News & Analysis as of September 23, 2024

General Data Protection Regulation (GDPR) › European Data Protection Board (EDPB)

+ Follow

Follow this channel for updates and analysis on all aspects of the European Union's General Data Protection Regulation, a reform of EU's data protection rules that impacts... more +

Follow this channel for updates and analysis on all aspects of the European Union's General Data Protection Regulation, a reform of EU's data protection rules that impacts individuals throughout the Union and all businesses operating therein. less -

European Commission publishes second report on application of GDPR

A&O Shearman on 8/14/2024

On 25 July 2024, the EU Commission published its second report on the application of the GDPR (the ‘Second Report’), following its first report published in 2020....more

Data Privacy Guide - Romania

International Lawyers Network on 5/13/2024

Governing Data Protection Legislation - 2.1. Overview of principal legislation - The General Regulation Data Protection (Regulation (EU) 2016/679) (“GDPR”), as implemented by Law 190/2018 is the principal data...more

Dechert Cyber Bits - Issue 54

Dechert LLP on 5/6/2024

European Data Protection Board Publishes Strategy for 2024-27 - The European Data Protection Board (“EDPB” - the EU body tasked with promoting consistency and cooperation in enforcement of the GDPR) has outlined its...more

The EU’s AI Act: Obligations of AI Users and GDPR Article 35

Ankura on 4/19/2024

In December 2023, European Union (EU) lawmakers reached an agreement on the EU AI Act. In our article titled An Introduction to the EU AI Act, we focused on applicability, thresholds, timing, and penalties related to the EU...more

Data Protection Rulings by European Regulators Offer Insights Into Their Security Expectations

Skadden, Arps, Slate, Meagher & Flom LLP on 4/15/2024

Valuable insights into the measures European regulators expect businesses to take to protect data privacy can be found in a report from the European Data Protection Board (EDPB) summarizing decisions under the EU’s General...more

Surprising Plot Twist: The European Data Protection Supervisor Reprimands the European Union for its use of Microsoft 365

Seyfarth Shaw LLP on 4/1/2024

The European Union (EU)’s government organizations are just like any another entity trying to function in a world where global companies and even government entities are reliant on digital platforms for messaging and...more

EDPB Provides Guidance On Determining A 'Main Establishment' And The 'One-Stop-Shop' Mechanism

Mayer Brown on 2/29/2024

The opinion was issued in response to a request by the French Data Protection Authority and provides guidance on the conditions for determining a controller's main establishment where that controller has establishments in...more

EDPB Provides Guidance on Determining Primary Supervisory Authority

Sheppard Mullin Richter & Hampton LLP on 2/28/2024

This month the EDPB shed light on the question of lead supervisory authorities. The issue arose in response to a question late last month from the French supervisory authority. Some background. As most international...more

CNIL's Strategic Focus Areas for Data Protection in 2024 The Summer Olympics and Beyond

BCLP on 2/16/2024

Each year, the CNIL selects key areas of high interest to concentrate its investigations and assess the compliance of select commercial sectors. On February 8, The CNIL announced its four main areas of focus for...more

Guidance from European Data Protection Board Requires Consent for Tracking

Dorsey & Whitney LLP on 12/28/2023

The European Data Protection Board (EDPB), a board comprised primarily of representatives of the data protection supervisory authorities of the European Union’s member states, issued surprising new guidance in mid-November...more

Binding Corporate Rules: What’s new in the updated EDPB guidance?

Hogan Lovells on 9/27/2023

This summer, the European Data Protection Board (“EDPB”) published the final version of its Recommendations 01/2022 (“Recommendations”) on Binding Corporate Rules for Controllers (“C-BCR”). During the turbulence caused by the...more

Breached the GDPR? Calculate your own fine!

