News & Analysis as of August 1, 2025

Data Breach

+ Follow

Follow this channel for updates and analysis on all aspects of the European Union's General Data Protection Regulation, a reform of EU's data protection rules that impacts... more +

Follow this channel for updates and analysis on all aspects of the European Union's General Data Protection Regulation, a reform of EU's data protection rules that impacts individuals throughout the Union and all businesses operating therein. less -

EU-wide Breach Notification Template on the Horizon

Alston & Bird on 7/29/2025

Following their recent meeting in Finland, the EU Data Protection Authorities acting through the European Data Protection Board (EDPB) announced their intention to release new tools and ran EU-wide data breach notification...more

Heavier Breach Notification Obligations for U.S. Companies Subject to the EU GDPR According to Proposed Regulatory Guidance from...

Alston & Bird on 10/20/2022

On October 18, 2022, the European Data Protection Board (“EDPB”) published a proposed updated version of its regulatory guidance on personal data breaches under the EU GDPR (the “Proposed Updated Guidance”). The Proposed...more

Data Breach Enforcement Is a Global Risk

BakerHostetler on 6/24/2021

The 2021 edition of BakerHostetler’s annual Data Security Incident Response Report highlights some regulatory enforcement trends we saw from the European Union (EU) data protection authorities (DPAs) during the past year. EU...more

New EDPB Draft Guidance Provides Practical Scenarios for Data Breach Notification Analysis Under the GDPR

BakerHostetler on 2/19/2021

In certain cases, the General Data Protection Regulation (GDPR) requires entities that experience a personal data breach to provide notice of the incident to relevant national supervisory authorities and the individuals whose...more

Companies Have Until March to Comment on EDPB Data Breach Notification Guidelines

Sheppard Mullin Richter & Hampton LLP on 2/1/2021

Many supervisory authorities across Europe have reported increasing numbers of data breach notifications since the introduction of GDPR. While most companies are now familiar with the 72-hour reporting obligation for...more

Breach Notification in the EU and U.S.: Practical Implications of 5 Key Distinctions

Alston & Bird on 12/4/2020

When it comes to data breach notification laws, differences between the patchwork of U.S. state laws and the EU’s General Data Protection Regulation can impact the focus of and approach to an investigation. Our Privacy & Data...more

Privacy and Data Security Alert | November 2019

Shook, Hardy & Bacon L.L.P. on 11/20/2019

EU Court Allows Class Action to Proceed, Sets Precedent for Future Data Breach Class Actions - A class action brought against Google will be allowed to move forward after the plaintiff’s appeal was permitted, allowing him to...more

A new model for obtaining data protection consents: unbundling the proposed amendments to China's Personal Information Security...

Hogan Lovells on 5/14/2019

On 1 February, 2019, the National Information Security Standardization Technical Committee issued an amended version of the GB/T 35372-2017 Information Technology – Personal Information Security Specification for public...more

Chapter 10: Obligations of controllers – Unlocking the EU General Data Protection Regulation

White & Case LLP on 4/16/2019

Why does this topic matter to organisations? Each time an organisation processes personal data, it will do so as either a controller or a processor. These roles bear different responsibilities. Therefore, it is critically...more

California and European Privacy FAQs: If a company is required to provide a privacy notice, how soon must it be provided?

BCLP on 3/13/2019

The California Consumer Privacy Act ("CCPA") was enacted in early 2018 as a political compromise to stave off a poorly drafted, and plaintiff’s friendly ballot initiative. Although the CCPA is scheduled to go into force in...more

New Zealand Privacy Bill Would Add Authorization and Data Breach Notification Requirements

Littler on 2/15/2019

As a proposed Privacy Bill works its way through the New Zealand Parliament, key changes aim to strengthen the protection of confidential and personal information....more

Entities That Comingle EU And U.S. Citizens’ Data Should Review Data Breach Notification Practices

Fox Rothschild LLP on 1/11/2019

If you are a U.S.-based entity that is subject to the EU Data Protection Regulation (GDPR), and you store personal data of EU residents and personally identifiable information of U.S. residents in a commingled database, you...more

The Digital Download – Alston & Bird’s Privacy & Data Security Newsletter – October 2018

Alston & Bird on 10/30/2018

Features - International Updates (Excluding the EU) - India’s Draft Data Protection Bill: Another GDPR Around the Corner? India recently introduced the Personal Data Protection Bill 2018. ...more

Digital health: Understanding the new responsibilities facing life sciences companies related to collecting and processing...

