A series of recent rulings from the Court of Justice of the European Union ("CJEU") has reaffirmed the country of origin principle set forth in the e-Commerce Directive ("ECD")—which provides that, except in limited...more
Plaintiffs' attorneys recently have filed a series of lawsuits in New Jersey, seeking damages based on alleged violations of Daniel's Law (N.J. Stat. § 56:8-166.1). The suits allege that various website operators have...more
On January 26, 2024, the DOJ and FTC announced that they were updating the language in their "standard preservation letters and specifications for all second requests, voluntary access letters, and compulsory legal process,...more
The Court of Justice of the EU (CJEU)1 has held that the General Data Protection Regulation (GDPR) requires controllers to provide data subjects a "faithful reproduction" of their personal data, which takes into account the...more
The Court of Justice of the European Union (CJEU) ruled out automatic damages awards for civil litigants establishing infringements of the General Data Protection Regulation (GDPR). At the same time, the CJEU suggested that...more
The GDPR allows individuals to request information about the “recipients or categories of recipients” to whom their personal data has been disclosed. In a recent ruling, the EU’s Court of Justice said data subjects get to...more
The Advocate General of the Court of Justice of the EU has issued an Opinion stating that mere "upset" is not sufficient to give rise to a claim for compensation under Article 82 of the GDPR....more
On January 18, 2022, the European Data Protection Board (the "EDPB") issued the Guidelines 01/2022 on data subject rights - Right of access (the "Draft Guidelines"), laying out its interpretation of Article 15 GDPR on the...more