News & Analysis as of

European Union › United Kingdom › General Data Protection Regulation (GDPR)

The European Union is an economic and political partnership comprised of 27 nations within the Eurozone. The EU was established in 1948 to promote stability and cooperation among member states in the aftermath of... more +
The European Union is an economic and political partnership comprised of 27 nations within the Eurozone. The EU was established in 1948 to promote stability and cooperation among member states in the aftermath of WWII. The EU maintains a common currency as well as several intranational institutions, including the European Parliament and the European Commission. less -
Mayer Brown

Personal Data Sharing: What Information About Recipients Do We Need to Provide to Individuals Under the GDPR?

Mayer Brown on

Sharing personal data is necessary for most organisations, but it also entails certain data protection risks. Controllers who share personal data with others must, among other obligations, ensure that they comply with the...more

Latham & Watkins LLP

UK US Data Bridge Practical Tips for Implementation and Compliance

Latham & Watkins LLP on

Latham & Watkins and Privacy Laws & Business recently co-hosted a webinar looking back on the first eight months since the UK-US Data Bridge entered into force. Speakers from the UK Information Commissioner’s Office (ICO) and...more

Walkers

Personal Information Protection Act deep dive

Walkers on

The Personal Information Protection Act ("PIPA") comes into full force on 1 January 2025. All organisations in Bermuda are expected to be in compliance with it by that date – time is running out! The Privacy Commissioner...more

Thomas Fox - Compliance Evangelist

The UK Election and Its Implications for Compliance Professionals

Thomas Fox - Compliance Evangelist on

Last week saw the greatest wipeout in the recorded history of UK governments, which saw the Tories being swept from power and losing over 400 seats in Parliament. Labor took over with a commanding presence, securing around...more

A&O Shearman

High Court clarifies scope of data subject’s right to know specific recipients of their personal data

A&O Shearman on

On 7 June 2024, in the case of Harrison v Cameron & Another, the High Court ruled that, in the context of a data subject access request under Article 15 UK GDPR, data subjects are entitled in principle to know the specific...more

Ogletree, Deakins, Nash, Smoak & Stewart,...

International Transfers of Personal Data After Schrems II: Practical Compliance Steps

Ogletree, Deakins, Nash, Smoak & Stewart,... on

Quick Hits Schrems II Recap Most people are now familiar with the Schrems II requirements to “know your transfers” and to protect personal data when such information is subject to processing (including remote access to...more

Littler

GDPR Day 2024: A Look at Past, Present and Future Developments in the UK

Littler on

May 25th marked six years since the General Data Protection Regulation has been in effect. Since it was implemented, GDPR has been regarded as the gold standard for data protection legislation across the world....more

BCLP

Navigating the FemTech regulatory landscape: which rules apply and what are the enforcement priorities?

BCLP on

Security, scale or functionality – pick two. This computer science principle coined by the late Professor Anderson is particularly relevant to the FemTech industry. Anderson’s Rule states that for a system to provide high...more

Array

This Week in eDiscovery: EDRM Guidelines for GDPR Compliance, What Information is Enough for a Privilege Log, and More

Array on

Every week, the Array team reviews the latest news and analysis about the evolving field of eDiscovery to bring you the topics and trends you need to know. This week’s post covers the week of April 1-7. Here’s what’s...more

EDRM - Electronic Discovery Reference Model

General Data Protection Regulation Guidelines

EDRM - Electronic Discovery Reference Model on

Parties that have possession, custody, or control of evidence potentially relevant to U.S. litigation or investigations are typically required to identify, collect, preserve, and produce such evidence (with limited...more

K&L Gates LLP

Employment Practices and Data Protection: Monitoring Workers 101

K&L Gates LLP on

The Information Commissioner’s Office (ICO) has recently published guidance for employers on monitoring workers lawfully, transparently and fairly. The guidance aims to protect workers’ data protection rights and help...more

ArentFox Schiff

Media & Entertainment: 10 Legal Developments Impacting Business and Legal Decisions

ArentFox Schiff on

With 2024 underway, our team highlights 10 of the most pressing legal issues facing the media and entertainment industry this year. In 2024, media and entertainment businesses will focus on whether the longstanding tenet...more

