Tag Archives: Data Transfer

Australian Government Moves Forward with Privacy Reform Legislation

On May 2, 2012, Australia’s Attorney General Nicola Roxon announced that the Australian government will introduce a bill to the Australian Parliament that will enact a number of the recommendations from the 2008 Law Reform Commission Report (ALRC Report 108) and reform privacy law in Australia. Discussion drafts of segments of the bill were considered by a Senate Committee in 2011. On May 4, Australian Privacy Commissioner Timothy Pilgrim presented an overview of the draft legislation at an event held during the iappANZ Privacy Awareness Week. Commissioner Pilgrim noted that the legislative package includes: Continue reading…

Tags: , , , , , , ,

EU Justice Commissioner Viviane Reding Addresses European Data Protection Authorities at Spring Conference

On May 3, 2012, Viviane Reding, Justice Commissioner and European Commission Vice-President, delivered a speech during the European data protection authorities’ (“DPAs’”) Spring Conference, which was held in closed sessions in Luxembourg. In her speech, Commissioner Reding discussed how the proposed EU Data Protection Regulation aimed to empower the DPAs and addressed some of the DPAs’ primary concerns with the reform.

Continue reading…

Tags: , , , , , , ,

Article 29 Working Party Opines on Proposed EU Data Protection Law Reform Package

On March 23, 2012, the Article 29 Working Party (the “Working Party”) adopted an Opinion on the European Commission’s data protection law reform proposals, including the draft Regulation that is of particular importance for businesses. The Working Party’s Opinion serves as the national data protection authorities’ contribution to the legislative process before the European Parliament and the European Council.

Continue reading…

Tags: , , , , , , , , , , , , , ,

EU-U.S. Interoperability Not Ready for Prime Time

On March 19, 2012, the European Commission hosted this year’s Safe Harbor Conference in Washington, D.C., to address the transfer of data from Europe to the United States. Although it appears the Safe Harbor framework will remain unchanged for the time being, it seems unlikely the United States will be considered adequate, or even interoperable, with the EU for purposes of cross-border data transfers.

Continue reading…

Tags: , , , , , , ,

ICO Welcomes European Commission’s Proposed Data Protection Regulation Reforms

On January 25, 2012, the European Commission released a data protection law reform package, including its proposed General Data Protection Regulation (the “Proposed Regulation”). The UK Information Commissioner’s Office (“ICO”) has reacted positively to the Proposed Regulation, in particular commending efforts to strengthen the rights of individuals, the recognition of important privacy concepts such as privacy by design and privacy impact assessments, and new accountability requirements to ensure organizations properly demonstrate and document their data protection safeguards and procedures.

Continue reading…

Tags: , , , , , , , , ,

Mexico Issues New Privacy Regulations Effective December 22, 2011

On December 21, 2011, Mexico issued the final version of its Regulations of the Federal Law for the Protection of Personal Data Held by Private Parties (Reglamento de la Ley Federal de Protección de Datos Personales en Posesión de los Particulares). The regulations, which contain mostly minor changes to the prior draft that was released in October, will take effect on December 22, 2011. Notable updates in this final draft include:

  • clarification of notice and consent requirements;
  • changes to restrictions on cloud computing;
  • updates to requirements regarding data transfers; and
  • clarifications regarding data subjects’ rights.
Tags: , ,

Hunton & Williams on the BCR Forefront

Shortly before Viviane Reding, Vice-President of the European Commission and Commissioner for Justice, Fundamental Rights and Citizenship, gave her keynote address on binding corporate rules (“BCRs”) at the IAPP Europe Data Protection Congress in Paris, Hunton & Williams co-authored two articles on BCRs with the French Data Protection Authority (“CNIL”):

Continue reading…

Tags: , , , , , , ,

French Data Protection Authority Unveils 2010 Annual Activity Report

On November 16, 2011, the French Data Protection Authority (the “CNIL”) published its Annual Activity Report for 2010 (the “Report”) highlighting its main 2010 accomplishments and outlining some of its priorities for the upcoming year. This year’s Report covers events that occurred since last year’s publication of the Annual Activity Report for 2009.

Continue reading…

Tags: , , , , , , , , , , , , , , , , ,

Mexico’s Ministry of Economy Releases Updated Data Protection Regulations

On October 20, 2011, Mexico’s Ministry of Economy made public an update to its proposed Regulations to the Federal Law for the Protection of Personal Data Held by Private Parties. The new draft regulations, which contain changes made in light of public comments on the prior version, will take effect if they receive final executive approval, which may happen later this year. The updates to the draft regulations include:

  • Rules specific to cloud computing
  • Clarification of notice requirements
  • Clarification of consent requirements
  • Exemptions for certain business contact information
  • Revisions to data transfer restrictions
  • Updated security and breach notification provisions
  • Revised requirements for self-regulatory schemes
  • Revisions to provisions governing the exercise of data subjects’ rights
Tags: , , , ,

Council of Europe Considers Proposal to Amend Convention 108 Rules on Transborder Data Flows

On October 10-12, 2011, the Council of Europe’s Bureau of the Consultative Committee of the Convention for the Protection of Individuals with regard to the Automatic Processing of Personal Data (known as the “T-PD-Bureau”) met in Strasbourg, France, to discuss, among other things, amending the Council of Europe’s Convention 108 and Additional Protocol. Convention 108 (together with the Protocol), which underlies the European Union’s legal framework for data protection, is the only legally-binding international convention that addresses data protection. Amendment of the Convention is also closely linked to the current review of the EU data protection framework.

Continue reading…

Tags: , , , ,