News & Analysis as of July 24, 2025

Privacy Laws

+ Follow

The European Union is an economic and political partnership comprised of 27 nations within the Eurozone. The EU was established in 1948 to promote stability and cooperation among member states in the aftermath of WWII. The EU maintains a common currency as well as several intranational institutions, including the European Parliament and the European Commission. less -

Don’t Forget the EU: Italy Issued First GenAI Fine of €15 Million Alleging GDPR Violations

Sheppard Mullin Richter & Hampton LLP on 1/29/2025

At the end of 2024 the Italian Data Protection Authority issued a 15 million euro fine in the first generative AI-related case brought under GDPR. According to Garante (the Italian authority), OpenAI trained ChatGPT with...more

EU and UK Data Protection Regulatory Trends so far in 2024: a focus on international data transfers

A&O Shearman on 10/21/2024

This series of blogs rounds up some of the key data protection regulatory trends we have seen during 2024, focused on the EU and UK. 2024 has seen behavioural advertising and cookies continue to dominate the agenda of...more

Netherlands Imposes Record-Breaking Data Privacy Fine on Uber: 4 Key Steps Companies Can Take to Ensure Compliance

Fisher Phillips on 10/4/2024

Dutch data privacy officials recently imposed a staggering penalty on Uber – €290 million ($324 million) – for allegedly breaching the European Union’s comprehensive data privacy and security law. This groundbreaking fine is...more

European Commission publishes second report on application of GDPR

A&O Shearman on 8/14/2024

On 25 July 2024, the EU Commission published its second report on the application of the GDPR (the ‘Second Report’), following its first report published in 2020....more

AI Trends For 2024 - Privacy Regulators Will Increase Scrutiny Of Data Collection For AI Training

MoFo Tech on 12/22/2023

Privacy regulators, including the EU data protection authorities (EU DPAs), are expected to increase their scrutiny of data scraping to train AI algorithms. Data scraping involves the collection of large amounts of publicly...more

DSIR Deeper Dive: How International and Domestic Regulatory Enforcement Spotlights the Information Governance Tensions Between...

BakerHostetler on 8/31/2023

As we noted in our 2023 DSIR, there has been a flurry of activity within the information governance space, at home and abroad. This activity deserves further analysis, because while it seems from a distance that there are...more

CNIL Weighs in On GDPR Applicability to US Company

Sheppard Mullin Richter & Hampton LLP on 2/8/2023

The French Data Protection Authority capped off 2022 by terminating an investigation into Lusha Systems, Inc.’s compliance with GDPR. CNIL concluded that the law did not apply to the US company’s activities...more

Fine Imposed on Israeli Cyber Tech Company for Violating GDPR

Barnea Jaffa Lande & Co. on 1/25/2023

Greece’s privacy protection authority recently announced it was fining Intellexa, an Israeli cyber tech company, EUR 50,000. The Hellenic Data Protection Authority (HDPA) imposed the fine as part of an investigation it...more

[Webinar] Mitigating Risk Exposure Under Evolving Global Cookies Regulations - May 19th, 12:00 pm - 1:00 pm EDT

McDermott Will & Emery on 5/10/2021

The regulation of cookies and similar tracking technologies is rapidly evolving, not only in the European Union and United Kingdom but also in the United States and globally. If you have visited a website recently, you might...more

Turn on the Camera Part One: Keeping Your Privacy Compliant Efforts Moving Forward in the Face of COVID-19

Sheppard Mullin Richter & Hampton LLP on 3/13/2020

As companies brace for the impact of COVID-19, the last thing on everyone’s mind may be proactive privacy compliance obligations. Certainly, companies may be thinking about privacy obligations that relate specifically to...more

Interactive Counsel Newsletter: Privacy Report: FBI Issues Updated Ransomware Guidance

ArentFox Schiff on 11/21/2019

FBI Issues Updated Ransomware Guidance - A recent report from New Zealand-based cybersecurity firm Emsisoft has revealed the extent to which ransomware is being used in cyberattacks in the United States. The first 9 months...more

Dashcams and autonomous vehicles: Dodging legal landmines in the EU

White & Case LLP on 10/21/2019

White & Case Technology Newsflash - The development of autonomous vehicles has attracted significant attention in recent years. The technologies being used in order to enable vehicles to navigate without human assistance...more

