News & Analysis as of September 13, 2025

General Data Protection Regulation (GDPR) › Data Subjects Rights

+ Follow

Follow this channel for updates and analysis on all aspects of the European Union's General Data Protection Regulation, a reform of EU's data protection rules that impacts... more +

Follow this channel for updates and analysis on all aspects of the European Union's General Data Protection Regulation, a reform of EU's data protection rules that impacts individuals throughout the Union and all businesses operating therein. less -

DSAR Response Letter: How to Respond to a Subject Rights Request

Osano on 8/27/2025

If you’re not accustomed to handling data subject access requests (DSARs), then it’s understandable if you feel a bit nervous about responding. After all, there are all sorts of legal requirements involved and the potential...more

Analysing the CNIL’s Latest Recommendations for AI Systems

BCLP on 6/28/2024

Following the very recent adoption of the EU Regulation on AI (the AI Regulation) the CNIL (the French data regulator) has issued the second in its series of recommendations for the development of privacy-friendly AI models....more

Quebec Law No. 25: a Little-known Privacy Law With a Big Reach

BCLP on 1/23/2024

In late 2021, the Quebec legislature passed “The Privacy Legislation Modernization Act” or Law No. 25 (“Law 25”), which was designed to modernize and make significant changes to Quebec’s existing privacy framework....more

GDPR Compliance Checklist: 8 Steps You Need to Complete

Osano on 9/7/2023

GDPR compliance can be tricky. Even if you summon the willpower to read through the law’s text, it can be tough to know where to start. As an alternative to pouring through the GDPR’s legalese, one way to establish a...more

Cybersecurity Incidents: 10 Things a General Counsel Must Know About EU Cyber Incidents

Latham & Watkins LLP on 6/29/2023

Cybersecurity incidents pose legal challenges for in-house counsel, alongside their technical implications. This overview highlights key aspects that legal departments must know when reacting to data breaches. ...more

Court of Justice of the European Union Case on DSARs: Summary of Information Is Not Enough!

Littler on 5/30/2023

As many employers will be aware, data subject access requests (DSARs) can take up a significant amount of business resources and are a common tactic used by disgruntled employees. A recent decision from the Court of Justice...more

EU-U.S. Transfers: Privacy Shield replacement not adequate says European Parliament

BCLP on 5/19/2023

The road to the adoption of a lasting framework for EU-U.S data transfers has been anything but smooth. Much like its predecessor, Safe Harbor, the EU-U.S Privacy Shield met its end in 2020 when the Court of Justice of the...more

CJEU Sets High Bar for Responses to Data Subject Access Requests

Latham & Watkins LLP on 5/5/2023

Organisations must provide individuals with information on the specific recipients of their data upon request. The Court of Justice of the European Union (CJEU) has ruled that organisations must generally disclose the...more

Data Subject Access Requests – 5 Things Your Company Needs to Consider

Orrick, Herrington & Sutcliffe LLP on 4/24/2023

Both the EU and UK GDPR grant data subjects rights in relation to their personal data. Article 15 gives data subjects the right to access their personal data and increasingly, data subjects are exercising this right by...more

Employee Data Protection 101

Osano on 3/31/2023

For the most part, businesses gather employee data without too much thought. Sure, some data is obviously private, like employee social security numbers, but other than that, businesses can pretty much do what they want with...more

AG CJEU addresses data subject rights and automated decision-making by credit rating agencies

A&O Shearman on 3/23/2023

The Advocate General (AG) Pikamäe of the Court of Justice of the European Union (CJEU) issued his opinions in three cases concerning the credit rating agency SCHUFA Holding AG (SCHUFA) on 16 March 2023....more

Data Protection - Regulatory action and recent case law from the EU and UK courts: the emerging direction for GDPR regulation

A&O Shearman on 3/9/2023

We’re now approaching the five-year anniversary of the General Data Protection Regulation (GDPR) taking full effect. In the run-up to 2018 and the period afterwards, there were many predictions about the likely direction of...more

Who Has My Data? EU Court Rules GDPR Requires Disclosure of Data Recipient Identities, Not Just Categories, in Response to Data...

