News & Analysis as of

Data Privacy Court of Justice of the European Union (CJEU)

Skadden, Arps, Slate, Meagher & Flom LLP

EU Court Upholds EU-US Data Flows in Latombe v Commission

Under the EU General Data Protection Regulation (GDPR), the European Commission can issue “adequacy” decisions allowing data to be transferred from the EU to a non-EEA country without additional security measures such as...more

Latham & Watkins LLP

EU-US Data Privacy Framework on Personal Data Transfers Survives Legal Challenge

Latham & Watkins LLP on

EU General Court confirms United States ensured an adequate level of protection for EU personal data transfers to the US. ...more

BCLP

The EU-US Data Privacy Framework Survives an Annulment Challenge

BCLP on

On 3 September 2025, the European Court of Justice (“CJEU”) dismissed the action of a Member of the French Parliament, Mr. Philippe Latombe, who had sought annulment of the EU-U.S. Data Privacy Framework (“DPF”)....more

Husch Blackwell LLP

EU Court Upholds Data Privacy Framework Despite Challenge: Implications for Transatlantic Data Transfers

Husch Blackwell LLP on

Key point: The European General Court has upheld the European Commission’s adequacy decision for the EU-U.S. Data Privacy Framework, confirming that the United States ensures an adequate level of protection for personal data...more

Ropes & Gray LLP

It's All Relative: Analysing The CJEU's Judgment On The Scope Of Pseudonymous Personal Data

Ropes & Gray LLP on

In a decision with significant legal and operational ramifications for organisations of all shapes and sizes, the Court of Justice of the European Union (CJEU) last week confirmed that pseudonymised data will not always and...more

Baker Botts L.L.P.

CJEU Clarifies Requirements and Definition of Pseudonymisation

Baker Botts L.L.P. on

On September 4, 2025, the Court of Justice of the European Union (“CJEU”), delivered its judgment in European Data Protection Supervisor ("EDPS") v. Single Resolution Board ("SRB") (C-413/23 P). The decision clarifies two...more

Ogletree, Deakins, Nash, Smoak & Stewart,...

European Court of Justice Ruling on Works Agreements: Reinforcing GDPR Compliance in the Workplace

The European Court of Justice (ECJ) recently delivered a decision that significantly impacts how employers and works councils across the European Union approach the processing of employee data. The ruling clarifies that works...more

Ropes & Gray LLP

In All Seriousness: UK Court of Appeal (Re)Opens The Door For Data Breach Claims

Ropes & Gray LLP on

Although they do not focus the minds of many organisations in the same way as multi-million euro enforcement actions, the importance of low-value, non-material damages claims under the GDPR has gathered steam since the...more

Fisher Phillips

Workday Ruling: How Europe’s Top Courts Raised the Bar for Employee Data Protection

Fisher Phillips on

Cloud-based HR systems have become standard for multinational businesses, driving efficiency but also increasing compliance and privacy risks. Indeed, a recent Workday case, which originated in Germany, has clarified the...more

Ropes & Gray LLP

U.S. District Court Ruling Vacates HIPAA Final Rule that Strengthened Privacy Protections for Reproductive Health Information

Ropes & Gray LLP on

On June 18, 2025, the United States District Court for the Northern District of Texas Amarillo Division issued an opinion, Purl v. Department of Health and Human Services, declaring the U.S. Department of Health and Human...more

DLA Piper

EU: Brussels Court of Appeal Rules on IAB Europe and the TC String – Implications for GDPR Compliance

DLA Piper on

On 14 May 2025, the Brussels Court of Appeal (Market Court) delivered the long-awaited judgement in the case concerning the Transparency & Consent Framework (“TCF”) (case no. 2022/AR/292). The Court largely upheld the...more

Clark Hill PLC

The Learned Concierge - April 2025, Vol. 18

Clark Hill PLC on

Welcome to your monthly legal insights on the trends impacting the Retail, Hospitality, and Food & Beverage Industries. ...more

Ogletree, Deakins, Nash, Smoak & Stewart,...