Privacy and Data Security Alert | August 2019

Shook, Hardy & Bacon L.L.P. on 8/6/2019

French Data Protection Authority Issues Guidelines on Cookie Use - CNIL, France’s data protection authority, has released new rulesfor obtaining consumer consent under the GDPR for companies using cookies and other tracking...more

The CNIL Sharpens Requirements on Deployment of Tracking Technologies

Wilson Sonsini Goodrich & Rosati on 7/31/2019

On July 18, 2019, the French Data Protection Authority (CNIL) issued new guidance on the use of cookies and similar tracking technologies (collectively referred to as “cookies” below). The guidance clarifies the instances in...more

‘Click Here to Accept Updated Cookie Guidance’

ArentFox Schiff on 7/22/2019

Data protection authorities in the UK and France have released updated guidance for website operators that use cookies on their websites. This new guidance may mandate changes to existing cookie banners and provides further...more

Chapter 16: Remedies and sanctions – Unlocking the EU General Data Protection Regulation

White & Case LLP on 4/24/2019

Why does this topic matter to organisations? Whereas the remedies and sanctions available to DPAs under the Directive were comparatively low (generally subject to a maximum of less than €1 million per infringement, with...more

March 2019 IP Update: Europe’s One-Stop Shop for Privacy Regulation: For EU Companies Only?

Sunstein LLP on 4/17/2019

One key aspect of the EU’s General Data Protection Regulation (GDPR) is its aim of streamlining the regulatory process by providing “one-stop shopping”: the opportunity to deal with a single regulator with respect to all data...more

An English-Language Primer on Germany’s GDPR Implementation Statute: Part 4 of 5

Alston & Bird on 10/19/2017

Over the past year, the German government has been working on legislation to implement the EU’s General Data Protection Regulation (GDPR). On July 6, 2017, Germany did so by passing a statute titled the Data Protection...more

Global Privacy & Cybersecurity Update Vol. 13

Jones Day on 3/15/2017

On December 28, 2016, the New York Department of Financial Services ("DFS") released a revised version of a proposed regulation that would require banks, insurance companies, and other financial services institutions...more

The EU General Data Protection Regulation

Akin Gump Strauss Hauer & Feld LLP on 12/22/2015

On December 15, 2015, European Union (“EU”) politicians and officials reached a political agreement on a new EU-wide legal framework to govern data sharing and collection and related consumer privacy rights. It is called the...more

EU Expands Reach of National Data Protection Regulators

BakerHostetler on 10/22/2015

The central European countries of Slovakia and Hungary are divided by a common 420-mile-long border. But that dividing line, and other European national borders, may now be a little more blurred due to a key ruling by the...more

Means, Other Than Safe Harbor, of Transferring Personal Data to the U.S. Potentially Vitiated?

McGuireWoods LLP on 10/16/2015

After the decision of October 6, 2015, of the Court of Justice of the EU (CJEU) invalidating the decision from the EU Commission (Decision 2000/520) on the Safe Harbor, transfer of personal data to the U.S. based on Standard...more

Transfer of Employees’ Personal Data from Germany to the United States under German Data Privacy Law

K&L Gates LLP on 10/12/2015

Following the ECJ’s decision in the “Schrems” case which has invalidated the Safe Harbor framework multinational corporations may now face profound privacy law related compliance issues in a multitude of jurisdictions. In the...more

EU Court Rejects “Safe Harbor” Agreement Permitting Customer Data Transfers to U.S.

Sheppard Mullin Richter & Hampton LLP on 10/8/2015

The European Court of Justice (ECJ) has struck down the 15-year-old “Safe Harbor” agreement that permitted companies operating in Europe to transmit personal user data to the United States, as long as the U.S. ensures an...more

European Court of Justice Invalidates Safe Harbor Adequacy Finding: Organizations Should Re-evaluate Their Basis for EU-US Data...

Arnall Golden Gregory LLP on 10/8/2015

On October 6th, the European Court of Justice (ECJ) issued its opinion in Schrems v. Data Protection Commissioner (C-362/14), a case which, among other things, challenged the validity of the European Commission’s 2000 finding...more

28 Results

View per page

Page: of 2

European Union › Data Protection Authority › Privacy Laws

"My best business intelligence, in one easy email…"