John Bowman, Senior Principal at Promontory

Image of globe with network connections around the world representing the Asian perspective on the European Union GDPR

Overhaul of European Union GDPR – An Asian Perspective (Part II)

June 21, 2016

In our first article on the European Union General Data Protection Regulation (Regulation (EU) 2016/679 or ‘GDPR’) we focused on the global territorial scope of the new rules and how they could affect businesses based in Asia. In particular, we highlighted how the enhanced rights of data subjects in the EU and the expanded obligations on data controllers and data processors — even if they are located outside the EU — provide much for businesses to consider as they become compliant with the new rules. In this second article, we will focus on the new regulatory-enforcement regime and international data transfers, and then draw comparisons with the Asia-Pacific Economic Cooperation (APEC) Cross-Border Privacy Rules (CBPR) system.

Image of EU flags in front of building representing European Union GDPR from an Asian perspective

Data Protection Insights

Overhaul of European Union GDPR – An Asian Perspective (Part I)

April 19, 2016

The General Data Protection Regulation is the first comprehensive overhaul of European Union data protection rules in 20 years. This two-part article will examine the GDPR’s impact on businesses in Asia, with a focus on territorial scope, controller and processor obligations, and international data transfers.