News & Analysis as of

Data Privacy Data Processors

Baker Botts L.L.P.

CJEU Clarifies Requirements and Definition of Pseudonymisation

Baker Botts L.L.P. on

On September 4, 2025, the Court of Justice of the European Union (“CJEU”), delivered its judgment in European Data Protection Supervisor ("EDPS") v. Single Resolution Board ("SRB") (C-413/23 P). The decision clarifies two...more

Moore & Van Allen PLLC

Getting Ready for Maryland’s Online Data Privacy Act—A New Trendsetter?

We’re about one month away from the effective date of Maryland’s version of a state comprehensive privacy law--the Maryland Online Privacy Act (MODPA). Effective October 1, 2025, MODPA contains the now familiar comprehensive...more

Osano

What Is the Processing of Personal Data?

Osano on

You never think about breathing air. Most of the time, you’re not consciously moving your legs as you walk. You don’t have to remind yourself to blink every few seconds.  For modern businesses, that’s what processing personal...more

Latham & Watkins LLP

EU Data Act Significant New Switching Requirements Due to Take Effect for Data Processing Services

Latham & Watkins LLP on

In the rapidly evolving landscape of European tech regulation, the Data Act introduces changes with the potential to reshape established market dynamics, presenting significant challenges and opportunities for affected...more

Hogan Lovells

Thailand ramps up data protection enforcement

Hogan Lovells on

Thailand's Personal Data Protection Committee (“PDPC”) has significantly intensified its enforcement of Thailand's Personal Data Protection Act B.E. 2562 (2019) (“PDPA”), announcing on 1 August 2025 eight new administrative...more

Bradley Arant Boult Cummings LLP

Tennessee Data Privacy Law (TIPA) Effective July 1: Are You Prepared?

July 1 marked the official enforcement date of the Tennessee Information Protection Act (TIPA), the state’s comprehensive consumer privacy law. Signed into law in 2023, TIPA grants consumers specific rights concerning their...more

DLA Piper

Uganda: Data Protection Regulator Clarifies Compliance Requirements for Offshore Entities

DLA Piper on

In a decision issued on 18 July 2025 against Google LLC, the Personal Data Protection Office (PDPO) has affirmed that the data protection compliance obligations under Ugandan law apply to all entities that handle the personal...more

BCLP

EMEA - Data Privacy, Digital and AI Round Up - July 2025

BCLP on

As we pass the mid-point of 2025, it’s a good time to review the important developments we have seen in the first 6 months of this year, particularly reforms to the UK’s data protection laws, the EU’s pathway to...more

Fisher Phillips

New California Regs Will Impact Your AI and Privacy Policies: FAQs on Automated Decision-Making, Risk Assessments, and...

Fisher Phillips on

California regulators unanimously approved a sweeping set of regulations on July 24 governing the use of automated decision-making technology (ADMT) and mandating risk assessments and cybersecurity audits for businesses...more

WilmerHale

AI and GDPR: A Road Map to Compliance by Design - Episode 5: Using AI

WilmerHale on

The rise of artificial intelligence (AI) and its widespread availability offers significant growth opportunities for businesses. However, it necessitates a robust governance framework to ensure compliance with regulatory...more

Fisher Phillips

Workday Ruling: How Europe’s Top Courts Raised the Bar for Employee Data Protection

Fisher Phillips on

Cloud-based HR systems have become standard for multinational businesses, driving efficiency but also increasing compliance and privacy risks. Indeed, a recent Workday case, which originated in Germany, has clarified the...more

Fisher Phillips

Proposed New Jersey Regulations Would Require Major Privacy Compliance Shifts for Businesses

Fisher Phillips on

New Jersey officials recently released proposed privacy regulations that would create several new compliance obligations for businesses above and beyond what existing state law and many other state laws require, meaning you...more

Goodwin

The Data Shift: UK Sets a New Course With 2025 Data (Use and Access) Act

Goodwin on

The Data (Use and Access) Bill passed both Houses of UK Parliament and received Royal Assent on 19 June 2025, now becoming the Data (Use and Access) Act 2025 (“DUA Act”). This is the final iteration of the Data Protection and...more

