Privacy Laws, Extraterritoriality Rules

Cross-Border Data Processing under the "Offshore Model": China's Regulatory Approach in Comparative Context

Dacheng on 7/10/2025

As the digital economy continues to thrive and remote work becomes increasingly mainstream, an “offshore model” of business operation has emerged. Under this model, companies may provide services to users in a given...more

EU Court Upholds Commission’s Power To Demand Data Held by Foreign Companies

Skadden, Arps, Slate, Meagher & Flom LLP on 8/26/2024

In Nuctech Warsaw (T-284/24), the EU Court of Justice held that EU subsidiaries can lawfully be required to provide access to email accounts and data held by their overseas parent company. The ruling involved the following...more

The UK’s Online Safety Bill – Implications for US and International Businesses

Faegre Drinker Biddle & Reath LLP on 10/18/2023

On 19 September 2023, the UK Parliament passed the Online Safety Bill (“OSB”). The OSB aims to protect individuals from illegal online content and focuses on the protection of children by requiring the removal of content that...more

India Passes Long Awaited Privacy Law

WilmerHale on 8/21/2023

On August 9, 2023, India passed a data protection law that will govern how entities who process users’ personal data. The Digital Personal Data Protection Act (“the Act”) will establish guardrails for how organizations should...more

China Personal Information Protection Law Will Become Effective Soon

White & Case LLP on 9/22/2021

On August 20, 2021, the Standing Committee of the National People's Congress of the People's Republic of China ("PRC") passed the Personal Information Protection Law ("PIPL"), which will come into effect on November 1, 2021. ...more

There’s a New Regulator in Town: China Passes an Omnibus Data Privacy Law

Goodwin on 9/3/2021

On August 20, the People’s Republic of China became the latest global economic powerhouse to pass an omnibus privacy law. Titled the Personal Information Protection Law (“PIPL”), the law was adopted by the Standing Committee...more

China Adopts New Data Security Law

Foley Hoag LLP - Security, Privacy and the... on 8/4/2021

On June 10, 2021, China adopted a new Data Security Law that will impact every business operating in or doing business with China. The law, which will take effect in less than a month (September 1, 2021), is sweeping in...more

Implications of US laws on collection, storage, and use of biometric information

Eversheds Sutherland (US) LLP on 7/17/2020

The past few years have seen dramatic innovations in biometric technology and an accompanying exponential growth in the size of the biometrics industry, in part due to the spread of Internet of Things (IoT), artificial...more

Possible and Significant Changes Coming to the CCPA

White and Williams LLP on 4/30/2019

Enacted in June 2018, the California Consumer Privacy Act (CCPA) has been criticized for its broad scope, the burdens it would impose on businesses, and its textual ambiguities. The legislation arose from a controversial...more

Brazil’s New Data Protection Law: An Overview and Four Key Takeaways for U.S. Companies

Carlton Fields on 4/30/2019

2018 was a watershed year for data privacy regulation. While Europe’s General Data Protection Regulation (GDPR) and California’s Consumer Privacy Act (CCPA) garnered the most attention from the public and businesses...more

Second Circuit Holds that the U.S. Government Can’t Order Microsoft to Disclose Customer Emails Stored in Ireland

Foley Hoag LLP - Global Business and Human... on 7/15/2016

In a case closely watched by privacy advocates, on July 14, the Second Circuit Court of Appeals held that the Stored Communications Act (“SCA”) does not authorize U.S. law enforcement authorities to order U.S.-based companies...more

Privacy Laws › Extraterritoriality Rules

"My best business intelligence, in one easy email…"