News & Analysis as of August 14, 2025

Corporate Counsel

+ Follow

Follow this channel for updates and analysis on all aspects of the European Union's General Data Protection Regulation, a reform of EU's data protection rules that impacts... more +

Follow this channel for updates and analysis on all aspects of the European Union's General Data Protection Regulation, a reform of EU's data protection rules that impacts individuals throughout the Union and all businesses operating therein. less -

How to Explain Automated Decisions: Recent CJEU Decision and CPPA Rulemaking Offer Insight into ADM Explainability

Clark Hill PLC on 3/27/2025

Automated decision-making, or ADM, is used for a wide range of use cases that impact individuals — from processing insurance claims and credit scoring, to ranking job candidates and offering personalized pricing or targeted...more

Federal Trade Commission Hashes Out Aggressive Interpretation of Data Anonymization: What You Need to Know

Ogletree, Deakins, Nash, Smoak & Stewart,... on 8/19/2024

The Federal Trade Commission (FTC) has a long-standing habit of creating legal obligations through blog posts. Recent communications from the FTC by way of its Office of Technology Blog evidence an aggressive expectation...more

EU’s Highest Court Expands EU GDPR Restrictions on Automated Decision-Making, Profiling, and AI

Morgan Lewis on 2/23/2024

A recent decision by the Court of Justice of the European Union will extend the EU General Data Protection Regulation’s automated decision-making restrictions to many present and future use cases of such technologies. While...more

EU Top Court Sheds Light on Untested Crossroads Between Competition and Privacy Law

McDermott Will & Schulte on 7/12/2023

On July 4, 2023, the Court of Justice of the European Union (CJEU) issued a ruling in the case involving Meta Platforms Inc., Meta Platforms Ireland, and Facebook Deutschland (Meta). The judgement explores the intersection of...more

EU CJEU confirms broad right of access to personal data under GDPR but protects employee privacy

A&O Shearman on 6/29/2023

The Court of Justice of the European Union (CJEU) published its decision in the case of J.M. v Pankki S (Case C‑579/21) on 22 June 2023....more

CJEU Clarifies the Right to Compensation for GDPR Infringements Causing Non-Material Damage

Jones Day on 5/31/2023

In Short - The Situation: There has been uncertainty over the circumstances in which data subjects can claim compensation for "mere" infringement of their rights without specific evidence of harm. On May 4, 2023, the Court...more

CJEU clarifies key aspects of the GDPR: an overview of recent cases

A&O Shearman on 5/15/2023

The Court of Justice of the European Union (CJEU) issued on 4 May 2023 three decisions in cases concerning interpretation of key aspects of the GDPR. It also published three opinions of the Advocate General (AG). Below is a...more

European Court of Justice Clarifies Rules on Damages Compensation for GDPR Breaches

Cooley LLP on 5/8/2023

On 4 May 2023, the Court of Justice of the European Union (CJEU) delivered its decision in the Österreichische Post case (Case C-300/21), in essence deciding that a mere infringement of the General Data Protection Regulation...more

CJEU Finds That Companies Must Provide Individuals with the Identity of Data Recipients When Responding to Data Access Requests

Wilson Sonsini Goodrich & Rosati on 2/2/2023

On January 12, 2023, the Court of Justice of the European Union (CJEU) ruled that the data subject’s right of access to personal data requires controllers to provide the data subject with the identity of the companies that...more

EU top court rules that controllers must disclose actual identity of data recipients in response to data subject access request

A&O Shearman on 1/18/2023

The Court of Justice of the European Union (CJEU) delivered its judgment in Case C-154/21 Österreichische Post (the Österreichische Post case) on 12 January 2023. The case relates to the interpretation of Art. 15(1)(c) GDPR,...more

CJEU AG Sets High Bar for Responses to Data Subject Access Requests

Latham & Watkins LLP on 6/23/2022

The Advocate General argues that organisations should provide individuals with information on the specific recipients of their personal data. Advocate General Giovanni Pitruzzella (AG) of the Court of Justice of the...more

Patchworking Data Protection Regimes: UK Adopts New Data Transfer Mechanisms Post-Brexit and Schrems II

Vinson & Elkins LLP on 4/7/2022

Two new United Kingdom (“UK”) data transfer mechanisms, the International Data Transfer Agreement (“IDTA”) and the International Data Transfer Addendum (“UK Addendum”) to the European Union’s (“EU”) new standard contractual...more

The U.S. and EU Announce an “Agreement in Principle” to Replace the EU-U.S. Privacy Shield Framework: What Employers Need to Know

