EU GDPR

Image of EU flags in front of building representing European Union GDPR from an Asian perspective

Overhaul of European Union GDPR – An Asian Perspective (Part I)

April 19, 2016

The General Data Protection Regulation is the first comprehensive overhaul of European Union data protection rules in 20 years. This two-part article will examine the GDPR’s impact on businesses in Asia, with a focus on territorial scope, controller and processor obligations, and international data transfers.

Image of globe with network connections around the world representing the Asian perspective on the European Union GDPR

Data Protection Insights

Overhaul of European Union GDPR – An Asian Perspective (Part II)

June 21, 2016

In our first article on the European Union General Data Protection Regulation (Regulation (EU) 2016/679 or ‘GDPR’) we focused on the global territorial scope of the new rules and how they could affect businesses based in Asia. In particular, we highlighted how the enhanced rights of data subjects in the EU and the expanded obligations on data controllers and data processors — even if they are located outside the EU — provide much for businesses to consider as they become compliant with the new rules. In this second article, we will focus on the new regulatory-enforcement regime and international data transfers, and then draw comparisons with the Asia-Pacific Economic Cooperation (APEC) Cross-Border Privacy Rules (CBPR) system.

Image of goldfish jumping from one tank to another representing Brexit and what's going to change for Asia data

Data Protection Insights

Asia, Data and Brexit – What’s Going to Change?

July 23, 2016

The exit of the United Kingdom from the EU has caused turmoil in world markets and has far reaching consequences for those companies in the European Union doing business with the country – and vice versa. There has also been some uncertainty about how the authorities based in London will be treating data security and privacy issues. The consensus seems to be that companies doing business with the second largest economy in Europe (after Germany) should be adopting a ‘business as usual’ approach. However, will this necessarily be the case in the future? Will global companies with a British connection (including those in Asia) be forced to revisit how they treat data security and privacy issues when dealing with the United Kingdom – and will British companies move away from the rules that have been set in place by Brussels? We take a closer look.

Image of checklist on a clipboard and pen representing the need to demonstrate compliance using an accountability approach

Data Protection Insights

An Accountability Approach to Demonstrating Compliance

September 21, 2016

In this final instalment of an ongoing series on the issues that affect compliance in an ever more complex world Teresa Troester-Falklooks at how organisations can demonstrate compliance using an accountability approach.

Image of team of engineers and business people looking at plans on a table representing the operationalising of the EU GDPR and Privacy by Design

Data Privacy Insights

Operationalising GDPR and Privacy by Design

November 25, 2016

We give some insight into how companies could use a privacy impact assessment (PIA) in conjunction with data mapping practices to understand how data flows through an organisation, making it the perfect tool to document and track new initiatives.

Image of EU country flags in front of building representing the new EU General Data Protection Regulation

Data Protection Insights

A Practitioner’s View of the New EU General Data Protection Regulation (GDPR)

March 28, 2017

This article is based on a presentation made during the Data Privacy Asia 2016 conference held on 9-11 November 2016. The new EU General Data Protection Regulation aims to implement uniform data protection rules within the EU, boost the Digital Single Market and increase cooperation across its member states. The current rules have been sharpened to provide more enforcement teeth with penalties up to 4% of annual global turnover or EUR 20 million for firms in breach with the GDPR. In this article Héloïse Bock, a Partner at Arendt & Medernach, a law firm located in Luxembourg, examines the core principles and applicability of the GDPR, and discusses what companies in Asia must do to avoid missteps.

Image of distressed woman speaking on mobile phone with ambulance in the background representing changes in privacy law in Australia regarding breach reporting, big data and the new EU GDPR

Data Protection Insights

Privacy Law in Australia: Breach Reporting, New Frontiers of Big Data and Differences with the EU GDPR

April 18, 2017

This article is based on a presentation made by Steven Klimt, a partner in the Sydney office of Clayton Utz during the Data Privacy Asia 2016 conference held on 9-11 November 2016. It outlines the new mandatory data breach reporting legislation, how Australian privacy regulation impacts Big Data and the differences between Australian Privacy legislation and the proposed EU GDPR.

Image of woman using mobile phone showing privacy settings representing how telco will give consumers better privacy control over data

Data Privacy News

Telco Gives Consumer Privacy Control Over Data

May 11, 2017

Telefónica in Germany has announced a partnership with U.K. firm People.io to power an app through which the telco giant's customers can control some of their data.

Image of UK parliament building against a dark cloudy sky representing the use of big data in politics

Data Privacy News

Big Data in Politics and The Biggest Business of All

May 25, 2017

Big data in politics has become big news in the United Kingdom as the Guardian newspaper reports that the vote for the UK to leave the European Union saw two international companies manipulating public opinion through the use of big data mining techniques.

Image of Buckingham Palace representing the new era for UK data protection based on the Queen's speech

Data Protection News

Queen’s Speech Heralds New Era for UK Data Protection

June 27, 2017

The 21st of June 2017 saw UK’s Queen Elizabeth give what is generally known as ‘The Queen’s Speech’ in which Her Majesty gave some insights into just how seriously the UK government is taking issues of online privacy and data protection.