General Data Protection Regulation (GDPR), Contract Terms, EU

Germany: Monitoring and Auditing Obligations of Controllers with Respect to Their Processors

DLA Piper on 4/16/2025

In a decision on immaterial damages under Article 82 of the EU General Data Protection Regulation (GDPR), the Higher Regional Court of Dresden, Germany (case number 4 U 940/24), set out important monitoring and auditing...more

The Data Act: Six Months to Go — But What To Do?

Ropes & Gray LLP on 3/27/2025

Our clients are at the forefront of many of the developments covered by the report. That said, I couldn’t help thinking that the report overlooked a law that takes effect in less than six months’ time and which will have...more

EU Standard Contractual Clauses Need Replacing by December 27, 2022

Goodwin on 12/6/2022

On June 4, 2021, the European Commission (the “EC”) abolished the old Standard Contractual Clauses (the “Old SCCs”) and published a new more flexible set of clauses (the “New SCCs”) for companies that wish to export personal...more

Time’s up to renew your EU data transfer clauses! Here are some tips for ‘re-papering’

BCLP on 10/21/2022

With the 27 December 2022 deadline for updating data transfer contracts with the EU SCCs fast approaching, this alert mines European Commission guidance, as well as the team’s experience, and offers some tips for successful...more

Reminder: New Standard Contractual Clauses Took Effect on Sept. 27

Benesch on 10/15/2021

Contracts entered into prior to Sept. 27 will need to be amended to adopt the new standard contractual clauses by Dec. 27, 2022. As of Sept. 27, entities entering new contracts that are subject to the General Data...more

What types of contractual provisions are required for different types of service providers under the GDPR?

BCLP on 5/19/2020

The type of contractual provisions that a company is required by the GDPR to impose upon a service provider differ based upon two primary factors: (1) whether the service provider is a “processor,” a “controller,” or a “joint...more

E-Commerce Businesses Beware: The Freedom to Contract does not Trump Reasonable Privacy Expectations

Orrick, Herrington & Sutcliffe LLP on 10/22/2019

The EDPB’s new Guidelines on Article 6(1)(b) may severely limit e-commerce business’ ability to enhance data processing by unilaterally defining contractual services....more

"No deal" Brexit Plan of Action

White & Case LLP on 1/16/2019

As the approach of Brexit draws inexorably closer, the continued lack of certainty around what any Brexit withdrawal deal will look like, or indeed whether a deal will be agreed at all, is causing increasing concern among the...more

EU Retail News - March 2018

BCLP on 4/2/2018

It's Not Too Late to Get Ready for the GDPR Caution When Exporting Luxury Goods French Supreme Court Upholds Exclusive Supply Obligation where Necessary to Franchise Network Guest interview with Beth Butterwick, CEO of Karen...more

Have you started auditing your contracts with your service providers that handle EU personal data? UK Information Commissioner’s...

Mintz - Privacy & Cybersecurity Viewpoints on 9/14/2017

Many companies have started the potentially lengthy process of auditing their service provider contracts to make sure that they comply with the requirements of the General Data Protection Regulation, which comes into force on...more

Client Alert: Brexit – What Silicon Valley Needs to Know

Fenwick & West LLP on 7/5/2016

The vote of the UK Electorate to leave the EU has politicians, economists, lawyers and commentators from all sectors speculating on what will happen next and over exactly what period. While it is unlikely that there will be a...more

General Data Protection Regulation (GDPR) › Contract Terms › European Union

"My best business intelligence, in one easy email…"