News & Analysis as of May 6, 2025

New Guidance

+ Follow

Follow this channel for updates and analysis on all aspects of the European Union's General Data Protection Regulation, a reform of EU's data protection rules that impacts... more +

Follow this channel for updates and analysis on all aspects of the European Union's General Data Protection Regulation, a reform of EU's data protection rules that impacts individuals throughout the Union and all businesses operating therein. less -

EU: EDPB Opinion on AI Provides Important Guidance Though Many Questions Remain

DLA Piper on 1/14/2025

A much-anticipated Opinion from the European Data Protection Board (EDPB) on AI models and data protection has not resulted in the clear or definitive guidance that businesses operating in the EU had hoped for. The Opinion...more

EDPB Provides Insight for Use of Tracking Tools

Sheppard Mullin Richter & Hampton LLP on 11/1/2024

The EDPB released guidance last month to help companies understand their obligations when using newer tracking tools. These include pixels, URL tracking, IP-tracking, and the like. First, some background: an EU law that...more

Netherlands - The Dutch Data Protection Authority publishes guidance on facial recognition (May 2 2024)

A&O Shearman on 6/11/2024

On May 2 2024, the Dutch data protection supervisory authority (the Dutch DPA) published guidance on the processing of personal data when using facial recognition....more

EDPB Provides Guidance On Determining A 'Main Establishment' And The 'One-Stop-Shop' Mechanism

Mayer Brown on 2/29/2024

The opinion was issued in response to a request by the French Data Protection Authority and provides guidance on the conditions for determining a controller's main establishment where that controller has establishments in...more

Privacy and AI in Israel and worldwide: a look to 2024

Barnea Jaffa Lande & Co. on 1/29/2024

During 2023, privacy protection and artificial intelligence regulation continued apace and their implications continued to be a major focus in Israel and around the world. In Israel, this was reflected in a number of...more

Guidance from European Data Protection Board Requires Consent for Tracking

Dorsey & Whitney LLP on 12/28/2023

The European Data Protection Board (EDPB), a board comprised primarily of representatives of the data protection supervisory authorities of the European Union’s member states, issued surprising new guidance in mid-November...more

AI Insights: Public Consultation Period Closes for French CNIL Guidance on GDPR-Compliant Development of AI Systems

Skadden, Arps, Slate, Meagher & Flom LLP on 11/22/2023

On 16 October 2023, France’s Data Protection Authority, the National Commission on Informatics and Liberty (CNIL), issued a set of guidelines for complying with the EU General Data Protection Regulation (GDPR) when...more

New EU guidance on GDPR right of access (open for public consultation)

Hogan Lovells on 2/1/2022

The “right of access” recognized by art.15 GDPR is one of the most fervently exercised rights by individuals. Nowadays, where companies tend to amass considerable amounts of information and carry out data processing...more

2021 Data Privacy Overview: New Regulations and Guidance

Lighthouse on 1/12/2022

While everyone hoped that 2021 would be less tumultuous than 2020, it certainly did not turn out that way in the end. The same was true in the world of data privacy – with sweeping new data protection regulations and guidance...more

Privacy & Cybersecurity Update - December 2021

Skadden, Arps, Slate, Meagher & Flom LLP on 1/4/2022

In this month’s Privacy & Cybersecurity Update, we review the TSA’s new cybersecurity requirements for critical U.S. infrastructure, the White House OMB’s new guidance on cyber incident reporting procedures and the U.S.-U.K....more

European Commission Refreshes Standard Contractual Clauses

Knobbe Martens on 7/14/2021

The European Commission (“EC”) has long sought to improve data privacy for Europeans, even when they interact with global or non-European companies. Laws like the General Data Protection Regulation (or “GDPR”) seek to...more

EU Data Protection Regulators Adopt Guidance on Personal Data Transfers

Mintz - Privacy & Cybersecurity Viewpoints on 6/23/2021

Many organizations around the world – and particularly companies in the United States – are directly affected by the EU Court of Justice’s July 2020 Schrems II decision casting doubt on the lawfulness of transferring personal...more

Keep Your Personal Data Flowing – How to Navigate the Changing Tides of the New EU Guidance and UK-EU Brexit Deal

