News & Analysis as of

European Union › Personal Data

The European Union is an economic and political partnership comprised of 27 nations within the Eurozone. The EU was established in 1948 to promote stability and cooperation among member states in the aftermath of... more +
The European Union is an economic and political partnership comprised of 27 nations within the Eurozone. The EU was established in 1948 to promote stability and cooperation among member states in the aftermath of WWII. The EU maintains a common currency as well as several intranational institutions, including the European Parliament and the European Commission. less -
McDermott Will & Schulte

Major ECJ decision confirms when data may be anonymous in the hands of third parties

McDermott Will & Schulte on

On 4 September, the ECJ handed down a major and eagerly awaited decision on the scope of personal data, accepting the point that pseudonymised data may be anonymised in the hands of a third party. The ECJ’s approach is...more

A&O Shearman

EU-U.S. Data Privacy Framework: Navigating the Legal Landscape After the General Court’s Verdict

A&O Shearman on

On September 3, the General Court of the European Union published its much-anticipated judgment in Latombe v. Commission (Case T-553/23), rejecting the challenge to the European Commission’s 2023 adequacy decision for...more

Hogan Lovells

Transatlantic data transfers: EU General Court upholds Data Privacy Framework

Hogan Lovells on

On 3 September 2025, the General Court (GC) of the European Union's Court of Justice dismissed claims in Latombe v. Commission to annul the EU-U.S. Data Privacy Framework (DPF). ...more

Wilson Sonsini Goodrich & Rosati

EU Court Upholds the Validity of the EU-U.S. Data Privacy Framework

Wilson Sonsini Goodrich & Rosati on

On September 3, 2025, the EU General Court (the General Court) (the second-highest court in the European Union (EU)) upheld the validity of EU-U.S. Data Privacy Framework (DPF) in Philippe Latombe v European Commission...more

Ogletree, Deakins, Nash, Smoak & Stewart,...

European Court of Justice Ruling on Works Agreements: Reinforcing GDPR Compliance in the Workplace

Ogletree, Deakins, Nash, Smoak & Stewart,... on

The European Court of Justice (ECJ) recently delivered a decision that significantly impacts how employers and works councils across the European Union approach the processing of employee data. The ruling clarifies that works...more

DLA Piper

Germany: Further Judgment on Non-Material Damages for Loss of Control over Personal Data

DLA Piper on

In its judgment of May 13, 2025 (case number VI ZR 186/22), the German Federal Court of Justice (Bundesgerichtshof – “BGH”) continued its case law on the compensability of non-material damages under Article 82 GDPR, in...more

WilmerHale

AI and the EU Digital Markets Act

WilmerHale on

The European Union’s Digital Markets Act’s (DMA) stated aim is to complement European Union competition rules to ensure contestable and fair markets in the digital sector by imposing specific obligations on “gatekeepers”. ...more

DLA Piper

ITALY: Personal Data Anonymization and the Risk of the DPO Being an Executor

DLA Piper on

The Italian Data Protection Authority’s recent decision provided guidance on the true meaning of personal data anonymization and the crucial distinction between the DPO as a monitor – not an executor. In a world driven by AI...more

WilmerHale

AI and GDPR: A Road Map to Compliance by Design - Episode 3: The Design Phase

WilmerHale on

The rise of artificial intelligence (AI) and its widespread availability offers significant growth opportunities for businesses. However, it necessitates a robust governance framework to ensure compliance with regulatory...more

Katten Muchin Rosenman LLP

EU Initiates Renewal of UK Adequacy Decision Following the UK's Adoption of the Data (Use and Access) Act 2025

Katten Muchin Rosenman LLP on

EU Launches UK Adequacy Decision Renewal Process - On 22 July 2025, the European Commission announced that it had launched the process to renew the adequacy decision for the United Kingdom (UK) and confirmed that the UK’s...more

Alston & Bird

EU-wide Breach Notification Template on the Horizon

Alston & Bird on

Following their recent meeting in Finland, the EU Data Protection Authorities acting through the European Data Protection Board (EDPB) announced their intention to release new tools and ran EU-wide data breach notification...more

WilmerHale

AI and GDPR: A Road Map to Compliance by Design - Episode 2: The Design Phase

WilmerHale on

The rise of artificial intelligence (AI) and its widespread availability offers significant growth opportunities for businesses. However, it necessitates a robust governance framework to ensure compliance with regulatory...more