Cooley LLP on 8/8/2023

The General Data Protection Regulation (GDPR) is a difficult piece of legislation to comply with, and not meeting some of its requirements may lead to hefty fines of up to 4% of global annual revenues of the preceding year or...more

Global Cross Border Privacy Rules and the new initiatives to support data free flow with trust

A&O Shearman on 7/19/2023

ust over a year ago, on 21 April 2022, the seven economies (Canada, Japan, the Republic of Korea, the Philippines, Singapore, Taiwan, and the USA) participating in the Asia-Pacific Economic Cooperation (APEC) Cross-Border...more

EU - New EU Regulation to complement GDPR by clarifying cross-border enforcement procedures unveiled

A&O Shearman on 7/17/2023

The European Commission published its Proposal for a Regulation (on 4 July 2023) laying down additional procedural rules relating to the enforcement of GDPR (the Proposal), which aims to complement the GDPR by specifying the...more

Get Ready to Update Your Binding Corporate Rules Regulators Expand Requirements

McDermott Will & Emery on 7/7/2023

At the end of June, the European Data Protection Board (EDPB) published its Recommendations (Recs) on Binding Corporate Rules (BCRs). Among other things, the Recs require existing and in process BCRs to: - Incorporate...more

EDPB Adopts Binding Corporate Rules Recommendations

Sheppard Mullin Richter & Hampton LLP on 7/6/2023

As those in the privacy world await the outcome of the EU-US privacy framework negotiations, the EDPB was in the news recently for a different mechanism for data transfers: Binding Corporate Rules. Namely, it adopted...more

EU - EDPB issues final guidelines on the calculation of administrative fines

A&O Shearman on 6/19/2023

The European Data Protection Board (EDPB) published the final version of the Guidelines on the calculation of administrative fines under the GDPR (Guidelines) on 7 June 2023. The Guidelines aim to harmonize the approach to...more

European Parliament Adopts Position on Artificial Intelligence Act

Morgan Lewis on 6/16/2023

The European Parliament voted on June 14, 2023 to adopt its position on the draft EU Artificial Intelligence Act (EU AI Act) that would impose a comprehensive regulatory regime on AI. More rules are expected to follow for...more

A restrictive approach of the Right of Access by Data subjects in ECJ case C-487/21, May 4th, 2023

Hogan Lovells on 6/12/2023

A decision issued on May 4, 2023 by the European Court of Justice (the "ECJ") provides clarifications that are particularly welcome when answering requests for access from data subjects. In this decision, the ECJ, in response...more

Mega Fine for Meta: $1.3 Billion Penalty Imposed for Data Privacy Violations

Vinson & Elkins LLP on 6/9/2023

The European Union’s (“EU”) Data Protection Commission (the “Commission”) recently fined Meta Ireland $1.3 billion (or €1.2 billion) for improper data transfers from the European Economic Area (“EEA”) to the United States in...more

Meta Receives Record 1.2 Billion EUR Fine and Is Ordered to Suspend Its EU-U.S. Data Transfers

Wilson Sonsini Goodrich & Rosati on 6/7/2023

On May 22, 2023, Ireland’s Data Protection Commission (DPC) published its long-awaited decision in the Meta EU-U.S. data transfer case (Decision). In its landmark Decision, the DPC imposed a record 1.2 billion EUR fine and...more

This Is Not a Test: The Significant Impacts of the Ireland Data Protection Commission’s Meta Decision

Miller Nash LLP on 6/6/2023

It shouldn’t come as a surprise that the European Data Protection Board (EDPB), through Ireland’s Data Protection Commission (DPC), issued another fine against a large US technology company. What may come as a surprise is the...more

Irish Data Protection Commission’s Decision Throws Use of Standard Contractual Clauses Into Doubt

Cozen O'Connor on 5/30/2023

On May 22, Ireland’s Data Protection Commission (DPC) announced that it had imposed a €1.2 billion fine on Meta Platforms for violating the European Union’s General Data Protection Regulation (GDPR) in its use of standard...more

Irish Data Protection Commission Orders Meta Ireland to Suspend Facebook Data Transfers to the US and Imposes Record GDPR Fine of...

Latham & Watkins LLP on 5/23/2023

The final decision of the Irish Data Protection Commission (IDPC) in relation to the transfers of EU/EEA Facebook user data by Meta Platforms Ireland Limited (Meta Ireland) to its processor, Meta Platforms, Inc., in the US...more

EU EDPB publishes 2022 activity report

A&O Shearman on 5/5/2023

The EDPB published its 2022 activity report “Streamlining Enforcement Through Cooperation” (the Activity Report) on 17 April 2023, which provides an overview of the work it carried out in 2022. The report reflects on, amongst...more

363 Results

View per page

Page: of 15

General Data Protection Regulation (GDPR) › European Data Protection Board (EDPB)

"My best business intelligence, in one easy email…"