Tag Archives: Binding Corporate Rules

Hunton & Williams on the BCR Forefront

Shortly before Viviane Reding, Vice-President of the European Commission and Commissioner for Justice, Fundamental Rights and Citizenship, gave her keynote address on binding corporate rules (“BCRs”) at the IAPP Europe Data Protection Congress in Paris, Hunton & Williams co-authored two articles on BCRs with the French Data Protection Authority (“CNIL”):

Continue reading…

Tags: , , , , , , , ,

European Commission Drafts to Reform the EU Data Protection Framework Enter Interservice Consultation

In early December 2011, drafts of two legal instruments prepared by DG Justice of the European Commission to reform the EU data protection framework entered interservice consultation. This process will give other Directorates-General of the Commission the opportunity to comment on the drafts before they are formally released as legislative proposals; accordingly, changes to the drafts are likely. Following this comment period, the drafts will enter the EU legislative process, which is likely to take at least two to three years before they become law. It is believed that Justice Commissioner and Commission Vice-President Viviane Reding will formally announce final versions of the drafts at an appearance at the World Economic Forum in late January 2012.

Continue reading…

Tags: , , , , , , , , , ,

EU Commissioner Reding Promotes Use of BCRs at IAPP Congress in Paris

On November 29, 2011, at the International Association of Privacy Professionals (“IAPP”) Europe Data Protection Congress in Paris, France, Viviane Reding, Vice President of the European Commission and Commissioner for Justice, Fundamental Rights and Citizenship, provided insight into details of the proposals for the revised EU data protection framework. She focused explicitly on solutions for international data transfers, promoting Binding Corporate Rules (“BCRs”) as a solution that can offer a simplified, yet comprehensive, structure for safeguarding international flows of data. Commissioner Reding referred to BCRs as offering the possibility of consistent enforcement and legal certainty, without stifling innovation.

Continue reading…

Tags: , , ,

Belgium Simplifies the Authorization Procedure for Binding Corporate Rules

On July 13, 2011, the Belgian Privacy Commission (the “Belgian DPA”) signed a Protocol with the Ministry of Justice which significantly simplifies the authorization procedure for binding corporate rules (“BCRs”) under Belgian law.  The Protocol was just made public on the Belgian DPA’s website.  View the Protocol on BCRs (in both Dutch and French).

Continue reading…

Tags: , , , , , , , ,

ICC Reappoints Christopher Kuner as Chair of Data Protection Task Force

Christopher Kuner, partner in the Brussels office of Hunton & Williams, recently was reappointed to a fourth term as Chair of the International Chamber of Commerce (“ICC”) Task Force on Privacy and the Protection of Personal Data.  Based in Paris and founded in 1919, ICC  represents businesses around the world and has thousands of member companies and national committees in over 130 countries.  Mr. Kuner has been Chair of the Task Force since 2003, and also is a Vice-Chair of ICC’s Commission on E-Business, IT and Telecoms (“EBITT”).  He was reappointed to a further three-year term as Chair by ICC Secretary General Jean-Guy Carrier, who stated that Mr. Kuner’s “expertise and experience have been greatly appreciated and of high value to ICC’s work and the membership of the Commission.” 

Under Mr. Kuner’s chairmanship, the ICC Task Force’s accomplishments have included drafting the standard application form for Binding Corporate Rules that was approved by the Article 29 Working Party in 2007, negotiating the standard contractual clauses for data processors that were approved by the European Commission in 2010, and participating in every meeting of APEC’s Electronic Commerce Steering Group addressing cross-border data flows since the Steering Group began working on that topic.

Tags: , , , , , , , ,

Council of Europe Considers Amendments to Convention 108

On June 28-30, 2011, the Council of Europe’s Bureau of the Consultative Committee of the Convention for the Protection of Individuals with regard to the Automatic Processing of Personal Data (known as the “T-PD-Bureau”) met in Strasbourg, France, to discuss, among other things, amending the Council of Europe’s Convention 108.  Convention 108, which underlies the European Union’s legal framework for data protection, is the only legally-binding international convention that addresses data protection.  Amendment of the Convention is thus closely linked to the current review of the EU data protection framework, and many of the same actors are involved in both exercises.

Continue reading…

Tags: , , , , , , , , , , ,

Live Coverage from Budapest: Day One of the Hungarian International Data Protection Conference

On June 16, 2011, the Hungarian Presidency of the Council of the European Union hosted the first day of a high-level international data protection conference in Budapest.  The conference was attended by approximately 150 people, most of whom are representatives of EU governments, data protection authorities (“DPAs”), the European Commission, and other governmental groups such as the Council of Europe. 

Continue reading…

Tags: , , , , , , , ,

Polish DPA Hosts First Conference on BCRs in Warsaw

On June 13, 2011, the Polish Data Protection Authority (Generalny Inspektor Ochrony Danych Osbowych or “GIODO”) hosted a conference in Warsaw on the use of binding corporate rules (“BCRs”) for international data transfers.  The conference was notable as the first on this topic in Poland, and was designed to introduce BCRs to a Polish audience and to promote their use.  The audience of approximately 70 people heard presentations by the Polish Inspector General for Data Protection, Wojciech Rafał Wiewiórowski, as well as representatives of the Belgian, French, Polish, Spanish and UK DPAs, and the international and Polish business communities.  Christopher Kuner, partner in the Brussels office of Hunton & Williams, spoke at the conference on a panel entitled “BCRs requirements and practical implementation.”  View the conference program.

In his presentation, Wiewiórowski explained that, although he personally looks favorably on the use of BCRs, Poland has not been able to join the Article 29 Working Party’s mutual recognition procedure due to legal impediments under Polish law.  Several of the DPAs expressed interest in exploring the use of BCRs for data processors, but indicated that a number of obstacles must be overcome before such use could be approved.  Following the workshop, on June 15, 2011, a number of DPAs met in closed session in Warsaw to work on better coordination of the mutual recognition and approval procedure.

Tags: , , , , ,

European Parliament Meeting Offers Update on Review of EU Data Protection Directive

On March 16, 2011, a meeting of the “European Privacy Platform” group of the European Parliament was held in Brussels.  The meeting provided important insights into the likely structure and content of proposed revisions to the European Data Protection Directive 95/46/EC that the European Commission has been working on for the past several months.

Continue reading…

Tags: , , , , , , , , , , , , , ,

German Federal DPA Approves Binding Corporate Rules of Deutsche Post DHL

On February 3, 2011, the German Federal Commissioner for Data Protection and Freedom of Information issued a press release announcing that it has approved the privacy policy formulated by Deutsche Post DHL.  This allows Deutsche Post DHL to transfer personal data abroad in accordance with its privacy policy without having to obtain approval in individual cases.  Deutsche Post DHL is the first German company to have its binding corporate rules (“BCRs”) approved at the European level, following an extensive consultation process among EU data protection authorities.

Continue reading…

Tags: , , , , ,