WilmerHale

AI and GDPR: A Road Map to Compliance by Design - Episode 1: The Planning Phase

WilmerHale on

The rise of artificial intelligence (AI) and its widespread availability offers significant growth opportunities for businesses. However, it necessitates a robust governance framework to ensure compliance with regulatory...more

Latham & Watkins LLP

UK Adequacy Holds Firm Under New Data (Use and Access) Act 2025

Latham & Watkins LLP on

The DUAA introduces several reforms to UK data protection law, but their implications are relatively limited in practice. The Data (Use and Access) Act 2025 (the DUAA) was enacted on 19 June 2025 and amends rather than...more

Fox Rothschild LLP

Web Filtering: What Employers Need to Know

Fox Rothschild LLP on

Employers are increasingly monitoring and filtering the web browsing habits of employees. The Commission Nationale de l’Informatique et des Libertés (CNIL) recently released new guidance (for public comment) on how...more

Baker Botts L.L.P.

CNIL Published Recommendations on Application of GDPR to Artificial Intelligence

Baker Botts L.L.P. on

France's Data Protection Authority (the “Commission Nationale de l'Informatique et des Libertés” or “CNIL”) has issued comprehensive recommendations intended to assist businesses that are develop artificial intelligence...more

Fisher Phillips

Workday Ruling: How Europe’s Top Courts Raised the Bar for Employee Data Protection

Fisher Phillips on

Cloud-based HR systems have become standard for multinational businesses, driving efficiency but also increasing compliance and privacy risks. Indeed, a recent Workday case, which originated in Germany, has clarified the...more

Paul Hastings LLP

ICO Annual Report Provides Insight Into Data Protection Risks for Businesses

Paul Hastings LLP on

The UK Information Commissioner’s Office’s (the ICO’s) latest Annual Report summarises its accomplishments and priorities, including last year’s enforcement actions. Based on our review of the report, we see the ICO focusing,...more

Goodwin

The Data Shift: UK Sets a New Course With 2025 Data (Use and Access) Act

Goodwin on

The Data (Use and Access) Bill passed both Houses of UK Parliament and received Royal Assent on 19 June 2025, now becoming the Data (Use and Access) Act 2025 (“DUA Act”). This is the final iteration of the Data Protection and...more

Hogan Lovells

EDPB clarifies assessment for disclosing EU data to foreign authorities

Hogan Lovells on

On 4 June 2025, the European Data Protection Board published guidelines clarifying how EU-based companies should assess requests from foreign authorities for access to EU personal data. The EDPB emphasizes that such requests...more

Skadden, Arps, Slate, Meagher & Flom LLP

Something Is Better Than Nothing: UK and EU GDPR Reform Finally Arrives

Skadden, Arps, Slate, Meagher & Flom LLP on

In recent weeks, the EU and UK have both introduced changes to their respective versions of Europe’s landmark privacy legislation, the General Data Protection Regulation (GDPR). These reforms mark the first substantial...more

K&L Gates LLP

New EDPB Guidelines: Processing Personal Data on Blockchain

K&L Gates LLP on

The European Data Protection Board recently published its draft Guidelines 02/2025, which remain open to consultation until 09 June 2025. Stakeholders in the blockchain industry are encouraged to submit any observations...more

HaystackID

Operating in Flux: Doing Business Under Europe’s Intensifying Regulatory Environment

HaystackID on

Editor’s Note: Europe’s regulatory landscape has undergone a fundamental transformation, extending far beyond GDPR’s foundational framework to encompass a complex ecosystem of interconnected laws governing digital platforms,...more

Skadden, Arps, Slate, Meagher & Flom LLP

The European Health Data Space – What EU Health Care Providers and Data Holders Need To Know

Skadden, Arps, Slate, Meagher & Flom LLP on

- On 26 March 2025, the European Health Data Space (EHDS) Regulation entered into force. The regulation establishes a comprehensive framework for health-data sharing and access in the EU, with the dual aim of supporting the...more

Seyfarth Shaw LLP

The UK’s New Amendments to the UK GDPR Become Law and Get a Nod from the EU. What happens now?

Seyfarth Shaw LLP on

The UK’s Data (Use and Access) Act received Royal Assent last Thursday, June 19th, bringing into law some significant changes to the country’s post Brexit data protection framework, among an array of other, related rules (on...more

1,834 Results
 / 
View per page
Page: of 74
Next »

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
Sign up Log in
*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
- hide
- hide