News & Analysis as of September 13, 2025

General Data Protection Regulation (GDPR) › Information Requests

+ Follow

Follow this channel for updates and analysis on all aspects of the European Union's General Data Protection Regulation, a reform of EU's data protection rules that impacts... more +

Follow this channel for updates and analysis on all aspects of the European Union's General Data Protection Regulation, a reform of EU's data protection rules that impacts individuals throughout the Union and all businesses operating therein. less -

Tax Treaty Allows Discovery of Phone Records

White & Case LLP on 9/12/2025

A federal district court recently upheld administrative summonses for phone records and personal data based upon a request made under a tax treaty. See Tirelli v. United States, No. 25-cv-04105-JSC (N.D. Cal. Aug. 28. 2025)...more

CJEU Sets High Bar for Responses to Data Subject Access Requests

Latham & Watkins LLP on 5/5/2023

Organisations must provide individuals with information on the specific recipients of their data upon request. The Court of Justice of the European Union (CJEU) has ruled that organisations must generally disclose the...more

Employee Data Protection 101

Osano on 3/31/2023

For the most part, businesses gather employee data without too much thought. Sure, some data is obviously private, like employee social security numbers, but other than that, businesses can pretty much do what they want with...more

AG CJEU addresses data subject rights and automated decision-making by credit rating agencies

A&O Shearman on 3/23/2023

The Advocate General (AG) Pikamäe of the Court of Justice of the European Union (CJEU) issued his opinions in three cases concerning the credit rating agency SCHUFA Holding AG (SCHUFA) on 16 March 2023....more

Lessons Learned from Implementing Privacy Rights Request Processes – Part 1

Ankura on 9/2/2021

Over the last three years, several data privacy regulations have been adopted around the world which include requirements related to the collection, processing and use of personal information. The list includes the General...more

CCPA Privacy FAQs: Is a company required to respond to a data subject access request electronically?

BCLP on 11/15/2019

Sometimes. The CCPA states that a business should disclose any information that it is required to disclose in response to an access request “in writing” and “delivered through the consumer’s account with the business.” The...more

GDPR’s Most Frequently Asked Questions: Does a company have to respond to an access request that it receives from a third party...

BCLP on 6/20/2018

The European Union’s General Data Protection Regulation (“GDPR”) is arguably the most comprehensive – and complex – data privacy regulation in the world. While the GDPR went into force on May 25, 2018, there continues to be a...more

7 Results

View per page

Page: of 1