News & Analysis as of

Third-Party Data Controller

WilmerHale

The EU Data Act: A new European legal framework with rules for data access, switching cloud providers and interoperability

WilmerHale on

On 22 December 2023, the EU published Regulation (EU) 2023/2854, the Data Act, in the Official Journal of the EU. The Data Act is a new regulation providing harmonised rules on access to data, switching cloud providers and...more

Davies Ward Phillips & Vineberg LLP

First OPC Ruling for 2023 Will Impact Third-Party Processor Contracts

The Office of the Privacy Commissioner of Canada (OPC) recently released findings stemming from a customer complaint that Home Depot of Canada (Home Depot) had violated the Personal Information Protection and Electronic...more

Fox Rothschild LLP

EDPB Ruling Provides Takeaways For DPA Standard Contractual Clauses

Fox Rothschild LLP on

The EDPB issued an opinion on the draft Standard Contractual Clauses (SCC) for a controller-processor data processing agreement under Article 28 (Data Processing Agreements) submitted by the Lithuanian supervisory authority. ...more

BCLP

What types of “interests” are sufficient to justify processing based upon the legitimate interests of a controller?

BCLP on

The GDPR prohibits a company from processing personal data unless one of six “lawful purposes” are present. One of those lawful purposes occurs when processing is necessary for a “legitimate interest pursued by the controller...more

BCLP

California and European Privacy FAQs: Does a company have to forward a right to be forgotten request to a third party with whom it...

BCLP on

The California Consumer Privacy Act ("CCPA") was enacted in early 2018 as a political compromise to stave off a poorly drafted, and plaintiff’s friendly ballot initiative. Although the CCPA is scheduled to go into force in...more

Dechert LLP

Complying With a Data Subject Access Request: What Data Controllers Need to Know

Dechert LLP on

A data subject (defined in the GDPR as an identified or identifiable natural person) has a right under the General Data Protection Regulation (GDPR) to make a data subject access request (DSAR) to find out what personal data...more

6 Results
 / 
View per page
Page: of 1

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
- hide
- hide