News & Analysis as of July 24, 2025

Compliance

+ Follow

The European Union is an economic and political partnership comprised of 27 nations within the Eurozone. The EU was established in 1948 to promote stability and cooperation among member states in the aftermath of WWII. The EU maintains a common currency as well as several intranational institutions, including the European Parliament and the European Commission. less -

ICO Annual Report Provides Insight Into Data Protection Risks for Businesses

Paul Hastings LLP on 7/22/2025

The UK Information Commissioner’s Office’s (the ICO’s) latest Annual Report summarises its accomplishments and priorities, including last year’s enforcement actions. Based on our review of the report, we see the ICO focusing,...more

Something Is Better Than Nothing: UK and EU GDPR Reform Finally Arrives

Skadden, Arps, Slate, Meagher & Flom LLP on 7/11/2025

In recent weeks, the EU and UK have both introduced changes to their respective versions of Europe’s landmark privacy legislation, the General Data Protection Regulation (GDPR). These reforms mark the first substantial...more

Operating in Flux: Doing Business Under Europe’s Intensifying Regulatory Environment

HaystackID on 6/27/2025

Editor’s Note: Europe’s regulatory landscape has undergone a fundamental transformation, extending far beyond GDPR’s foundational framework to encompass a complex ecosystem of interconnected laws governing digital platforms,...more

The European Health Data Space – What EU Health Care Providers and Data Holders Need To Know

Skadden, Arps, Slate, Meagher & Flom LLP on 6/26/2025

- On 26 March 2025, the European Health Data Space (EHDS) Regulation entered into force. The regulation establishes a comprehensive framework for health-data sharing and access in the EU, with the dual aim of supporting the...more

Is My U.S.-Based Company Subject to the GDPR? Clearing Up European Data Privacy Law Misinformation

Amundsen Davis LLC on 4/23/2025

If you are a compliance professional for a U.S.-based company, you have probably been told at some point that you have to worry about the General Data Protection Regulation (GDPR). Have you encountered one of these...more

EU Data Enforcement Sweep: Are GDPR-Covered Entities Complying Properly with Data Subjects’ Right of Erasure?

Jackson Lewis P.C. on 3/21/2025

The European Data Protection Board (EDPB) has launched its 2025 enforcement sweep targeting organizations’ compliance with data subjects’ right of erasure (right to delete or be forgotten), focusing particularly on how...more

Do App Permissions Satisfy Requirements for Valid Consent for the Purpose of GDPR?

Fox Rothschild LLP on 1/17/2025

App permissions do not satisfy the requirements for valid consent for the purpose of GDPR because they lack sufficient detail and granularity, according to the Commission Nationale de l’Informatique et des Libertés (CNIL)....more

EU Court Awards Damages for Breach of EU Data Transfer Rules

Wilson Sonsini Goodrich & Rosati on 1/10/2025

On January 8, 2025, the second highest court of the European Union (EU), the General Court of the Court of Justice of the EU (the Court), ordered (in Bindl v European Commission, Case T-354/22) the European Commission (EC) to...more

European Data Protection Board Releases Opinion on the Use of Personal Data with Artificial Intelligence

Baker Botts L.L.P. on 1/7/2025

On December 17, 2024, the European Data Protection Board ("EDPB" or Board) issued Opinion 28/2024, addressing data protection aspects related to the processing of personal data in the context of artificial intelligence ("AI")...more

Data and Cybersecurity: European Union Legislation and Proposals - Updated December 2024

BCLP on 12/6/2024

The pace of new EU law continues unabated, with IoT, cyber security and digital services being key areas of activity....more

International Data Transfers Remain Under EU and UK Regulatory Scrutiny

Ogletree, Deakins, Nash, Smoak & Stewart,... on 9/26/2024

Organisations that make international transfers of personal data have undergone significant challenges and changes over the last few years. With the invalidation of the Privacy Shield agreement in 2020 and the introduction of...more

Belgian Data Protection Authority Publishes Guidance on the Interplay between the GDPR and the AI Act

Alston & Bird on 9/26/2024

On 19 September 2024, the Belgian Data Protection Authority (DPA) issued new Guidance on the interplay between the recently adopted EU Regulation on Artificial Intelligence (the AI Act) and the General Data Protection...more

Personal Data Sharing: What Information About Recipients Do We Need to Provide to Individuals Under the GDPR?

