Adequacy

Subscribe to Adequacy

On February 19, 2021, the European Commission published a draft data protection adequacy decision relating to the UK. If the draft decision is adopted, organizations in the EU will be able to continue to transfer personal data to organizations in the UK without restriction, and will not need to rely upon data transfer mechanisms, such as the EU Standard Contractual Clauses, to ensure an adequate level of protection.…
Continue Reading European Commission Publishes Draft UK Data Transfer Adequacy Determination

On December 24, 2020, the European Union and the United Kingdom reached an agreement in principle on the historic EU-UK Trade and Cooperation Agreement. For data protection purposes, there is a further transition period of up to six months to enable the European Commission to complete its adequacy assessment of the UK’s data protection laws. For the time being, personal data can continue to be exported from the EU to the UK without implementing additional safeguards.…
Continue Reading EU-UK Trade Deal: What It Means For Post-Brexit Data Flows

On November 10, 2020, Hunton Andrews Kurth will host a webinar examining the data protection considerations that arise on the UK’s departure from the EU. The UK’s Brexit transition period ends on December 31, 2020, and it is not clear whether the EU will formally recognize the UK’s data protection regime as ‘adequate.’ What does this mean for companies’ plans to update their data transfer mechanisms? Is adequacy the holy grail it is widely believed to be? What other issues must be considered? Is there still time?
…
Continue Reading Webinar on Brexit and Adequacy: Separating Fact from Fiction

The Centre for Information Policy Leadership at Hunton and the Data Security Council of India have published a report on “Enabling Accountable Data Transfers from India to the United States under India’s Proposed Personal Data Protection Bill,” which highlights the importance of continued flows of data between India and the U.S. following the expected passage of new comprehensive data protection legislation in India.…
Continue Reading CIPL and DSCI Publish Report on Enabling U.S.-India Data Transfers

On July 16, 2020, the Court of Justice of the European Union issued its landmark judgment in the Schrems II case, concluding that the Standard Contractual Clauses issued by the European Commission for the transfer of personal data to data processors established outside of the EU are valid. Unexpectedly, the Court invalidated the EU-U.S. Privacy Shield framework.…
Continue Reading BREAKING: Unexpected Outcome of Schrems II Case: CJEU Invalidates EU-U.S. Privacy Shield Framework but Standard Contractual Clauses Remain Valid

In a case that has garnered widespread interest, the Court of Justice of the European Union will deliver its judgement in the Schrems II case (case C-311/18) on July 16, 2020, determining the validity of the controller-to-processor Standard Contractual Clauses as a cross-border data transfer mechanism under the GDPR.…
Continue Reading CJEU’s Judgment on Validity of EU Standard Contractual Clauses Due July 16, 2020

On July 9, 2020, the European Commission adopted a Communication to the European Parliament, the Council, the European Economic and Social Committee and the Committee of the Regions aimed to help national authorities, businesses and citizens prepare for the end of the Brexit transition period on December 31, 2020.…
Continue Reading European Commission Adopts Communication on Brexit Readiness