Follow

Global Privacy and Security Compliance Law Blog Blog

Articles: 1-10 of 165

CJEU AG Sets High Bar for Responses to Data Subject Access Requests

European Union - June 23 2022 The Advocate General argues that organisations should provide individuals with information on the specific recipients of their personal data. Advocate…

Interior Proposes First Renewable Energy Lease Sale in Federal Waters Offshore California

USA - June 9 2022 The proposal would auction off almost 375,000 acres of the Outer Continental Shelf offshore California for wind energy development. On May 31, 2022…

EDPB Emphasizes “Dissuasive” Fines in New Draft Guidelines on GDPR Fine Calculation

European Union - June 1 2022 The EDPB sets out relevant steps and factors that EU supervisory authorities should consider when calculating administrative fines under the GDPR. On…

New Cyber Incident Reporting Requirements on the Horizon in the US

USA - April 11 2022 The US government continues to expand regulatory requirements around notification and disclosure of major cyberattacks or incidents. New measures are…

Utah Consumer Privacy Act: Fourth US State Enacts Comprehensive Data Privacy Legislation

USA - March 30 2022 Utah enacts data privacy legislation in the mold of California, Colorado, and Virginia, but with less onerous requirements for businesses, in what is…

UAE Publishes First Federal Data Protection Law

United Arab Emirates - December 14 2021 Organisations subject to the law should carry out a gap analysis of their current compliance position against the new requirements. By Brian A…

CNIL Publishes White Paper on Digital Payments and Data Privacy

European Union, France, Global - November 9 2021 The French Data Protection Authority’s White Paper discusses how companies can comply with data privacy and security obligations…

EDPB Issues New Guidance on Storing Credit Card Data for Future Purchases

European Union, Global, United Kingdom - July 7 2021 Online retailers storing credit card data for the sole purpose of facilitating further purchases will likely need to obtain consumer consent…

New Standard Contractual Clauses and Final EDPB Recommendations - Next Steps

European Union - June 25 2021 Companies have three months to prepare to use the latest standard contractual clauses for new data transfers, and 18 months to migrate existing…

Austrian court submits questions on GDPR civil damages claims to CJEU

Austria, European Union - June 15 2021 On April 15, 2021, the Austrian Supreme Court (OGH) referred key questions regarding non-material damages for data protection infringements under Art…