President Biden recently released an Executive Order “addressing the extraordinary and unusual national security threat posed by the continued effort of certain countries of concern to access Americans’ bulk sensitive personal data and certain U.S. Government-related data.”
Continue Reading DOJ Regulations and White House Executive Order Will Target Protections for Americans’ Sensitive Personal Data Against Foreign Threat Actors
Data Transfer
CIPL Publishes The Zero Risk Fallacy Paper
On February 20, 2024, The Centre for Information Policy Leadership at Hunton Andrews Kurth LLP and Theodore Christakis, Professor of International, European and Digital Law at University Grenoble Alpes, released a comprehensive study titled The “Zero Risk” Fallacy: International Data Transfers, Foreign Governments’ Access to Data and the Need for a Risk-Based Approach.
Continue Reading CIPL Publishes The Zero Risk Fallacy Paper
China Plans to Accelerate Cross-Border Data Transfers by Implementing Trial Rules in Shanghai Pilot Free Trade Zone
Recent developments in the Shanghai Pilot Free Trade Zone to facilitate cross-border data transfers are expected to provide greater flexibility in exporting data from China, which has been stymied by the Cyberspace Administration of China’s strict cross-border data transfer regulations proposed in December 2023. …
Continue Reading China Plans to Accelerate Cross-Border Data Transfers by Implementing Trial Rules in Shanghai Pilot Free Trade Zone
CNIL Opens Consultation on Transfer Impact Assessment Guide
On January 8, 2024, the French Data Protection Authority opened a consultation on its draft guidance for the use of transfer impact assessments. …
Continue Reading CNIL Opens Consultation on Transfer Impact Assessment Guide
European Parliament Adopts Final Version of the Data Act
On November 9, 2023, the European Parliament adopted, by a majority of 481 votes in favor, 31 votes against and 71 abstentions, the final text of the Data Act. …
Continue Reading European Parliament Adopts Final Version of the Data Act
China Proposes New Rules for Data Transfers
On September 28, 2023, the Cyberspace Administration of China released the “Provisions on Regulating and Facilitating Cross-Border Data Flows” for public comment. …
Continue Reading China Proposes New Rules for Data Transfers
BREAKING: UK-U.S. Data Bridge Finalized
On September 21, 2023, UK Secretary of State for Science, Innovation and Technology Michelle Donelan laid regulations in the UK Parliament, giving effect to a UK-U.S. Data Bridge.
Continue Reading BREAKING: UK-U.S. Data Bridge Finalized
European Data Protection Board Issues Information Note on Data Transfers under the Data Privacy Framework
On July 19, 2023, the European Data Protection Board issued an Information Note regarding data transfers to the U.S. following the adoption of an adequacy decision on the EU-U.S. Data Privacy Framework on July 10, 2023.
Continue Reading European Data Protection Board Issues Information Note on Data Transfers under the Data Privacy Framework
BREAKING: EU Commission Adopts EU-U.S. Data Privacy Framework Adequacy Decision
On July, 10 2023, the European Commission formally adopted a new adequacy decision on the EU-U.S. Data Privacy Framework, which follows years of intense negotiations between the EU and the U.S. after the invalidation of the EU-U.S. Privacy Shield by the CJEU in the Schrems II case.
Continue Reading BREAKING: EU Commission Adopts EU-U.S. Data Privacy Framework Adequacy Decision
EDPB Adopts Guidance on Controller Binding Corporate Rules
On June 30, 2023, the European Data Protection Board published Recommendations 1/2022 on the Application for Approval and on the elements and principles to be found in Controller Binding Corporate Rules (Art. 47 GDPR), which were adopted on June 20, 2023. …
Continue Reading EDPB Adopts Guidance on Controller Binding Corporate Rules