News & Analysis as of May 9, 2025

General Data Protection Regulation (GDPR) › Personal Data › Third-Party Service Provider

+ Follow

Follow this channel for updates and analysis on all aspects of the European Union's General Data Protection Regulation, a reform of EU's data protection rules that impacts... more +

Follow this channel for updates and analysis on all aspects of the European Union's General Data Protection Regulation, a reform of EU's data protection rules that impacts individuals throughout the Union and all businesses operating therein. less -

Oh My Gourd, Another Data Privacy Law?!

Bricker Graydon LLP on 11/26/2024

In 2018, there were two comprehensive state data privacy bills introduced across the United States and a whopping zero were in effect. Fast forward six years and there have been 41 new data privacy bills considered this year...more

International Data Transfers Remain Under EU and UK Regulatory Scrutiny

Ogletree, Deakins, Nash, Smoak & Stewart,... on 9/26/2024

Organisations that make international transfers of personal data have undergone significant challenges and changes over the last few years. With the invalidation of the Privacy Shield agreement in 2020 and the introduction of...more

Social elections 2024: Know your GDPR obligations

A&O Shearman on 12/15/2023

Compliance with GDPR requirements is a key factor when you plan and conduct social elections. Since the social elections procedure involves the processing of a lot of personal employee data, for example, the list of...more

Do You Own a Database? You’re Also Responsible for Actions Performed by Third Parties

Barnea Jaffa Lande & Co. on 11/3/2021

The Black Shadow hacking group’s attack on Cyberserve, reported a few days ago, has resulted (at this point in time) in the leaking of a database with more than 800,000 records pertaining to various individuals and the...more

Top Operational Impacts of Virginia's New Privacy Law (CDPA)

Ankura on 6/28/2021

The Virginia Consumer Data Protection Act (CDPA) overwhelmingly passed both legislative chambers this month and is expected to be signed by the Governor in the coming weeks with an effective date of January 1, 2023. Best...more

As Voice Recognition Technology Market Surges, Organizations Face Privacy And Cybersecurity Concerns

Jackson Lewis P.C. on 12/10/2020

A new report released by Global Market Insights, Inc. last month estimates that the global market valuation for voice recognition technology will reach approximately $7 billion by 2026, in main part due to the surge of AI and...more

Privacy FAQs: Can an independent contractor be considered a “service provider” under the CCPA?

BCLP on 5/14/2019

The California Consumer Privacy Act ("CCPA") was enacted in early 2018 as a political compromise to stave off a poorly drafted, and plaintiff’s friendly ballot initiative. Although the CCPA is scheduled to go into force in...more

Privacy FAQs: Can a service provider use and transfer personal information if they anonymize or aggregate it?

BCLP on 5/7/2019

The California Consumer Privacy Act ("CCPA") was enacted in early 2018 as a political compromise to stave off a poorly drafted, and plaintiff’s friendly ballot initiative. Although the CCPA is scheduled to go into force in...more

Avoiding the California Privacy and Security Litigation Tsunami: CCPA FAQ: Is a service provider permitted to disclose personal...

BCLP on 3/21/2019

Companies that do business in California know that it is a magnet for class action litigation. The California Consumer Privacy Act ("CCPA"), a new privacy law that applies to data collected about California residents, will...more

California and European Privacy FAQs: Do companies have to provide a privacy notice if they collect personal data about a person...

BCLP on 3/8/2019

The California Consumer Privacy Act ("CCPA") was enacted in early 2018 as a political compromise to stave off a poorly drafted, and plaintiff’s friendly ballot initiative. Although the CCPA is scheduled to go into force in...more

Avoiding the California Privacy and Security Litigation Tsunami: CCPA FAQ: Does the CCPA’s Statutory Damages And Other Provisions...

BCLP on 2/13/2019

Companies that do business in California know that it is a magnet for class action litigation. The California Consumer Privacy Act ("CCPA"), a new privacy law that applies to data collected about California residents, will...more

CCPA FAQs: Does a United States service provider have to comply with the CCPA, even if its client is not subject to the Act?

BCLP on 12/21/2018

The California Consumer Privacy Act ("CCPA") was enacted in early 2018 as a political compromise to stave off a poorly drafted, and plaintiff’s friendly ballot initiative. Although the CCPA is scheduled to go into force in...more

CCPA FAQs: Is a service provider permitted to disclose personal information if it receives a civil subpoena, or a discovery...