Mayer Brown on 9/13/2024

Sharing personal data is necessary for most organisations, but it also entails certain data protection risks. Controllers who share personal data with others must, among other obligations, ensure that they comply with the...more

Limited-Risk AI - A Deep Dive Into Article 50 of the European Union’s AI Act

WilmerHale on 5/29/2024

This blog post focuses on the transparency requirements associated with certain limited-risk artificial intelligence (AI) systems under Article 50 of the European Union’s AI Act....more

General Data Protection Regulation Guidelines

EDRM - Electronic Discovery Reference Model on 4/9/2024

Parties that have possession, custody, or control of evidence potentially relevant to U.S. litigation or investigations are typically required to identify, collect, preserve, and produce such evidence (with limited...more

EU verschärft Regeln zur Vollstreckung der DSGVO

Latham & Watkins LLP on 1/12/2024

EU-Parlament soll im Februar 2024 über Neuregelung zur Sanktionierung von DSGVO-Verstößen entscheiden - Die geplante Neuregelung soll im Februar im EU-Parlament verabschiedet werden. Sie wäre sehr nachteilig, wenn ihr...more

To Boldly Go Places: EU's AI Act is Set to Become the Real Deal

Baker Donelson on 12/14/2023

On December 8, 2023, EU policymakers reached an agreement on the Artificial Intelligence Act (AI Act). As a standard-bearer for global digital and data governance, the EU has been setting regulatory benchmarks on emerging...more

EU-U.S. Data Privacy Framework vs. EU Standard Contractual Clauses for Transatlantic Transfers of Personal Data

Alston & Bird on 9/8/2023

The European Commission has approved the EU-U.S. Data Privacy Framework (DPF) for transferring data from the EU to the United States. Our Privacy, Cyber & Data Strategy Team discusses what companies should consider when...more

EU-US Data Privacy Framework Goes Live: What Are the Practical Implications?

Latham & Watkins LLP on 8/1/2023

The new framework provides an additional route for personal data transfers from the EEA to the US. On 10 July 2023, the European Commission (EC) took the final step to enable businesses to start relying on the new EU-US...more

Information Transferred from European Economic Area

Barnea Jaffa Lande & Co. on 5/15/2023

In light of the European Union Commission’s examination to renew the adequacy status granted to Israel in 2011, the Israeli Ministry of Justice has promulgated new privacy protection regulations, called “Provisions Regarding...more

Monetizing Sports Data and Protecting Athlete Privacy: Where is the Balance?

Ankura on 3/15/2023

The collection of personal data by organizations in the sports industry creates unique data privacy challenges. Generally, a business-to-consumer organization is focused on the personal data of its customers and separately...more

Is Privacy Shield 2.0 on the Horizon?

BCLP on 10/24/2022

On October 7, President Joe Biden signed an Executive Order (EO) on Enhancing Safeguards for United States Signals Intelligence Activities, which is intended to move forward next steps in the EU US Privacy Shield Framework...more

Europe: Amazon Slapped with Record-Breaking Privacy Fine

Barnea Jaffa Lande & Co. on 8/25/2021

E-commerce giant Amazon reported in its financial statements at the end of last month that the Luxembourg data protection authority had imposed on it a fine totaling EUR 746 million. The fine appears to have been laid on...more

European Commission Adopts Two New Sets of Standard Contractual Clauses: What Employers Need to Know

Ogletree, Deakins, Nash, Smoak & Stewart,... on 6/14/2021

On June 4, 2021, the European Commission adopted two new sets of standard contractual clauses (SCCs): one for data transfers from data controllers to data processors and one for data transfers from data exporters to data...more

CNIL Issues Provisional Recommendations for Remote Quality Control of Clinical Trials During the Health Crisis

McDermott Will & Emery on 5/5/2021

Given the challenges of conducting clinical trials during the COVID-19 pandemic, many countries — including France — have allowed for some use of remote quality controls. In response to guidelines issued recently by European...more

55 Results

View per page

Page: of 3

European Union › Personal Data › Compliance

"My best business intelligence, in one easy email…"