News & Analysis as of July 23, 2025

European Union › Personal Data

+ Follow

The European Union is an economic and political partnership comprised of 27 nations within the Eurozone. The EU was established in 1948 to promote stability and cooperation among member states in the aftermath of WWII. The EU maintains a common currency as well as several intranational institutions, including the European Parliament and the European Commission. less -

ICO Annual Report Provides Insight Into Data Protection Risks for Businesses

Paul Hastings LLP on 7/22/2025

The UK Information Commissioner’s Office’s (the ICO’s) latest Annual Report summarises its accomplishments and priorities, including last year’s enforcement actions. Based on our review of the report, we see the ICO focusing,...more

The Data Shift: UK Sets a New Course With 2025 Data (Use and Access) Act

Goodwin on 7/16/2025

The Data (Use and Access) Bill passed both Houses of UK Parliament and received Royal Assent on 19 June 2025, now becoming the Data (Use and Access) Act 2025 (“DUA Act”). This is the final iteration of the Data Protection and...more

EDPB clarifies assessment for disclosing EU data to foreign authorities

Hogan Lovells on 7/14/2025

On 4 June 2025, the European Data Protection Board published guidelines clarifying how EU-based companies should assess requests from foreign authorities for access to EU personal data. The EDPB emphasizes that such requests...more

Something Is Better Than Nothing: UK and EU GDPR Reform Finally Arrives

Skadden, Arps, Slate, Meagher & Flom LLP on 7/11/2025

In recent weeks, the EU and UK have both introduced changes to their respective versions of Europe’s landmark privacy legislation, the General Data Protection Regulation (GDPR). These reforms mark the first substantial...more

New EDPB Guidelines: Processing Personal Data on Blockchain

K&L Gates LLP on 7/1/2025

The European Data Protection Board recently published its draft Guidelines 02/2025, which remain open to consultation until 09 June 2025. Stakeholders in the blockchain industry are encouraged to submit any observations...more

Operating in Flux: Doing Business Under Europe’s Intensifying Regulatory Environment

HaystackID on 6/27/2025

Editor’s Note: Europe’s regulatory landscape has undergone a fundamental transformation, extending far beyond GDPR’s foundational framework to encompass a complex ecosystem of interconnected laws governing digital platforms,...more

The European Health Data Space – What EU Health Care Providers and Data Holders Need To Know

Skadden, Arps, Slate, Meagher & Flom LLP on 6/26/2025

- On 26 March 2025, the European Health Data Space (EHDS) Regulation entered into force. The regulation establishes a comprehensive framework for health-data sharing and access in the EU, with the dual aim of supporting the...more

The UK’s New Amendments to the UK GDPR Become Law and Get a Nod from the EU. What happens now?

Seyfarth Shaw LLP on 6/26/2025

The UK’s Data (Use and Access) Act received Royal Assent last Thursday, June 19th, bringing into law some significant changes to the country’s post Brexit data protection framework, among an array of other, related rules (on...more

EU Reaches a Deal on Rules for Swifter Cross-Border GDPR Enforcement

Wilson Sonsini Goodrich & Rosati on 6/19/2025

On June 16, 2025, the Council of the EU (Council) and the European Parliament (EP) reached an agreement on a new regulation (the Draft Regulation) to enhance enforcement of the General Data Protection Regulation (GDPR). The...more

EU: Brussels Court of Appeal Rules on IAB Europe and the TC String – Implications for GDPR Compliance

DLA Piper on 6/11/2025

On 14 May 2025, the Brussels Court of Appeal (Market Court) delivered the long-awaited judgement in the case concerning the Transparency & Consent Framework (“TCF”) (case no. 2022/AR/292). The Court largely upheld the...more

German Federal Labor Court Grants Damages Under the GDPR for the Use of Employee Data: 7 Things for Companies to Consider

Orrick, Herrington & Sutcliffe LLP on 5/29/2025

On May 8, 2025, the Federal Labor Court Bundesarbeitsgericht (“BAG”) issued a significant ruling concerning an employee’s claims for damages due to unlawful data transfers within a corporate group. The BAG ruled that works...more

Training of Meta’s AI Systems and the Use of the European Users’ Data

Goodwin on 5/23/2025

As of May 27, 2025, Meta (Facebook and Instagram) will start using some of the personal data of European users to train its artificial intelligence (AI) systems, including tools such as Meta AI and Llama language models....more

