Popular, Data Protection, Court of Justice of the European Union (CJEU)

Workday Ruling: How Europe’s Top Courts Raised the Bar for Employee Data Protection

Fisher Phillips on 7/24/2025

Cloud-based HR systems have become standard for multinational businesses, driving efficiency but also increasing compliance and privacy risks. Indeed, a recent Workday case, which originated in Germany, has clarified the...more

AI in German Employment – Navigating the AI Act, GDPR, and National Legislation

Hogan Lovells on 2/21/2024

Employers around the world are increasingly using artificial intelligence (AI) to optimize many facets of their business operations, ranging from screening job applications and assigning tasks in real time to evaluating...more

EU’s Highest Court Issues Major AI Decision With Wide-Reaching Impact

Alston & Bird on 12/20/2023

On 7 December 2023, the Court of Justice of the European Union (CJEU) issued an important decision on how the GDPR governs AI-assisted decisions. The case arose in the financial services context, with the court holding that...more

Landmark Ruling: The Court of Justice of the European Union Rejects Strict Liability in the General Data Protection Regulation

Orrick, Herrington & Sutcliffe LLP on 12/11/2023

In this Essential Guide, which is part of Orrick’s Cybersecurity & Privacy Compass Series, we will provide insight into the potential fines that companies may face for violating the General Data Protection Regulation...more

Member of French Parliament lodges first request for annulment of EU-US Data Privacy Framework

Hogan Lovells on 9/12/2023

P. Latombe, who is not only a Member of the French Parliament, but also seated at the French Data Protection Authority (CNIL)'s Commission, lodged a request for annulment of the DPF on 6 September 2023 before the Court of...more

Data Transfers Permitted Across the Pond via New EU-U.S. Data Privacy Framework

Bond Schoeneck & King PLLC on 7/25/2023

On July 10, 2023, the European Commission adopted its adequacy decision on data transfers for the EU-U.S. (European Union/United States) Data Privacy Framework (DPF). The adequacy decision concluded that the United States...more

Global Cross Border Privacy Rules and the new initiatives to support data free flow with trust

A&O Shearman on 7/19/2023

ust over a year ago, on 21 April 2022, the seven economies (Canada, Japan, the Republic of Korea, the Philippines, Singapore, Taiwan, and the USA) participating in the Asia-Pacific Economic Cooperation (APEC) Cross-Border...more

Data Privacy Laws and Blocking Statutes: Five Practical Strategies for Counsel

HaystackID on 1/30/2023

Background Note: Data privacy has become a critical issue in the digital era, with laws and regulations constantly evolving. As a result, it’s important for cybersecurity, information governance, and legal discovery...more

Calmer waters in sight? The European Commission publish their draft adequacy decision for the EU-U.S. Data Privacy Framework

A&O Shearman on 12/21/2022

The 13 December 2022 marked a further stage in restoring greater stability for transatlantic personal data transfers, as the European Commission (the Commission) launched the process towards adoption of an adequacy decision...more

6 Things to Know About the New EU-U.S. Data Privacy Framework

Orrick, Herrington & Sutcliffe LLP on 10/26/2022

In early October, the United States (“U.S.”) and European Union (“EU”) came one step closer to the much-awaited new EU-US Data Privacy Framework (the “Framework”), designed to facilitate transatlantic data flows between the...more

The United States and European Commission Announce a New Trans-Atlantic Data Privacy Framework

Orrick, Herrington & Sutcliffe LLP on 4/6/2022

The United States ("U.S.") and the European Commission ("EU Commission") recently announced an “agreement in principle” to develop a new Trans-Atlantic Data Privacy Framework (“Framework”). The Framework is intended to...more

Privacy & Cybersecurity Update - December 2021

Skadden, Arps, Slate, Meagher & Flom LLP on 1/4/2022

In this month’s Privacy & Cybersecurity Update, we review the TSA’s new cybersecurity requirements for critical U.S. infrastructure, the White House OMB’s new guidance on cyber incident reporting procedures and the U.S.-U.K....more

CJEU Advocate General reinforces the GDPR’s One Stop Shop

Hogan Lovells on 1/18/2021

On 13 January 2021, the Advocate General (AG) of the Court of Justice of the European Union (CJEU) issued an important opinion in the case of Facebook Belgium v Gegevensbeschermingsautoriteit (C-645/19) which considers the...more

Jones Day Global Privacy & Cybersecurity Update | Vol. 27

Jones Day on 1/8/2021

United States - Regulatory—Policy, Best Practices, and Standard - NIST Unveils Draft Guidance to Protect Critical Infrastructure - On October 22, 2020, the National Institute of Standards and Technology ("NIST")...more

Cybersecurity 2021 – The Year in Preview: The GDPR's New Transfer Landmines

Foley Hoag LLP - Security, Privacy and the... on 12/31/2020

Editors’ Note: This is the third in our fifth-annual end-of-year series examining important trends in data privacy and cybersecurity in the coming year. Read our previous posts on Energy and Cannabis. A year ago,...more

European Commission Publishes Proposed New Data Transfer Agreement

Mintz - Privacy & Cybersecurity Viewpoints on 11/16/2020

The European Commission has just published a consultation draft of the long-promised updated version of the Standard Contractual Clauses (SCCs). The SCCs are the most commonly used legal mechanism for transferring personal...more

Privacy & Cybersecurity Update - October 2020

Skadden, Arps, Slate, Meagher & Flom LLP on 11/3/2020

In this month's edition of our Privacy & Cybersecurity Update, we examine the U.S. Treasury's advisories regarding the role of financial intermediaries in ransomware payments, a ruling by the Israeli data protection authority...more

CJEU: Website operators are "jointly responsible" for embedding social media or 3rd party code

Spirit Legal on 10/14/2020

Website and app operators are jointly liable with Facebook for violations of European data protection law - In its judgment of 29 July 2019 (ref.C-40/17), the European Court of Justice has ruled on two essential points...more

Schrems Strikes Again: Battery of New Data Privacy Complaints Raise Compliance Questions for EU-U.S. Data Transfers

Troutman Pepper Locke on 9/2/2020

Barely one month after the Court of Justice of the European Union (CJEU) issued its Schrems II decision striking down the EU-U.S. Privacy Shield Framework (Privacy Shield), Austrian privacy activist Max Schrems has filed 101...more

Schrems II Could Disrupt US Courts’ Common Ground on eDiscovery and Data Transfers from Europe - THE EDATA GUIDE TO GDPR

Morgan Lewis on 8/24/2020

Schrems II may force companies obligated to produce EU personal data to the task of determining whether to comply with US discovery obligation rules that risk fines under the GDPR for illegal data transfers or to defy the US...more

EU’s Highest Court Upends Personal Data Transfers to the United States: Action Steps for U.S. Multinational Employers to Keep HR...

Littler on 7/21/2020

The Court of Justice of the European Union (“CJEU”), on July 16, 2020, invalidated the European Union-U.S. Privacy Shield Framework (“Privacy Shield”), which more than 5,300 U.S. organizations had relied on to lawfully...more

Today's Popular Updates › Data Protection › Court of Justice of the European Union (CJEU)