Popular, Data Security, Data Protection Authority

[Webcast Transcript] You’ve Got to Move It: Data Protection and Privacy with Cross-Border Transfers

HaystackID on 6/29/2022

...This session, led by industry-acknowledged experts in areas ranging from data protection and privacy to data transfer and legal discovery, provided a professional forum for the explanation of the best approaches,...more

Dubai data protection authority plans to launch international privacy risk index and update international data transfer mechanisms

Dechert LLP on 5/5/2022

The Dubai International Financial Centre’s ("DIFC") data protection authority has published its proposals for updated tools and guidance on international data transfers. A consultation on these proposals by the DIFC...more

Belgian DPA Finds That IAB Europe’s Cookie Consent Framework Violates the GDPR

Wilson Sonsini Goodrich & Rosati on 2/9/2022

On February 2, 2022, the Belgian Data Protection Authority (DPA) found that the Interactive Advertising Bureau Europe (IAB) Transparency & Consent Framework (TCF), a tool used to record individuals' online ad preferences,...more

Data Breach Enforcement Is a Global Risk

BakerHostetler on 6/24/2021

The 2021 edition of BakerHostetler’s annual Data Security Incident Response Report highlights some regulatory enforcement trends we saw from the European Union (EU) data protection authorities (DPAs) during the past year. EU...more

International Data Protection Update – First Quarter 2021

BakerHostetler on 3/30/2021

This quarterly update highlights some of the international data protection issues that have caught our attention, and the attention of our clients, in the past three months....more

Jones Day Global Privacy & Cybersecurity Update | Vol. 27

Jones Day on 1/8/2021

United States - Regulatory—Policy, Best Practices, and Standard - NIST Unveils Draft Guidance to Protect Critical Infrastructure - On October 22, 2020, the National Institute of Standards and Technology ("NIST")...more

Blackbaud Data Breach: Do You Need to Notify Affected Individuals or EU Data Protection Authorities?

McGuireWoods LLP on 7/28/2020

On July 16, 2020, Blackbaud, a U.S. based cloud computing provider and one of the world’s largest providers of education administration, fundraising, and financial management software, notified users of its services that it...more

Data privacy concerns in the age of the coronavirus

Society of Corporate Compliance and Ethics... on 4/17/2020

Report on Supply Chain Compliance 3, no. 7 (April 2020) - Last issue, we discussed the Italian Data Protection Authority (DPA) guidance regarding the health data of employees. The DPA stated the responsibility for handling...more

Privacy & Cybersecurity Update - May 2019

Skadden, Arps, Slate, Meagher & Flom LLP on 6/3/2019

In this month's edition of our Privacy & Cybersecurity Update, we examine expanded data breach notification laws in New Jersey and Washington state, as well as the SEC's risk alert regarding cloud-based storage solutions. We...more

A Year of GDPR: Five Recommendations to Help Limit Regulatory Scrutiny

Akin Gump Strauss Hauer & Feld LLP on 5/31/2019

A year ago, on May 25, 2018, the European Union’s General Data Protection Regulation (GDPR) came into force. With its extraterritorial scope and detailed requirements, the GDPR aimed to change the approach to personal data...more

Dutch DPA Makes Data Protection Policy Recommendations

Fox Rothschild LLP on 4/18/2019

The Dutch Data Protection Authority makes six recommendations on drafting your data protection policy, based on its audits of privacy policies of blood banks, IVF clinics and political parties. A good data protection policy...more

The Status Of The GDPR As The One-Year Mark Gets Closer

Jackson Lewis P.C. on 2/19/2019

In honor of Data Privacy Day (Data Protection Day in Europe), the European Commission (“the Commission”) released a statement on the status of the EU’s General Data Protection Regulation (“GDPR”) which took effect on May 25,...more

French Data Protection Authority Confirms Enforcement Trend on Security Obligations for Data Controllers

Jones Day on 7/6/2018

The Situation: Even before the General Data Protection Regulation ("GDPR") became effective on May 25, there has been a noticeable trend in the enforcement of security obligations through increased sanctions. The...more

Global Privacy & Cybersecurity Update Vol. 14

Jones Day on 6/5/2017

New York Attorney General Announces Record Number of Data Breach Notices in 2016 - On March 21, 2017, the New York Attorney General's Office announced that it received 1,300 reported data breaches in 2016—a 60 percent...more

Global Privacy & Cybersecurity Update Vol. 13

Jones Day on 3/15/2017

On December 28, 2016, the New York Department of Financial Services ("DFS") released a revised version of a proposed regulation that would require banks, insurance companies, and other financial services institutions...more

Is it Legal to Transfer Personal Data from the European Union to the United States?

Arnall Golden Gregory LLP on 11/10/2016

Human Resources professionals have one more item to add to their compliance checklist – ensuring the lawful transfer of employee, consumer or customer personal data from the European Union (“EU”) to the United States. ...more

German DPA Publishes First Privacy Shield Guidelines, Requires German-Law Contracts for Transfers

Alston & Bird on 9/15/2016

On June 7, 2016, the European Commission adopted the US-EU Privacy Shield. Companies that self-certify under Privacy Shield with the US Department of Commerce – dubbed “Privacy Shield organizations” – are thus officially...more

Receiving Data from Europe: The EU-US Privacy Shield

Clark Hill PLC on 8/26/2016

The European Union ("EU") recently announced that the new EU-US Privacy Shield Agreement ("Privacy Shield") is adequate to meet EU data privacy requirements and allow for the transfer of personal data from the EU to the US in...more

European Data Protection Supervisor Issues Information Security Risk Management Guidance for E.U. Institutions

Alston & Bird on 3/31/2016

The European Data Protection Supervisor (“EDPS”) Giovanni Buttarelli issued a guidance document on data security and risk management for the E.U. institutions (such as the European Parliament, the European Council, and the...more

No Safe Harbour? Immediate Implications for Employers

Seyfarth Shaw LLP on 10/19/2015

A landmark decision of the European Court of Justice (ECJ) has held that companies may no longer rely on “Safe Harbour” to justify transferring personal data from the European Union to the US, because the US Government has a...more

A German DPA Questions the Validity of the Use of Consent and Model Contractual Clauses to Transfer Personal Data to the U.S.

Proskauer - Privacy & Cybersecurity on 10/19/2015

Just one week after the milestone decision rendered by the CJEU to invalidate the Safe Harbor program established 15 years ago between the U.S. and the EU to facilitate the transfer of personal data from the EU to the U.S., a...more

Privacy, Security, Risk: What You Missed At IAPP Conference

Orrick, Herrington & Sutcliffe LLP on 10/15/2015

Earlier this month, privacy and security professionals from around the globe gathered for “Privacy. Security. Risk. 2015”—the second joint conference between the International Association of Privacy Professionals and the...more

Today's Popular Updates › Data Security › Data Protection Authority

"My best business intelligence, in one easy email…"