BCLP on 12/20/2018

The California Consumer Privacy Act ("CCPA") was enacted in early 2018 as a political compromise to stave off a poorly drafted, and plaintiff’s friendly ballot initiative. Although the CCPA is scheduled to go into force in...more

Data Breach in Brief: Knowing the Risks and Protecting Your Company

Ogletree, Deakins, Nash, Smoak & Stewart,... on 12/17/2018

Data breaches continue to be an unfortunate risk that companies face with increasing frequency. In this podcast, Rebecca Bennett, Stephen Riga, and Justin Tarka discuss data breaches from both a U.S. and EU perspective,...more

EU GDPR eDiscovery — Top Ten Tips for Litigators

Fenwick & West LLP on 6/20/2018

Overview (10. – 6.) - 10. The European Union (EU) General Data Protection Regulation (GDPR) went into effect on May 25, 2018. It applies to the processing of “personal data” of EU citizens and residents (a/k/a “data...more

Use a Third-Party Platform? You Might Be a “Data Controller”

Perkins Coie on 6/12/2018

The European Union’s top court ruled last week that the operator of a Facebook fan page is a “joint controller,” along with Facebook, with respect to personal data collected on such pages. The decision has implications for...more

GDPR's Most Frequently Asked Questions: If I Receive a "Right To Be Forgotten" Request From A Client Who Is An Individual With A...

BCLP on 3/21/2018

The European Union's General Data Protection Regulation ("GDPR") is arguably the most comprehensive - and complex - data privacy regulation in the world. As companies prepare for the GDPR to go into force on May 25, 2018,...more

GDPR's Most Frequently Asked Questions: Do Companies Always Have To Provide a Privacy Notice If They Collect Information About...

BCLP on 3/14/2018

The European Union’s General Data Protection Regulation (“GDPR”) is arguably the most comprehensive – and complex – data privacy regulation in the world. As companies prepare for the GDPR to go into force on May 25, 2018,...more

Deadline Looms for Companies to Meet GDPR Compliance

Harris Beach Murtha PLLC on 2/23/2018

The European Union’s (EU) comprehensive General Data Protection Regulation 2016/679 (GDPR) replaces the long-standing Data Privacy Directive 95/46-EC (Directive), regulates the collection, processing, and transfer of an...more

Practical GDPR Steps for US-Headquartered Life Sciences Companies

Mintz - Privacy & Cybersecurity Viewpoints on 2/13/2018

In case you had not heard, the European Union is replacing its current privacy laws with a new, comprehensive General Data Protection Regulation (GDPR), which takes effect May 25, 2018. The essential principles of the EU’s...more

10 Steps to GDPR Compliance - Privacy Matters

Katten Muchin Rosenman LLP on 11/15/2017

Privacy Matters examines the General Data Protection Regulations (GDPR) and practical tips on achieving compliance in advance of its implementation on May 25, 2018. This issue provides 10 steps that businesses and legal...more

GDPR for pension schemes - a practical guide

Hogan Lovells on 11/9/2017

Data protection law is undergoing radical change that is impacting employers and trustees of pension schemes and all service providers to them. With effect from 25 May 2018 the European General Data Protection Regulation...more

Do Your Vendor Contracts Comply with GDPR?

Womble Bond Dickinson on 10/27/2017

Any entity processing personal data on your behalf (i.e., your vendors) must have a written contract in place. The GDPR requires specific language in your vendor contracts. Review steps 1–4 below to bring your vendor...more

A Fragile Shield? Managing the Risks of EU-U.S. Data Transfer

Womble Bond Dickinson on 7/27/2016

Following European Commission adoption of the Privacy Shield on July 12, 2016, and with Privacy Shield self-certification poised to open for business organizations on August 1, 2016 as a replacement for the invalidated...more

IP Addresses as Personal Data – Website Providers To Come Under Even More Scrutiny With EU Data Privacy Law

Orrick, Herrington & Sutcliffe LLP on 5/17/2016

Website providers that collect dynamic Internet Protocol addresses (“IP address”) from website visitors may soon be subject to even more scrutiny from data protection authorities in the EU. Last week, Europe’s Advocate...more

25 Results

/

View per page

Page: of 1