EU GDPR

The GDPR has influenced the future of corporate compliance at a global level. As we see the CCPA, the USCDPA, and bills in other jurisdictions like India and Brazil being passed, it is evident that all companies soon will be required to comply with some consumer data privacy measure.

While the practical interpretation and implementation of the GDPR has been heavily discussed, it is sometimes overlooked that the GDPR itself offers solutions to handle the legal uncertainty: Codes of Conduct and Certifications.

There will be grey areas in GDPR for a while to come and certainly in the early stages there will be test cases and adjustments to the Articles to clarify and ratify their use in real world practice.

Faced with a deluge of complaints regarding violations in terms of general data protection, regulators are expected to levy the first GDPR fines and other sanctions by year end.

Regulatory reporting for GDPR compliance requires effectively operationalising the use of appropriate technical and organisational measures to allow for reporting at the enterprise and project level.

Will your website will be in some way impacted by expanded privacy legislation like the GDPR? Do you need to change how you do business online? Much of what’s required is simply good data hygiene.

Multinationals face difficult and unique data privacy and security compliance challenges to successfully meet the ongoing waves of government regulations. To meet these challenges, multinationals must have enhanced visibility across their global key assets and comprehensive controls.

Many regulators prefer voluntary GDPR compliance, but are prepared to back that up with tough action when required. This is why your reporting must be ‘regulator ready’.

The technology sector is facing new regulations and increased calls for further regulation, in particular with respect to data privacy and security. Emerging tech companies that plan to succeed should pay attention and be prepared for more questions about privacy and security from investors, strategic partners,…

Financial market regulators from outside the EU are now seeking GDPR exemptions for the purpose of "public interest", for example cracking down on securities fraud, including the SEC in the U.S. as well as regulators in Japan and Hong Kong.