Hogan Lovells on 7/13/2018

In May 2018, the General Data Protection Regulation (GDPR) entered into effect in EU member states, replacing a longstanding and less rigorous data and e-privacy directive. ...more

The GDPR introduces new notification rules for personal data breaches: What you need to know

Hogan Lovells on 7/2/2018

With the General Data Protection Regulation (GDPR) now in force, the focus on privacy and data protection throughout the European Union (EU) is stronger than ever before. With this new law comes new obligations for companies...more

GDPR Is Here: Not Yet Compliant? What Employers Need to Consider

Fisher Phillips on 5/31/2018

After much anticipation, the General Data Protection Regulation (GDPR) finally went into effect on May 25, 2018. For employers, that means some enhanced employee rights, and the risk of significant penalties for...more

Key Steps to GDPR Compliance for U.S. Companies (Part 3)

Schwabe, Williamson & Wyatt PC on 5/25/2018

Although the GDPR comes into effect on May 25, 2018, the breadth of its reach will continue to develop long after its effective date. Domestic companies should be aware that the rules will likely change over time. While this...more

Canada Releases New Data Breach Regulations

Harris Beach Murtha PLLC on 4/26/2018

In a recent post, we discussed the Canadian Cabinet’s announcement that Canada’s new data breach regulations go into effect on November 1, 2018. Despite announcing the effective date, Canada had not yet finalized these...more

GDPR’s Most Frequently Asked Questions: Does A Company Need To Notify Regulators Every Time It Suffers A Data Breach?

BCLP on 4/25/2018

The European Union’s General Data Protection Regulation (“GDPR”) is arguably the most comprehensive – and complex – data privacy regulation in the world. As companies prepare for the GDPR to go into force on May 25, 2018,...more

100 Days Until GDPR … Are You Ready?

Vedder Price on 3/1/2018

What Is GDPR?- The EU General Data Protection Regulation (GDPR),—described as “the most important change in data privacy regulation in 20 years”—becomes enforceable by law on May 25, 2018. After four years of preparation...more

Recent Conference Highlights Cyber Risks and How to Protect Against the Same

Akin Gump Strauss Hauer & Feld LLP on 2/23/2018

On February 13-14, 2018, Advisen held a conference focused on exploring cyber risks and how companies can best move to address potential exposures. Below are key takeaways and trends discussed by the panelists....more

In Principle: 10 Things Authorised Firms Need to Know for 2018 – The World of Financial Regulation as the UK Prepares to Exit the...

Akin Gump Strauss Hauer & Feld LLP on 1/25/2018

There is much for authorised firms to consider in the year ahead. Firms have been through the intensive period of the enactment of the second Markets in Financial Instruments Directive (MiFID II), but must now step up their...more

Getting Ready for GDPR Compliance in the New Year

Vedder Price on 12/22/2017

As 2017 comes to a close and companies look to planning initiatives for 2018, there is one date that should be front and center for privacy professionals: May 25, 2018. That is the date that the EU’s General Data Protection...more

Article 29 Working Party Issues Guidance on Breach-Notification Obligations under GDPR

Ballard Spahr LLP on 10/27/2017

The Article 29 Working Party (WP29) recently issued guidelines regarding data controllers' notification obligations following security breaches involving the personal data of EU citizens....more

24 Results

View per page

Page: of 1

General Data Protection Regulation (GDPR) › Notification Requirements › Data Breach

"My best business intelligence, in one easy email…"