NAVEX

Data Privacy & Protection – Swimming into the Unknown

NAVEX on

If you feel like every day you wake up to a new data privacy law or piece of guidance, you’re not dreaming. Regulation and rulemaking are happening faster than ever before. The complexities relating to ethical data usage are...more

Benesch

Privacy Points 2024: Recap and What to Watch For in 2024

Benesch on

Last year proved to be a big year in data protection with U.S. state data protection laws popping up across the country, the FTC updating its guidance and regulations on everything from data breaches and biometric...more

Wilson Sonsini Goodrich & Rosati

10 Privacy Predictions in the EU for 2024

Wilson Sonsini Goodrich & Rosati on

In 2024, businesses will continue to face an evolving landscape of privacy opportunities and challenges, including an increasingly complex data regulatory environment that extends beyond the General Data Protection Regulation...more

A&O Shearman

ICO publishes a UK BCR Addendum for use with the EU Binding Corporate Rules

A&O Shearman on

This blog notes some of the key features of the Addendum.  At its core, the Addendum can be used in relation to both controller BCRs and processor BCRs. Organisations then have a choice as to whether they use the Addendum in...more

Mitratech Holdings, Inc

‘Tis the season for better cyber hygiene: navigating IT risk management in 2024

Mitratech Holdings, Inc on

Prepare your organization to stay one step ahead in the ongoing battle against cyber and IT risk management. As organizations increasingly leverage third-party services and cloud technologies, cybercriminals are becoming...more

Dechert LLP

Dechert Cyber Bits - Key Developments in Privacy & Cybersecurity - Issue 46

Dechert LLP on

EU AI Act: Political Agreement Reached on Terms of Landmark Legislation - Negotiators for the European Council and the European Parliament have reached political agreement on the provisions of the EU Artificial...more

Skadden, Arps, Slate, Meagher & Flom LLP

AI Insights: Public Consultation Period Closes for French CNIL Guidance on GDPR-Compliant Development of AI Systems

Skadden, Arps, Slate, Meagher & Flom LLP on

On 16 October 2023, France’s Data Protection Authority, the National Commission on Informatics and Liberty (CNIL), issued a set of guidelines for complying with the EU General Data Protection Regulation (GDPR) when...more

White & Case LLP

The UK-US Data Bridge: Practical Considerations for UK Organisations

White & Case LLP on

The UK-US Data Bridge (the "Data Bridge") has now come into effect, potentially simplifying transfers of personal data from the UK to the US. On 12 October 2023, the Data Bridge took effect. The Data Bridge allows UK...more

BakerHostetler

DSIR Deeper Dive: Absent Legislation, Privacy Regulators Offer Guidance on AI

BakerHostetler on

By now, many of us are using AI, advising others about how to use AI, and waiting for some legislative miracle to give us some guardrails for what we can or cannot be doing with AI. A lot of effort has been put into tracking...more

Jackson Lewis P.C.

Transatlantic Transfers of Personal Data: Transferring a Privacy Shield Certification to the New EU-U.S. Data Privacy Framework

Jackson Lewis P.C. on

Effective July 10, 2023, the EU-U.S. Data Privacy Framework (“EU-U.S. DPF”) replaced the invalidated EU-U.S. Privacy Shield framework (“Privacy Shield”). Participating U.S. organizations can now receive personal data...more

Eversheds Sutherland (US) LLP

Data transfers update: New data bridge available to facilitate UK-US data transfers from 12 October 2023 - despite “qualified”...

Eversheds Sutherland (US) LLP on

Why should I read this? A new UK-US data bridge will be available to businesses in the UK looking to transfer personal data to organizations in the United States certified under the UK Extension to the EU-US Data Privacy...more

Womble Bond Dickinson

Data bridge over the Atlantic

Womble Bond Dickinson on

On September 21, 2023, the UK Secretary of State for Science, Innovation and Technology laid before Parliament regulations that will operate to significantly simplify the process for UK businesses to transfer personal data to...more

Wilson Sonsini Goodrich & Rosati

UK-U.S. Data Bridge Commencement Date Announced

Wilson Sonsini Goodrich & Rosati on

On September 21, 2023, the UK Government announced the establishment of the “UK-US data bridge” (the Bridge), also known as the UK Extension to the EU-U.S. Data Privacy Framework (the DPF). The announcement promises to...more

369 Results
 / 
View per page
Page: of 15
Next »

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
Sign up Log in
*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
- hide
- hide