On September 5, 2018, the European Commission (“EC”) published its draft decision on whether Japan’s 2003 Act on the Protection of Personal Information (“APPI”) provides protection equivalent to the protection of personal...more
On May 29, 2018, the German Regional Court of Bonn ruled on the principle of data minimization under Regulation (EU) 2016/679 (GDPR), which requires companies to limit the processing of personal data to what is necessary in...more
On April 19, 2018, the statutorily-appointed independent EU advisory body known as the Article 29 Working Party (“WP29”) published a Position Paper on the derogations from the obligation to maintain records of processing...more
On February 12, 2018, the statutorily-appointed independent EU advisory body known as the Article 29 Working Party (“WP29”) published revised Guidelines on personal data breach notification under the General Data Protection...more