EU digital advertising: IAB Europe and the allocation of liabilities for the TCF

Hogan Lovells on 5/22/2025

On May 14, 2025, the Belgian Market Court delivered a landmark ruling regarding IAB Europe’s role in the Transparency and Consent Framework (TCF). The Court confirms that TC Strings qualify as personal data and that IAB...more

CJEU publishes an updated Fact Sheet summarising key case law on protection of personal data

A&O Shearman on 5/16/2025

On April 28 2025, the Court of Justice of the European Union (CJEU) published an updated version of the fact sheet (the Fact Sheet) summarising key case law on protection of personal data. The Fact Sheet covers the case law...more

Belgian DPA Finds Broad Tax Information Transfers to IRS Unlawful

Sheppard Mullin Richter & Hampton LLP on 5/13/2025

The Belgian Data Protection Authority recently ruled that a Belgian government entity, FPS Finance, cannot transfer the personal data of “accidental Americans” to the IRS. According to the decision, the transfers needed to...more

Irish Data Protection Commission Fines TikTok Over EEA Data Transfers to China

Maynard Nexsen on 5/12/2025

On May 2, 2025, the Irish Data Protection Commission (“DPC”) issued a decision, as lead supervisory authority, finding that TikTok infringed the GDPR regarding (a) its cross-border transfers of EEA User Data to China, and (b)...more

Navigating the Rise in Data Subject Access Requests

Ogletree, Deakins, Nash, Smoak & Stewart,... on 5/2/2025

Recently, there has been an increase in individual rights activity across Europe, particularly organizations receiving Data Subject Access Requests (DSARs) from former employees. ...more

Is My U.S.-Based Company Subject to the GDPR? Clearing Up European Data Privacy Law Misinformation

Amundsen Davis LLC on 4/23/2025

If you are a compliance professional for a U.S.-based company, you have probably been told at some point that you have to worry about the General Data Protection Regulation (GDPR). Have you encountered one of these...more

Automated Hiring Tools: Are My Hiring Practices Subject to AI Regulation?

Orrick, Herrington & Sutcliffe LLP on 4/21/2025

As companies increasingly leverage automated technologies in their recruiting and hiring processes, legislators and regulators are increasingly focused on establishing guardrails to ensure fairness. As a result, companies...more

Preparing for the European Health Data Space - Opportunities and Challenges for Europe’s Digital Future

Latham & Watkins LLP on 4/18/2025

The EU regulation designed to facilitate secondary use of clinical data for research brings benefits for health research, but also poses challenges for companies....more

New EU Platform Work Directive Impacts Freelancers and Gig Economy: Here’s What Businesses Need to Know

Fisher Phillips on 4/17/2025

The European Union took a big step last year towards regulating digital labor platforms – and member states will need to adopt the new directive before the end of 2026. The directive seeks to curb worker misclassification,...more

Pay Transparency vs Pay Privacy: How to Succeed in Both

Ius Laboris on 4/10/2025

The EU Pay Transparency Directive (’PTD’) introduces extensive disclosure obligations regarding salary information. At the same time, employers must ensure compliance with the applicable data protection regulations and...more

Latombe Case: First hearing for annulment of the EU-U.S. Data Privacy Framework

Hogan Lovells on 4/3/2025

On April 1st, 2025, the General Court of the European Union held its first hearing on the request initiated by member of French parliament Philippe Latombe for annulment of the EU-U.S. Data Privacy Framework (“DPF”) further...more

Right to Erasure in the Spotlight as EU Data Protection Board Launches 2025 Coordinated Action

Baker Botts L.L.P. on 3/31/2025

The European Data Protection Board (EDPB), the independent EU body responsible for ensuring the consistent application of the EU General Data Protection Regulation (GDPR) across all EU member states, has kicked off its...more

Coming Soon: Coordinated Pan-European Enforcement of the ‘Right to Erasure’

Ogletree, Deakins, Nash, Smoak & Stewart,... on 3/31/2025

The European Data Protection Board (EDPB) recently announced the launch of its 2025 Coordinated Enforcement Framework (CEF) action, which will focus on the right to erasure, also known as the “right to be forgotten,” or, in...more

1,816 Results

View per page

Page: of 73

European Union › Personal Data

"My best business intelligence, in one easy email…"