Orrick, Herrington & Sutcliffe LLP

6 Things You Need to Know About United Kingdom (UK) International Data Transfers

In February 2022, the United Kingdom (UK) Information Commissioner’s Office (“ICO”), along with the data protection authority (“DPA”) in the UK, published three new documents ("UK Documents") which update the UK's position on...more

A&O Shearman

Data: A new direction?

A&O Shearman on

As the UK looks to find a new and post-Brexit direction, the UK Government is setting its agenda for developments in regulation, particularly when it comes to technology, data and innovation. We have seen the recent...more

Goodwin

Europe OPTS for Pragmatism with New SCCS and ICO Opens Consultations on UK SCCS — What Companies Need to Do Next

Goodwin on

The dust has settled on the new EU standard contractual clauses for cross-border data transfers (“New SCCs”), but confusion still reins on how the New SCCs cover data transfers and what companies need to do to take advantage...more

BCLP

BCLP Global Data Privacy FAQs: Can the new EU standard contractual clauses be used for transfers of personal data from the UK?

BCLP on

The European Commission recently adopted new standard contractual clauses (SCCs) for transfers of personal data from the EU to “third countries” (the “new SCCs”). In this post, we highlight key developments in the UK’s data...more

Latham & Watkins LLP

New Standard Contractual Clauses and Final EDPB Recommendations - Next Steps

Latham & Watkins LLP on

Companies have three months to prepare to use the latest standard contractual clauses for new data transfers, and 18 months to migrate existing arrangements. On 4 June 2021, the European Commission released its...more

BCLP

Who, Sir? Me, Sir? Appointing GDPR Representatives in the UK and the EU

BCLP on

This article explores the topic of appointed representatives under Article 27 of the GDPR. What are they? When do you need one? How is regulatory enforcement starting to play out in the EU and in the UK on this issue?...more

Benesch

Revised Approach to Standard Contractual Clauses Creates Key Deadlines and Offers Long-Awaited Answers

Benesch on

The European Commission’s long-awaited updates to the Standard Contractual Clauses (“SCCs”) have arrived. Data protection lawyers globally have eagerly anticipated these changes, which are necessary to address a legal...more

BCLP

The Data & Brexit Digest - Data protection representatives

BCLP on

With the UK unambiguously out of the EU, this fourth and final installment of our Data & Brexit Digest explores the topic of appointed representatives under Article 27. What is an Article 27 representative? The...more

Latham & Watkins LLP

The Commission’s Draft Updated Standard Contractual Clauses - A Close Look

Latham & Watkins LLP on

The European Commission has published draft updated standard contractual clauses in light of the Schrems II decision. On 12 November 2020, the European Commission (the Commission) published a draft implementing decision,...more

Katten Muchin Rosenman LLP

UK ICO Issues Guidance on COVID -19 Data Protection Considerations

The Information Commissioner's Office (ICO) has issued a statement confirming that data protection will not stop the need for businesses to share information quickly, or adapt the way they work to face the unprecedented...more

White & Case LLP

High Court considers the scope of Subject Access Requests and their exemptions

White & Case LLP on

EU data protection law contains a powerful tool called a Subject Access Request ("SAR") which allows an individual to obtain copies of data about themselves, on demand, within a tight timeframe, and at low cost. Satisfying...more

Fox Rothschild LLP

GDPR Guidance: Data Controllers Are Responsible For Processors’ Competency

Fox Rothschild LLP on

The UK Information Commissioner’s Office (ICO) has issued a new guidance on the liabilities of Controllers and Processors, advising that the Controller is responsible for assessing that its Processor is competent to process...more

BCLP

GDPR: The Most Frequently Asked Questions: Is a Lawyer a Processor or a Controller?

BCLP on

The European Union's General Data Protection Regulation ("GDPR") is arguably the most comprehensive - and complex - data privacy regulation in the world. Although the GDPR went into force on May 25, 2018, there continues to...more

Dechert LLP

Documentation under the GDPR – the ICO goes on the record

Dechert LLP on

Article 30 of the General Data Protection Regulation (GDPR), which comes into force on 25 May 2018, places an obligation upon data controllers and processors to keep internal records of data processing activities. The data...more

Pillsbury - Global Sourcing Practice

The ICO’s Draft Guidance Leaves Unanswered Questions on Processor Obligation to Notify Infringing Instructions

Those of us who have been grappling with how best to approach GDPR compliance in outsourcing and other commercial contracts will be all too familiar with Article 28 of the GDPR, which sets out a number of minimum contract...more

Morgan Lewis

ICO Offers Guidance for Contracts under the GDPR

Morgan Lewis on

Earlier this month, the United Kingdom’s Information Commissioner’s Office (ICO) released an initial draft guide of contracting requirements and liabilities for data controllers and data processors doing business together...more

Dechert LLP

Consent under the General Data Protection Regulation: what are the alternatives for employers?

Dechert LLP on

The UK's Information Commissioner, Elizabeth Denham, has launched a series of blogs designed to “bust some of the myths” which she believes have developed around the EU General Data Protection Regulation (GDPR). Her first...more

Latham & Watkins LLP

How to Comply with the New General Data Protection Regulation: A Q&A with Partner Gail Crawford and Counsel Ulrich Wuermeling

Latham & Watkins LLP on

In less than one year, from 25 May 2018, the General Data Protection Regulation (GDPR or Regulation) will become enforceable. The GDPR introduces a rigorous, far-reaching privacy framework for businesses that operate, target...more

Latham & Watkins LLP

The Countdown Continues: One Year to the GDPR

Latham & Watkins LLP on

The General Data Protection Regulation (GDPR or Regulation) will become applicable in one year, as of May 25, 2018. A lot has happened since we set out the key provisions of the Regulation last year....more

25 Results
 / 
View per page
Page: of 1

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
- hide
- hide