Data in the Balance: Political Influence on EU-U.S. Data Transfers

In politically uncertain times, is your organisation’s data transfer compliance unquestionable? The EU-U.S. Data Privacy Framework (DPF) serves as a useful mechanism for transatlantic data transfers, and it can assist...more

Hogan Lovells

Latombe Case: First hearing for annulment of the EU-U.S. Data Privacy Framework

Hogan Lovells on

On April 1st, 2025, the General Court of the European Union held its first hearing on the request initiated by member of French parliament Philippe Latombe for annulment of the EU-U.S. Data Privacy Framework (“DPF”) further...more

Clark Hill PLC

How to Explain Automated Decisions: Recent CJEU Decision and CPPA Rulemaking Offer Insight into ADM Explainability

Clark Hill PLC on

Automated decision-making, or ADM, is used for a wide range of use cases that impact individuals — from processing insurance claims and credit scoring, to ranking job candidates and offering personalized pricing or targeted...more

A&O Shearman

CJEU issues judgment on balancing the right of access and protecting trade secrets in automated decision-making processes

A&O Shearman on

On February 27 2025, the Court of Justice of the European Union (CJEU) delivered a judgment in CK v Dun & Bradstreet (Case C-203/22). This judgment clarifies the GDPR provisions regarding the right of access to personal...more

Latham & Watkins LLP

Personal Data: A Relative Concept?

Latham & Watkins LLP on

Advocate General Spielmann opines that personal data can be pseudonymous in the hands of one party and anonymous in the hands of another....more

Latham & Watkins LLP

GDPR Fines to Be Determined by Reference to Global Turnover of Corporate Group

Latham & Watkins LLP on

The CJEU has decided that the maximum thresholds for GDPR fines should be calculated using the global turnover of the broader corporate group, not solely the infringing entity....more

A&O Shearman

Luxembourg adapts its RCS and RBE legislations after CJEU ruling

A&O Shearman on

The Luxembourg Parliament recently enacted a law reforming the Trade and Companies Register (RCS) and the Register of Beneficial Owners (RBE) laws. This reform is a direct response to the decision of the Court of Justice of...more

K&L Gates LLP

CJEU Upholds EDPB's Authority to Order Broader Investigations in Cross-Border Cases

K&L Gates LLP on

In a landmark judgment delivered on 29 January 2025, the General Court of the European Union has affirmed the European Data Protection Board‘s (EDPB) authority to require national supervisory authorities to broaden their...more

Orrick, Herrington & Sutcliffe LLP

Analysis of the CJEU Judgment Which Paves the Way for Competitor Civil Actions Regarding GDPR Violations

Entscheidung. Man darf sich fragen, warum Kündigungsbeschränkungen gerade im HV-Recht eine vergleichsweise hohe Bedeutung haben, obwohl eigentlich für andere Verträge nichts Abweichendes gelten dürfte. Auch das...more

Morgan Lewis

EU High Court Allows GDPR Claims in Business Litigation, Expands Scope of ‘Health Data’ Impacting Life Sciences and Consumer...

Morgan Lewis on

The Court of Justice of the European Union (CJEU), the EU’s highest court, recently announced its significant Lindenapotheke decision, permitting companies to use the General Data Protection Regulation in business-to-business...more

DLA Piper

EU: CJEU Confirms That Legitimate Interests Can Cover Purely Commercial Interests

DLA Piper on

Introduction - The subject of “legitimate interests” and in particular whether they can be “purely commercial” has been a topic of front and center stage debate in the Netherlands for some time. The Dutch data protection...more

Hogan Lovells

CJEU clears the air, Dutch DPA’s interpretation of legitimate interests is too strict

Hogan Lovells on

On 4 October 2024, the Court of Justice of the European Union (CJEU) published its long-awaited judgement in case C-621/22 (KNLTB), which clarifies that purely commercial interests may not be categorically excluded from...more

Hogan Lovells

Dutch DPA’s fine decision suspended by Dutch court amidst “(commercial) legitimate interest-controversy”

Hogan Lovells on

Once again, a Dutch district court has recalled a decision of the Dutch Data Protection Authority (Dutch DPA) for its too strict interpretation that purely commercial interests cannot be legitimate interests under Article...more

97 Results
 / 
View per page
Page: of 4

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
- hide
- hide