McDermott Will & Schulte

Connecticut Can’t Help Itself, Amends Consumer Privacy Law Again

On June 3, 2025, the Connecticut legislature passed a bill amending the Connecticut Data Privacy Act (CTDPA). The amendment introduces a variety of changes, including a broadening of the CTDPA’s applicability, changed...more

Arnall Golden Gregory LLP

State-by-State Privacy Legislation Update: A Compliance Roadmap for 2025

States have been active in passing and enacting comprehensive consumer privacy laws in the absence of a federal statute. To date, 19 states have passed such laws, starting with the California Consumer Privacy Act (“CCPA”),...more

Venable LLP

Smoothing Privacy Contracting: Six Ways to Reduce Friction in Data Processing Agreements

Venable LLP on

Negotiating a data processing agreement (DPA) is typically a necessary step when engaging vendors that handle personal data. However, these negotiations have become time consuming and complex, given the evolving privacy...more

Fisher Phillips

Clothing Retailer Faces Big Fines for CCPA Violations: A Wake-Up Call + An Action Plan for Businesses

Fisher Phillips on

In a significant enforcement move, California’s consumer privacy regulator just ordered a national clothing retailer to pay a $345,178 fine to resolve alleged violations of the state’s privacy law. The California Privacy...more

Fox Rothschild LLP

Pennsylvania Lawmaker Proposes New Privacy Law: What You Need to Know

Fox Rothschild LLP on

The Commonwealth of Pennsylvania is re-joining the U.S. state privacy law race. State Rep. Edward Neilson recently proposed H.B 78, which features all the normal trappings of a state privacy law with a very low...more

Lathrop GPM

New DOJ Limits on Cross-Border Data Transfers Prompt Assessment by Businesses

Lathrop GPM on

On April 8, the National Security Division of the U.S. Department of Justice’s (DOJ) new rule on cross-border data transfers takes effect. It restricts U.S. businesses from transferring certain bulk sensitive personal data to...more

Orrick, Herrington & Sutcliffe LLP

Italy Founder Series: Privacy for Startups – First Moves

italiano: Privacy per Startup – I primi passi When launching a startup in Italy, it is critical to comply with the applicable data protection requirements. Failing to do so can lead to significant risks in terms of liability...more

BCLP

Mobile Apps: What Does the CNIL Recommend From a Privacy Perspective?

BCLP on

While mobile apps have become one of the major means of access to digital services, their ubiquity is accompanied by significant risks to users' privacy, due to the massive amount of personal data they collect and process....more

Fisher Phillips

9 Sweeping Changes Proposed in India’s Latest Data Protection Draft Rules: What U.S. Employers Can Do to Prepare

Fisher Phillips on

India just released a landmark draft of new rules to refine and implement the Digital Personal Data Protection Act (DPDP Act) – which is India’s first comprehensive data privacy legislation regulating digital personal data...more

Fisher Phillips

New York on Verge of Enacting Sweeping Health Data Privacy Law: Answers to Your Key Questions and 6 Steps to Prepare

Fisher Phillips on

In a major development for all businesses handling health data, New York lawmakers passed a sweeping health data privacy bill Wednesday that could have far-ranging consequences across the country. S929, also known as the New...more

Ogletree, Deakins, Nash, Smoak & Stewart,...

Frequently Asked Questions About the New Jersey Data Protection Act, Effective January 15, 2025

The New Jersey Data Protection Act (NJDPA), N.J. Stat. § 56:8-166.4 et seq., will go into effect on January 15, 2025, as New Jersey joins eighteen other states with comprehensive data privacy laws. ...more

Mintz

Kentucky’s Consumer Privacy Law Is Coming, But on a Slow Track

Mintz on

To round out this year’s series on new state consumer privacy laws, we are covering the statute passed by Kentucky earlier this year. Please also keep your eye out for our 2024 round-up article that will be published soon, as...more

280 Results
 / 
View per page
Page: of 12

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
- hide
- hide