News & Analysis as of September 13, 2025

Data Protection

+ Follow

Follow this channel for updates and analysis on all aspects of the European Union's General Data Protection Regulation, a reform of EU's data protection rules that impacts... more +

Follow this channel for updates and analysis on all aspects of the European Union's General Data Protection Regulation, a reform of EU's data protection rules that impacts individuals throughout the Union and all businesses operating therein. less -

DSAR Response Letter: How to Respond to a Subject Rights Request

Osano on 8/27/2025

If you’re not accustomed to handling data subject access requests (DSARs), then it’s understandable if you feel a bit nervous about responding. After all, there are all sorts of legal requirements involved and the potential...more

GDPR Compliance Checklist: 8 Steps You Need to Complete

Osano on 9/7/2023

GDPR compliance can be tricky. Even if you summon the willpower to read through the law’s text, it can be tough to know where to start. As an alternative to pouring through the GDPR’s legalese, one way to establish a...more

Employee Data Protection 101

Osano on 3/31/2023

For the most part, businesses gather employee data without too much thought. Sure, some data is obviously private, like employee social security numbers, but other than that, businesses can pretty much do what they want with...more

Data Protection - Regulatory action and recent case law from the EU and UK courts: the emerging direction for GDPR regulation

A&O Shearman on 3/9/2023

We’re now approaching the five-year anniversary of the General Data Protection Regulation (GDPR) taking full effect. In the run-up to 2018 and the period afterwards, there were many predictions about the likely direction of...more

New EU guidance on GDPR right of access (open for public consultation)

Hogan Lovells on 2/1/2022

The “right of access” recognized by art.15 GDPR is one of the most fervently exercised rights by individuals. Nowadays, where companies tend to amass considerable amounts of information and carry out data processing...more

EDPB Issues Draft Guidelines on Data Subject Access Rights

Alston & Bird on 1/31/2022

On January 28, 2022, the European Data Protection Board (“EDPB”) published draft regulatory guidelines (“draft guidance”) on the right of data subjects to have access to their personal data under the EU General Data...more

NGE On Demand: Personal Data Protection Travels: The New Standard Contractual Clause with John Koenigsknecht and David Wheeler

Neal, Gerber & Eisenberg LLP on 7/15/2021

NGE Corporate & Securities partner John Koenigsknecht recently interviewed Data Privacy & Information Governance partner David Wheeler about the new standard contractual clauses and the complex task of assessing and...more

Colorado’s new privacy law: How it stacks up against other US privacy laws

Eversheds Sutherland (US) LLP on 7/15/2021

There are many similarities between the Colorado Privacy Act (ColoPA), the California Consumer Privacy Act (CCPA), the California Privacy Rights Act (CPRA), the Virginia Consumer Data privacy Act (VCDPA), and Europe’s GDPR,...more

[Webinar] Datenintensive Technologien und Anwendungen rechtskonform gestalten - March 25th, 9:30 am - 3:00 pm CET

Spirit Legal on 3/4/2021

Gerade für Juristen ist Begeisterung für und ein Verständnis von Branchen, Geschäftsmodellen und Technologien – gerade vor dem Hintergrund des Datenschutzrechts und des Gewerblichen Rechtsschutzes – unerlässlich und...more

Global Privacy Regulations: Hot Spots to Watch in 2021

NAVEX on 1/28/2021

When it comes to data privacy law, change is the only constant. The global pandemic unleashed a new set of risks related to data privacy that companies will have to confront in 2021. But despite the COVID chaos, data privacy...more

New DIFC Data Protection Law in Force - What You Need to Know

Akin Gump Strauss Hauer & Feld LLP on 10/2/2020

On October 1, 2020, the three-month grace period for businesses to comply with the Dubai International Financial Centre (DIFC) Data Protection Law (DIFC Law No. 5 of 2020) (“DPL 2020”) came to an end. Regulating the...more

Compliance Perspectives: The Privacy and Data Security Track at the 2020 Compliance & Ethics Institute

Society of Corporate Compliance and Ethics... on 9/3/2020

Staying on top of what’s new in data privacy is tough. As Robert Bond, Partner and Notary Public at the UK-based law firm Bristows explains, over 100 countries have drafted or implemented new data privacy laws in 2019. To...more

DSAR Best Practices and Workflows an Organization Should Follow

Association of Certified E-Discovery... on 6/23/2020

In my latest post, I outlined the process involved in the actual response to DSAR requests. In my last article of this series, I will discuss the best practices and workflows that your organization should follow when...more

DSARs 101: What to Expect When Doing Business with EU Customers

Association of Certified E-Discovery... on 6/4/2020

For any organization that deals with privacy issues in the European Union and other privacy-centric jurisdictions like the United Kingdom, an effective information governance program is a must. A program that includes a...more

Revisions to the EDPB Guidelines on Consent: Cookie Walls and Scrolling Through

Akin Gump Strauss Hauer & Feld LLP on 5/22/2020

On May 4, 2020, the European Data Protection Board (EDPB) adopted two important revisions to its 33-page Guidelines on Consent (Guidelines) under the General Data Protection Regulation (GDPR). The Guidelines are highly...more

Data Privacy Is Not a Law, It’s a Lifestyle

NAVEX on 2/10/2020

The words “hodgepodge” and “patchwork” are overused in the world of risk and compliance, but they’re certainly appropriate for describing the myriad data privacy regulations popping up around the world. In 2018, the world...more

Regulator Raises Concerns Over Alternative Data

Latham & Watkins LLP on 1/31/2020

The FCA is considering whether alternative data could introduce new risks to market integrity. The FCA’s recently published Insight article explores how alternative data might give rise to market abuse risks. The article...more

European Data Protection Supervisor Issues Opinion on Conducting Research Involving European Personal Data

McDermott Will & Schulte on 1/24/2020

The European Data Protection Supervisor, the independent European Union authority responsible for data protection regulatory oversight, issued a preliminary opinion on data protection and scientific research. The Opinion...more