Bradley Arant Boult Cummings LLP on 2/7/2023

Under the European Union’s General Data Protection Regulation (GDPR), individual data subjects have the right to request that the data controller share information regarding the data subject’s personal information...more

Advocate General: No Compensation for Mere Upset Caused by GDPR Infringement

Latham & Watkins LLP on 11/3/2022

The Advocate General opined that data subjects must prove that they suffered damage from a GDPR breach in order to claim compensation. Article 82 of the General Data Protection Regulation (GDPR) states that any person...more

New EU guidance on GDPR right of access (open for public consultation)

Hogan Lovells on 2/1/2022

The “right of access” recognized by art.15 GDPR is one of the most fervently exercised rights by individuals. Nowadays, where companies tend to amass considerable amounts of information and carry out data processing...more

EDPB Issues Draft Guidelines on Data Subject Access Rights

Alston & Bird on 1/31/2022

On January 28, 2022, the European Data Protection Board (“EDPB”) published draft regulatory guidelines (“draft guidance”) on the right of data subjects to have access to their personal data under the EU General Data...more

NGE On Demand: Personal Data Protection Travels: The New Standard Contractual Clause with John Koenigsknecht and David Wheeler

Neal, Gerber & Eisenberg LLP on 7/15/2021

NGE Corporate & Securities partner John Koenigsknecht recently interviewed Data Privacy & Information Governance partner David Wheeler about the new standard contractual clauses and the complex task of assessing and...more

90 Results

View per page

Page: of 4

General Data Protection Regulation (GDPR) › Data Subjects Rights

DSAR Response Letter: How to Respond to a Subject Rights Request

Analysing the CNIL’s Latest Recommendations for AI Systems

Quebec Law No. 25: a Little-known Privacy Law With a Big Reach

GDPR Compliance Checklist: 8 Steps You Need to Complete

Cybersecurity Incidents: 10 Things a General Counsel Must Know About EU Cyber Incidents

Court of Justice of the European Union Case on DSARs: Summary of Information Is Not Enough!

EU-U.S. Transfers: Privacy Shield replacement not adequate says European Parliament

CJEU Sets High Bar for Responses to Data Subject Access Requests

Data Subject Access Requests – 5 Things Your Company Needs to Consider

Employee Data Protection 101

AG CJEU addresses data subject rights and automated decision-making by credit rating agencies

Data Protection - Regulatory action and recent case law from the EU and UK courts: the emerging direction for GDPR regulation

Who Has My Data? EU Court Rules GDPR Requires Disclosure of Data Recipient Identities, Not Just Categories, in Response to Data...

Advocate General: No Compensation for Mere Upset Caused by GDPR Infringement

New EU guidance on GDPR right of access (open for public consultation)

EDPB Issues Draft Guidelines on Data Subject Access Rights

NGE On Demand: Personal Data Protection Travels: The New Standard Contractual Clause with John Koenigsknecht and David Wheeler

Colorado’s new privacy law: How it stacks up against other US privacy laws

[Webinar] Datenintensive Technologien und Anwendungen rechtskonform gestalten - March 25th, 9:30 am - 3:00 pm CET

Global Privacy Regulations: Hot Spots to Watch in 2021

Trend zu Klagen auf immateriellen Schadensersatz wegen DSGVO-Verstößen?

New DIFC Data Protection Law in Force - What You Need to Know

GDPR and the Uniform Foreign Country Money Judgments Recognition Act

Compliance Perspectives: The Privacy and Data Security Track at the 2020 Compliance & Ethics Institute

Dutch DPA Issues Record Fine for Violating GDPR Data Subject Rights

General Data Protection Regulation (GDPR) › Data Subjects Rights

"My best business intelligence, in one easy email…"