Fenwick & West LLP on 1/11/2021

Concerns are mounting for companies around the world as they consider their ability to transfer data from the EU following the recent decision by the Court of Justice of the European Union in Data Protection Commissioner v....more

New Guidelines for EU-US Data Transfers

Foley Hoag LLP on 11/20/2020

Last week saw major innovations in the law of data transfer from the European Economic Area (EEA) to other countries, including the United States. This alert covers one of them: new guidelines from the European Data...more

No Silver Linings: EDPB Issues a Grim Forecast on U.S.-Based Cloud and Data Access with New Guidance

Wyrick Robbins Yates & Ponton LLP on 11/19/2020

On November 10, 2020, the European Data Protection Board (“EDPB”) issued highly anticipated guidance intended to clarify how data exporters could legally transfer data to “third countries” under GDPR following the Schrems II...more

EDPB issues comprehensive Schrems II guidance, including recommended supplemental measures to protect international data transfers

Hogan Lovells on 11/12/2020

The European Data Protection Board (EDPB) has issued its long-awaited practical guidance following the Court of Justice of the European Union’s (CJEU) landmark Schrems II decision....more

Privacy and Payments: New Draft EU Advice for Financial Institutions

Latham & Watkins LLP on 11/4/2020

As contactless transactions boom, EU regulators publish draft guidelines on the interplay between the GDPR and PSD2. Last year, more than half of all payments in the UK were made by card and contactless methods, while cash...more

Brazilian Government Makes the LGPD Effective Imminently

Foley & Lardner LLP on 9/11/2020

On August 14, 2018, the Brazilian government approved the Brazilian General Data Protection Law, known as the Lei Geral de Proteção de Dados Pessoais (“LGPD”). Enforcement was set to begin on August 15, 2020 but then, due to...more

Guidance from E.U. Supervisory Authorities on Data Processing in a Time of COVID-19

Orrick, Herrington & Sutcliffe LLP on 3/17/2020

The European Data Protection Board (EDPB) and a number of European data protection supervisory authorities have recently issued guidance on processing personal data, including special categories of personal data (i.e., health...more

Privacy and Data Security Alert l March 2020

Shook, Hardy & Bacon L.L.P. on 3/10/2020

Shook Weighs in on Updated CCPA Regulations - In response to extensive public comment, the California Attorney General’s office released modified draft regulations under the CCPA on February 7. Shook has provided initial...more

Whistleblowing Schemes: New Guidelines Issued by the CNIL

Hogan Lovells on 1/16/2020

The French Data Protection Authority (CNIL) published new Guidelines (French only) on December 10, 2019 applicable to whistleblowing schemes, following a public consultation process. The Guidelines replace the former Single...more

Cybersecurity 2020 – The Year in Preview: New Guidance Continues to Clarify GDPR’s Scope

Foley Hoag LLP - Security, Privacy and the... on 1/14/2020

Editors’ Note: This is the sixth in our fourth-annual end-of-year series examining important trends in data privacy and cybersecurity in the coming year. Our previous entry discussed the CCPA, energy, Brexit, health care...more

Revised Guidelines on the Territorial Scope of the GDPR and Local Representatives

Mintz - Privacy & Cybersecurity Viewpoints on 12/2/2019

The European Data Protection Board (EDPB) recently published an updated version of its guidelines on the territorial scope of the GDPR, which were initially issued just over a year ago. The revised Guidelines do not...more

GDPR Privacy FAQs: What are the major differences between the Information Commissioner’s Office guidance on cookies and the CNIL’s...

BCLP on 11/25/2019

The Information Commissioner’s Office or the “ICO” is the British supervisory authority charged with enforcing GDPR. The Commission Nationale de l’informatique et des libertes (the “CNIL”) is the French supervisory authority....more

Privacy and Data Security Alert | November 2019

Shook, Hardy & Bacon L.L.P. on 11/20/2019

EU Court Allows Class Action to Proceed, Sets Precedent for Future Data Breach Class Actions - A class action brought against Google will be allowed to move forward after the plaintiff’s appeal was permitted, allowing him to...more

38 Results

View per page

Page: of 2

General Data Protection Regulation (GDPR) › Data Protection › New Guidance

"My best business intelligence, in one easy email…"