GDPR

Latest

GDPR

EU flags outside European Parliament showing opposition to EU-US data transfer framework

European Parliament Committee Rejects Proposed EU-US Data Transfer Framework

February 27, 2023

The central objection raised is a predictable one, and one that some analysts believe will inevitably cause the EU-US data transfer proposal to fail yet another court challenge if it makes it to implementation: the lack of a federal-level data privacy law in the US.

Digital cyberspace and digital data network connections showing risk-based approach to international data transfers under GDPR

Data Protection News

Risk-Based Approach to International Data Transfers Necessary to the Future of Cross-Border Data Flows Under GDPR

December 1, 2022

A new paper from global law multinational DLA Piper lays out the case for a risk-based approach to GDPR international data transfers, arguing that the status quo is too onerous and that data exporters are suffering.

Twitter app displayed on smartphone showing Irish DPC issue with GDPR one stop shop rule

Data Protection News

Could “The New Twitter” Run Into Issues With GDPR One Stop Shop Rule? Irish DPC Source Indicates Staffing Situation May Be a Problem

November 28, 2022

Losing Ireland "main establishment" status means that any national DPA in the EU could bring direct GDPR action against Twitter on behalf of its citizens without the standard collaborative process that ultimately funnels everything through the Irish DPC.

Judge gavel over US and EU flags showing executive order for EU-US data transfers under GDPR

Data Protection News

Executive Order for EU-US Data Transfers Looks To Smooth Over GDPR Restrictions, but Privacy Advocates Are Unsatisfied

October 11, 2022

The crux of the privacy objections is that the executive order does not guarantee that indiscriminate collection will be stopped; it merely attempts to narrow the scope of intelligence activity in EU-US data transfers.

Hand working with VR screen with padlock icon showing GDPR and privacy regulations

Data Protection Insights

How GDPR Changed the Game for Enterprises

September 28, 2022

Organizations must elevate their data management and privacy regulations to adhere to governance policies, which will align with privacy laws. This will enable the proper management and storage of personal data and avoid some of the ongoing privacy issues faced today.

European Parliament building on a winter day at dusk showing GDPR

Data Protection Insights

Looking Back 4 Years Later, Is the GDPR All It Was Cracked Up To Be?

September 23, 2022

GDPR was introduced in 2018 and has significantly impacted privacy, transparency, and business accountability. What could have been done better, and what’s next?

Google Analytics app on smartphone screen showing EU-US data transfers considered GDPR violation

Data Protection News

Italy Bans Google Analytics Over Improper EU-US Data Transfers

July 5, 2022

Italy’s data protection authority has ruled that Google's data transfers to servers in the United States fall afoul of the rules of the GDPR, with the company not anonymizing IP addresses sufficiently.

Waving flags in front of European Parliament building showing Digital Markets Act

Data Protection Insights

EU Digital Markets Act: Key Aspects and Lingering Questions

June 7, 2022

The EU Digital Markets Act (DMA) appears headed for adoption in May. Companies providing “core platform services”, as well as those potentially receiving data from such companies, should understand not only what the DMA requires, but also its impact on existing obligations under the GDPR.

London Big Ben and Westminster Bridge showing Queen's Speech Data Reform Bill and data adequacy issue

Data Protection News

UK Data Reform Bill Announced in Queen’s Speech, Could Jeopardize Existing Data Adequacy Decision

May 16, 2022

A new data reform bill included in the 2022 Queen's Speech promises a "pro-growth" framework of greater benefit to both businesses and citizens of the UK. It could put an end to the data adequacy decision that allows personal data to continue flowing between it and the EU.

Data Protection News

Danske Bank Fined for GDPR Violations, Customer Data Held for Longer Than Legally Allowed

April 18, 2022

A statement from Danske Bank indicates that the GDPR violations are tied to an inability to build data deletion functionality into its complex interlocked IT systems despite beginning efforts in 2016.

GDPR

White House Budget for 2024 Cybersecurity Spending: More Funding for CISA, Modernization of Online Government Services

Massive Data Breach at Healthcare Provider ILS Compromises Millions of Patients

Can Security Keep Up With ChatGPT Evolutions?

FBI Annual Internet Crime Report Finds Hot New Trend in Online Scams: “Pig Butchering”