News & Analysis as of September 8, 2025

European Union › International Data Transfers

+ Follow

The European Union is an economic and political partnership comprised of 27 nations within the Eurozone. The EU was established in 1948 to promote stability and cooperation among member states in the aftermath of WWII. The EU maintains a common currency as well as several intranational institutions, including the European Parliament and the European Commission. less -

EU-U.S. Data Transfers in 2025

Coblentz Patch Duffy & Bass on 9/5/2025

Cross-border data transfers between the EU and U.S. remain a legal and operational minefield. While the July 2023 adequacy decision ushered in the EU-U.S. Data Privacy Framework (DPF), recent developments have called its...more

EU General Court Upholds EU-U.S. Data Privacy Framework

Jones Day on 9/5/2025

On September 3, 2025, the General Court of the European Union dismissed an action for annulment brought by a French member of Parliament against the European Commission's decision recognizing the adequacy of the level of...more

EU-U.S. Data Privacy Framework Survives First Challenge

DLA Piper on 9/4/2025

The EU General Court has dismissed a French MEP’s challenge to the EU-U.S. Data Privacy Framework (“DPF”) for the transfer of personal data between the European Union (“EU”) and the United States (“U.S”). While the decision...more

Transatlantic data transfers: EU General Court upholds Data Privacy Framework

Hogan Lovells on 9/4/2025

On 3 September 2025, the General Court (GC) of the European Union's Court of Justice dismissed claims in Latombe v. Commission to annul the EU-U.S. Data Privacy Framework (DPF). ...more

EU Court Upholds the Validity of the EU-U.S. Data Privacy Framework

Wilson Sonsini Goodrich & Rosati on 9/4/2025

On September 3, 2025, the EU General Court (the General Court) (the second-highest court in the European Union (EU)) upheld the validity of EU-U.S. Data Privacy Framework (DPF) in Philippe Latombe v European Commission...more

European Court of Justice Ruling on Works Agreements: Reinforcing GDPR Compliance in the Workplace

Ogletree, Deakins, Nash, Smoak & Stewart,... on 9/2/2025

The European Court of Justice (ECJ) recently delivered a decision that significantly impacts how employers and works councils across the European Union approach the processing of employee data. The ruling clarifies that works...more

AI and GDPR: A Road Map to Compliance by Design - Episode 5: Using AI

WilmerHale on 8/1/2025

The rise of artificial intelligence (AI) and its widespread availability offers significant growth opportunities for businesses. However, it necessitates a robust governance framework to ensure compliance with regulatory...more

UK Adequacy Holds Firm Under New Data (Use and Access) Act 2025

Latham & Watkins LLP on 7/28/2025

The DUAA introduces several reforms to UK data protection law, but their implications are relatively limited in practice. The Data (Use and Access) Act 2025 (the DUAA) was enacted on 19 June 2025 and amends rather than...more

The Data Shift: UK Sets a New Course With 2025 Data (Use and Access) Act

Goodwin on 7/16/2025

The Data (Use and Access) Bill passed both Houses of UK Parliament and received Royal Assent on 19 June 2025, now becoming the Data (Use and Access) Act 2025 (“DUA Act”). This is the final iteration of the Data Protection and...more

EDPB clarifies assessment for disclosing EU data to foreign authorities

Hogan Lovells on 7/14/2025

On 4 June 2025, the European Data Protection Board published guidelines clarifying how EU-based companies should assess requests from foreign authorities for access to EU personal data. The EDPB emphasizes that such requests...more

The UK’s New Amendments to the UK GDPR Become Law and Get a Nod from the EU. What happens now?

Seyfarth Shaw LLP on 6/26/2025

The UK’s Data (Use and Access) Act received Royal Assent last Thursday, June 19th, bringing into law some significant changes to the country’s post Brexit data protection framework, among an array of other, related rules (on...more

SEC Lifts Moratorium on Registering Swiss Investment Advisers

Ropes & Gray LLP on 6/18/2025

On June 10, 2025, the SEC issued a press release announcing that, effective immediately, it would resume processing new and pending registration applications of investment advisers with their principal office and place of...more

