Tag Archives: EU Data Protection Directive

Article 29 Working Party Issues Opinion on Drones

On June 16, 2015, the Article 29 Working Party adopted an Opinion on Privacy and Data Protection Issues relating to the Utilization of Drones. This blog entry contains highlights of the Opinion, which provides guidance on the application of data protection rules to the manufacture and use of drones.… Continue Reading

Article 29 Working Party Clarifies Scope of Health Data Processed by Lifestyle and Wellbeing Apps

On February 5, 2015, the Article 29 Working Party published a letter that responds to a request of the European Commission to clarify the scope of health data processed by lifestyle and wellbeing apps. In the letter, the Working Party identifies the criteria to determine when personal data qualifies as "health data," and provides recommendations on the treatment of health data in the proposed EU Regulation.… Continue Reading

Centre Discusses the Risk-Based Approach to Privacy and APEC-EU Interoperability at IAPP Brussels

At the IAPP's recent Europe Data Protection Congress in Brussels, the Centre for Information Policy Leadership at Hunton & Williams led two panels on the risk-based approach to privacy as a tool for implementing existing privacy principles more effectively and on codes of conduct as a means for creating interoperability between different privacy regimes.… Continue Reading

Centre’s Risk Workshop II in Brussels Emphasizes that Risk-Based Approach to Privacy Does Not Change Legal Obligations but Helps Calibrate Their Effective Implementation

On November 18, 2014, the Centre for Information Policy Leadership at Hunton & Williams held the second workshop in its ongoing work on the risk-based approach to privacy and a Privacy Risk Framework. Approximately 70 Centre members, privacy regulators and other privacy experts met in Brussels to discuss the benefits and challenges of the risk-based approach, operationalizing risk assessments within organizations, and employing risk analysis in enforcement. … Continue Reading

Article 29 Working Party Issues Guidance on the “Legitimate Interests” Ground in the EU Data Protection Directive

On April 9, 2014, the Article 29 Working Party issued an Opinion on the "legitimate interests" ground for lawful processing of personal data. The Opinion provides detailed information on how data controllers should conduct the balancing test necessary to determine whether processing is justified on the basis of the controller’s legitimate interests.… Continue Reading

Greek Presidency Issues Notes on Proposed EU Data Protection Regulation

On January 31, 2014, the Greek Presidency of the Council of the European Union issued four notes regarding the proposed EU Data Protection Regulation. This blog post summarizes the notes which address the one-stop-shop mechanism, data portability, data protection impact assessments and prior checks, and rules applicable to data processors.… Continue Reading

Brazil Moves Forward with Internet and Data Protection Bills

Brazilian lawmakers held several consensus-building meetings with party leaders over the past two weeks to reach a voting agreement on a draft bill to establish the country's first set of Internet regulations. Disputes over what should be included in the legislation have delayed a vote on the measure, but the bill continues to be a priority for Congress and a vote is expected in the coming weeks. … Continue Reading