Ogletree, Deakins, Nash, Smoak & Stewart,... on 4/1/2022

On March 25, 2022, the European Union (EU) announced that the United States and the EU had reached an agreement in principle to replace the EU-U.S Privacy Shield framework, which the European Court of Justice (CJEU) struck...more

The Austrian Data Protection Authority Ground-breaking Google Analytics Decision: Analysis and Key Takeaways

Orrick, Herrington & Sutcliffe LLP on 2/3/2022

The Austrian data protection authority (Österreichische Datenschutzbehörde; Austrian DPA) recently ruled that the use of Google Analytics violated Chapter V (transfers of personal data to third parties) of the EU General Data...more

6 Key Things to Know about the new EDPB Guidance on International Data Transfers

Orrick, Herrington & Sutcliffe LLP on 11/23/2021

On November 19, 2021, the European Data Protection Board (“EDPB”) issued draft guidance on the interplay between Article 3 of the General Data Protection Regulation (“GDPR”) and the provisions on international transfers...more

New Standard Contractual Clauses for Cross-Border Transfer of EU Personal Data Released

Blank Rome LLP on 6/9/2021

The European Commission has published updated versions of the standard contractual clauses for international transfers of personal data from the European Union (“EU”). These new standard contractual clauses take into account...more

Keeping Transborder Data Flowing Post-Schrems II: EU Adopts Revised Standard Contractual Clauses

Vinson & Elkins LLP on 6/7/2021

On June 4, 2021, the European Commission announced the definitive adoption and publication of revamped Standard Contractual Clauses (“SCCs”) for the transfer of personal data to third countries pursuant to the EU General Data...more

The Schrems Saga Continues: EU Data Protection Authorities May Be Ready To Strike Down Yet Another EU-U.S. Data Transfer Mechanism

Vinson & Elkins LLP on 5/20/2021

Pathways for U.S. companies to transfer personal data out of the European Union have been repeatedly blocked by EU authorities concerned by what they perceive as gaps in data protection under U.S. laws. Schrems I invalidated...more

40 Results

View per page

Page: of 2

General Data Protection Regulation (GDPR) › Court of Justice of the European Union (CJEU) › Corporate Counsel

How to Explain Automated Decisions: Recent CJEU Decision and CPPA Rulemaking Offer Insight into ADM Explainability

Federal Trade Commission Hashes Out Aggressive Interpretation of Data Anonymization: What You Need to Know

EU’s Highest Court Expands EU GDPR Restrictions on Automated Decision-Making, Profiling, and AI

EU Top Court Sheds Light on Untested Crossroads Between Competition and Privacy Law

EU CJEU confirms broad right of access to personal data under GDPR but protects employee privacy

CJEU Clarifies the Right to Compensation for GDPR Infringements Causing Non-Material Damage

CJEU clarifies key aspects of the GDPR: an overview of recent cases

European Court of Justice Clarifies Rules on Damages Compensation for GDPR Breaches

CJEU Finds That Companies Must Provide Individuals with the Identity of Data Recipients When Responding to Data Access Requests

EU top court rules that controllers must disclose actual identity of data recipients in response to data subject access request

CJEU AG Sets High Bar for Responses to Data Subject Access Requests

Patchworking Data Protection Regimes: UK Adopts New Data Transfer Mechanisms Post-Brexit and Schrems II

The U.S. and EU Announce an “Agreement in Principle” to Replace the EU-U.S. Privacy Shield Framework: What Employers Need to Know

The Austrian Data Protection Authority Ground-breaking Google Analytics Decision: Analysis and Key Takeaways

6 Key Things to Know about the new EDPB Guidance on International Data Transfers

New Standard Contractual Clauses for Cross-Border Transfer of EU Personal Data Released

Keeping Transborder Data Flowing Post-Schrems II: EU Adopts Revised Standard Contractual Clauses

The Schrems Saga Continues: EU Data Protection Authorities May Be Ready To Strike Down Yet Another EU-U.S. Data Transfer Mechanism

French Data Protection Authority Rules on Transfers of Health Data

Further Tension Between National Security and Protecting Privacy: Latest EU Judgments

UK Privacy Adequacy In Danger? Mass Surveillance Limited By The CJEU

European Data Protection Board Forms Two New Taskforces to Address Schrems II Aftermath

Schrems II Could Disrupt US Courts’ Common Ground on eDiscovery and Data Transfers from Europe - THE EDATA GUIDE TO GDPR

Privacy & Cybersecurity Update - July 2020

Schrems II and EU-U.S. Personal Information Transfers: Where Are We, and What’s Next?

General Data Protection Regulation (GDPR) › Court of Justice of the European Union (CJEU) › Corporate Counsel

"My best business intelligence, in one easy email…"