In a dramatic and widely reported decision of 12 July 2020 in the case known as Schrems II (Data Protection Commissioner v Facebook Ireland Ltd), the Court of Justice of the European Union (“CJEU”) invalidated the decision of...more
In a decision published on 21 December 2016, the Court of Justice of the European Union (“ECJ”) invalidated legislation in two EU member states – the UK and Sweden – requiring telecommunication operators to retain users’...more
In April 2016, the European Union adopted new legislation on data protection. The part relevant to private enterprises (EU Regulation 2016/679) is known as the General Data Protection Regulation or “GDPR.” The GDPR is subject...more
Following the formal approval of the EU-U.S. Privacy Shield by the European Commission on 8 July 2016, the arrangement will come into force in the U.S. commencing 1 August 2016 and will provide a convenient framework to allow...more
7/20/2016
/ Binding Corporate Rules ,
Data Processors ,
Data Protection Authority ,
Department of Transportation (DOT) ,
EU ,
EU-US Privacy Shield ,
Federal Trade Commission (FTC) ,
International Data Transfers ,
Personal Data ,
Self-Certification ,
Standard Contractual Clauses ,
Third-Party ,
U.S. Commerce Department
Significant uncertainty and concern regarding US companies’ ability to process and use personal data received from the EU has loomed since the October 2015 decision by Europe’s highest court invalidating the EU-US Safe...more
2/5/2016
/ Article 29 Working Party (WP29) ,
Binding Corporate Rules ,
Data Protection Authority ,
EU ,
EU-US Privacy Shield ,
European Commission ,
Federal Trade Commission (FTC) ,
International Data Transfers ,
Ombudsman ,
Personal Data ,
Standard Contractual Clauses ,
Surveillance ,
U.S. Commerce Department ,
US-EU Safe Harbor Framework