EU-UK Data Transfers: Adequacy Decision Extended, But Uncertainty Remains

King & Spalding on 6/9/2025

On May 14, 2025, the European Data Protection Board ("EDPB") issued a favorable opinion on granting a six-month extension to the existing adequacy decisions for the UK, following a formal proposal from the European...more

German Federal Labor Court Grants Damages Under the GDPR for the Use of Employee Data: 7 Things for Companies to Consider

Orrick, Herrington & Sutcliffe LLP on 5/29/2025

On May 8, 2025, the Federal Labor Court Bundesarbeitsgericht (“BAG”) issued a significant ruling concerning an employee’s claims for damages due to unlawful data transfers within a corporate group. The BAG ruled that works...more

Constangy Clips Ep. 10 - 3 Ways the GDPR Is Evolving with Today’s Tech Landscape

Constangy, Brooks, Smith & Prophete, LLP on 5/21/2025

In recognition of the GDPR's 7th anniversary on May 25, 2025, Constangy Cyber Team member Matthew Basilotto explores how the European Union’s General Data Protection Regulation (GDPR) continues to adapt in the face of...more

CJEU publishes an updated Fact Sheet summarising key case law on protection of personal data

A&O Shearman on 5/16/2025

On April 28 2025, the Court of Justice of the European Union (CJEU) published an updated version of the fact sheet (the Fact Sheet) summarising key case law on protection of personal data. The Fact Sheet covers the case law...more

Belgian DPA Finds Broad Tax Information Transfers to IRS Unlawful

Sheppard Mullin Richter & Hampton LLP on 5/13/2025

The Belgian Data Protection Authority recently ruled that a Belgian government entity, FPS Finance, cannot transfer the personal data of “accidental Americans” to the IRS. According to the decision, the transfers needed to...more

Irish Data Protection Commission Fines TikTok Over EEA Data Transfers to China

Maynard Nexsen on 5/12/2025

On May 2, 2025, the Irish Data Protection Commission (“DPC”) issued a decision, as lead supervisory authority, finding that TikTok infringed the GDPR regarding (a) its cross-border transfers of EEA User Data to China, and (b)...more

Is My U.S.-Based Company Subject to the GDPR? Clearing Up European Data Privacy Law Misinformation

Amundsen Davis LLC on 4/23/2025

If you are a compliance professional for a U.S.-based company, you have probably been told at some point that you have to worry about the General Data Protection Regulation (GDPR). Have you encountered one of these...more

Preparing for the European Health Data Space - Opportunities and Challenges for Europe’s Digital Future

Latham & Watkins LLP on 4/18/2025

The EU regulation designed to facilitate secondary use of clinical data for research brings benefits for health research, but also poses challenges for companies....more

Data in the Balance: Political Influence on EU-U.S. Data Transfers

Ogletree, Deakins, Nash, Smoak & Stewart,... on 4/4/2025

In politically uncertain times, is your organisation’s data transfer compliance unquestionable? The EU-U.S. Data Privacy Framework (DPF) serves as a useful mechanism for transatlantic data transfers, and it can assist...more

Latombe Case: First hearing for annulment of the EU-U.S. Data Privacy Framework

Hogan Lovells on 4/3/2025

On April 1st, 2025, the General Court of the European Union held its first hearing on the request initiated by member of French parliament Philippe Latombe for annulment of the EU-U.S. Data Privacy Framework (“DPF”) further...more

Streamlined BCR approval: Understanding the EDPB's updated procedure

Hogan Lovells on 3/31/2025

On 19 March 2025, the European Data Protection Board published an updated procedure for co-operation between EU data protection supervisory authorities approving GDPR Binding Corporate Rules for intra-group transfers of EU...more

European Commission Moves to Extend Free Flows of Personal Data to the UK

Alston & Bird on 3/25/2025

On March 18, 2025, the European Commission proposed to extend its adequacy decision in favor of the United Kingdom (‘UK’) for an additional six-month period. This would allow free flows of personal data from the EU to the UK...more

Kingdom of Saudi Arabia Issues New Data Transfer Risk Assessment Guidelines

Latham & Watkins LLP on 3/24/2025

The guidelines specify the requirements for data controllers to conduct risk assessments related to the transfer or disclosure of personal data outside the Kingdom. ...more

1,497 Results

View per page

Page: of 60

European Union › International Data Transfers

"My best business intelligence, in one easy email…"