On July 28, 2020, German supervisory authorities issued a statement reiterating the requirement for additional safeguards when organizations rely on Standard Contractual Clauses or Binding Corporate Rules for the transfer of personal data to third countries in the wake of the Court of Justice of the European Union’s invalidation of the Privacy Shield Framework.
Continue Reading Schrems II Update: German SAs Require Additional Safeguards for U.S. Transfers and Max Schrems Set to Challenge Facebook Data Transfers Again
Texas AG Investigates Facebook’s Use of Biometric Identifiers
Posted on
Posted in U.S. State Law
Texas Attorney General Ken Paxton is investigating Facebook for alleged violations of the Texas Business and Commercial Code, which contains provisions governing the collection, retention and disclosure of biometric data.…
Continue Reading Texas AG Investigates Facebook’s Use of Biometric Identifiers
BREAKING: Unexpected Outcome of Schrems II Case: CJEU Invalidates EU-U.S. Privacy Shield Framework but Standard Contractual Clauses Remain Valid
Posted on
On July 16, 2020, the Court of Justice of the European Union issued its landmark judgment in the Schrems II case, concluding that the Standard Contractual Clauses issued by the European Commission for the transfer of personal data to data processors established outside of the EU are valid. Unexpectedly, the Court invalidated the EU-U.S. Privacy Shield framework.…
Continue Reading BREAKING: Unexpected Outcome of Schrems II Case: CJEU Invalidates EU-U.S. Privacy Shield Framework but Standard Contractual Clauses Remain Valid
Webinar on Schrems II: The Practical Implications for Businesses
Posted on
Join us for a webinar on the Schrems II case to discuss the ruling on the validity of Standard Contractual Clauses and the implications on global data transfers. This post includes a link to register for the webinar. …
Continue Reading Webinar on Schrems II: The Practical Implications for Businesses
CJEU’s Judgment on Validity of EU Standard Contractual Clauses Due July 16, 2020
Posted on
In a case that has garnered widespread interest, the Court of Justice of the European Union will deliver its judgement in the Schrems II case (case C-311/18) on July 16, 2020, determining the validity of the controller-to-processor Standard Contractual Clauses as a cross-border data transfer mechanism under the GDPR.…
Continue Reading CJEU’s Judgment on Validity of EU Standard Contractual Clauses Due July 16, 2020
German BGH Decision Confirms Interplay Between Collection of Personal Data and Competition Law
Posted on
Posted in Information Security, International
On June 23, 2020, the German Federal Court of Justice issued a decision confirming the enforceability, in preliminary proceedings, of the order of the German Federal Cartel Office against Facebook’s data practices.…
Continue Reading German BGH Decision Confirms Interplay Between Collection of Personal Data and Competition Law
Facebook Agrees to Landmark 550 Million Dollar Settlement in BIPA Class Action
Posted on
Facebook disclosed on January 29, 2020, that it has agreed to pay 550 million dollars to resolve a biometric privacy class action filed by Illinois users under the Biometric Information Privacy Act.…
Continue Reading Facebook Agrees to Landmark 550 Million Dollar Settlement in BIPA Class Action
Advocate General Upholds Validity of Standard Contractual Clauses in Schrems II Case
Posted on
Posted in European Union, International
On December 19, 2019, the Advocate General of the Court of Justice of the European Union handed down his opinion in the so-called “Schrems II” case.…
Continue Reading Advocate General Upholds Validity of Standard Contractual Clauses in Schrems II Case
CIPL Issues Discussion Paper on Organizational Accountability in Light of FTC Consent Orders
Posted on
On November 13, 2019, the Centre for Information Policy Leadership at Hunton Andrews Kurth issued a discussion paper on “Organizational Accountability in Light of FTC Consent Orders.”…
Continue Reading CIPL Issues Discussion Paper on Organizational Accountability in Light of FTC Consent Orders
Facebook Reaches Settlement with ICO over £500,000 Data Protection Fine
Posted on
Facebook reached a settlement with the UK Information Commissioner’s Office, agreeing to pay a fine of 500,000 GBP in relation to the processing and sharing of its users’ personal data with Cambridge Analytica.…
Continue Reading Facebook Reaches Settlement with ICO over £500,000 Data Protection Fine