News & Analysis as of July 31, 2025

Personal Data

+ Follow

Follow this channel for updates and analysis on all aspects of the European Union's General Data Protection Regulation, a reform of EU's data protection rules that impacts... more +

Follow this channel for updates and analysis on all aspects of the European Union's General Data Protection Regulation, a reform of EU's data protection rules that impacts individuals throughout the Union and all businesses operating therein. less -

EU-wide Breach Notification Template on the Horizon

Alston & Bird on 7/29/2025

Following their recent meeting in Finland, the EU Data Protection Authorities acting through the European Data Protection Board (EDPB) announced their intention to release new tools and ran EU-wide data breach notification...more

Heavier Breach Notification Obligations for U.S. Companies Subject to the EU GDPR According to Proposed Regulatory Guidance from...

Alston & Bird on 10/20/2022

On October 18, 2022, the European Data Protection Board (“EDPB”) published a proposed updated version of its regulatory guidance on personal data breaches under the EU GDPR (the “Proposed Updated Guidance”). The Proposed...more

New EDPB Draft Guidance Provides Practical Scenarios for Data Breach Notification Analysis Under the GDPR

BakerHostetler on 2/19/2021

In certain cases, the General Data Protection Regulation (GDPR) requires entities that experience a personal data breach to provide notice of the incident to relevant national supervisory authorities and the individuals whose...more

Breach Notification in the EU and U.S.: Practical Implications of 5 Key Distinctions

Alston & Bird on 12/4/2020

When it comes to data breach notification laws, differences between the patchwork of U.S. state laws and the EU’s General Data Protection Regulation can impact the focus of and approach to an investigation. Our Privacy & Data...more

Privacy and Data Security Alert | November 2019

Shook, Hardy & Bacon L.L.P. on 11/20/2019

EU Court Allows Class Action to Proceed, Sets Precedent for Future Data Breach Class Actions - A class action brought against Google will be allowed to move forward after the plaintiff’s appeal was permitted, allowing him to...more

Stricter Data Privacy and Cybersecurity Laws May Be Coming Soon to New York: Updates on the SHIELD Act and the New York Privacy...

Herbert Smith Freehills Kramer on 7/18/2019

New York is gearing up to enact some of the toughest cybersecurity, privacy and data protection laws in the country. Modeled on the European Union’s General Data Protection Regulation (GDPR) and the California Consumer...more

A new model for obtaining data protection consents: unbundling the proposed amendments to China's Personal Information Security...

Hogan Lovells on 5/14/2019

On 1 February, 2019, the National Information Security Standardization Technical Committee issued an amended version of the GB/T 35372-2017 Information Technology – Personal Information Security Specification for public...more

Chapter 10: Obligations of controllers – Unlocking the EU General Data Protection Regulation

White & Case LLP on 4/16/2019

Why does this topic matter to organisations? Each time an organisation processes personal data, it will do so as either a controller or a processor. These roles bear different responsibilities. Therefore, it is critically...more

California and European Privacy FAQs: If a company is required to provide a privacy notice, how soon must it be provided?

BCLP on 3/13/2019

The California Consumer Privacy Act ("CCPA") was enacted in early 2018 as a political compromise to stave off a poorly drafted, and plaintiff’s friendly ballot initiative. Although the CCPA is scheduled to go into force in...more

New Zealand Privacy Bill Would Add Authorization and Data Breach Notification Requirements

Littler on 2/15/2019

As a proposed Privacy Bill works its way through the New Zealand Parliament, key changes aim to strengthen the protection of confidential and personal information....more

Entities That Comingle EU And U.S. Citizens’ Data Should Review Data Breach Notification Practices

Fox Rothschild LLP on 1/11/2019

If you are a U.S.-based entity that is subject to the EU Data Protection Regulation (GDPR), and you store personal data of EU residents and personally identifiable information of U.S. residents in a commingled database, you...more

Digital health: Understanding the new responsibilities facing life sciences companies related to collecting and processing...

Hogan Lovells on 7/13/2018

In May 2018, the General Data Protection Regulation (GDPR) entered into effect in EU member states, replacing a longstanding and less rigorous data and e-privacy directive. ...more

The GDPR introduces new notification rules for personal data breaches: What you need to know

Hogan Lovells on 7/2/2018

With the General Data Protection Regulation (GDPR) now in force, the focus on privacy and data protection throughout the European Union (EU) is stronger than ever before. With this new law comes new obligations for companies...more

GDPR Is Here: Not Yet Compliant? What Employers Need to Consider

Fisher Phillips on 5/31/2018

After much anticipation, the General Data Protection Regulation (GDPR) finally went into effect on May 25, 2018. For employers, that means some enhanced employee rights, and the risk of significant penalties for...more

Key Steps to GDPR Compliance for U.S. Companies (Part 3)

Schwabe, Williamson & Wyatt PC on 5/25/2018

Although the GDPR comes into effect on May 25, 2018, the breadth of its reach will continue to develop long after its effective date. Domestic companies should be aware that the rules will likely change over time. While this...more

In Principle: 10 Things Authorised Firms Need to Know for 2018 – The World of Financial Regulation as the UK Prepares to Exit the...

Akin Gump Strauss Hauer & Feld LLP on 1/25/2018

There is much for authorised firms to consider in the year ahead. Firms have been through the intensive period of the enactment of the second Markets in Financial Instruments Directive (MiFID II), but must now step up their...more

Getting Ready for GDPR Compliance in the New Year

Vedder Price on 12/22/2017

As 2017 comes to a close and companies look to planning initiatives for 2018, there is one date that should be front and center for privacy professionals: May 25, 2018. That is the date that the EU’s General Data Protection...more

Article 29 Working Party Issues Guidance on Breach-Notification Obligations under GDPR

Ballard Spahr LLP on 10/27/2017

The Article 29 Working Party (WP29) recently issued guidelines regarding data controllers' notification obligations following security breaches involving the personal data of EU citizens....more

ICO Turns Spotlight on Data Broker Industry

Hogan Lovells on 2/16/2017

Data brokers are organisations that obtain data from a variety of sources and then sell or license it to third parties. Many trade in personal data, which is purchased by their customers for several purposes, most commonly to...more

Ten Steps For U.S. Multinational Employers Towards Compliance With Europe’s New Data Protection Framework – The General Data...

Littler on 1/22/2016

The European Union’s (EU) new data protection framework, known as the General Data Protection Regulation (the “Regulation”), is, at bottom, a response to the astonishing evolution in online commerce. As a result, only one of...more

20 Results

View per page

Page: of 1

General Data Protection Regulation (GDPR) › Notification Requirements › Personal Data

"My best business intelligence, in one easy email…"