On March 25, 2022, the United States and the European Union jointly announced an “agreement in principle” to a new trans-Atlantic data privacy framework to facilitate the cross-border transfer of personal data (the “Framework”).1 As part of the Framework, the US has made “unprecedented commitments” related to intelligence collection and surveillance practices.2 The
Björn Vollmuth
The Free Flow of Personal Data From the European Economic Area to the United Kingdom Can Continue (at Least for Now)
Today, 28 June 2021, the European Commission formally adopted two adequacy decisions with respect of transferring personal data from the European Economic Area (the “EEA”) to the United Kingdom (the “UK”): one under the EU General Data Protection Regulation and one under the EU Law Enforcement Directive. The two decisions come into…
New EU standard contractual clauses adopted: 18 month deadline to reassess international transfers of personal data from Europe
Today, 4 June 2021, the European Commission has formally adopted new standard contractual clauses for international personal data transfers from the European Union to third countries (“New EU SCCs”).
The 34-page New EU SCCs, which have been adopted to reflect the introduction of the General Data Protection Regulation (“GDPR”) and the…
European Data Protection Board issues opinions on European Commission’s draft UK adequacy decisions
On 13 April 2021, the European Data Protection Board (“EDPB“) adopted two opinions (“Opinions“) concerning draft UK adequacy decisions published by the European Commission which would permit the free flow of personal data from the European Economic Area (“EEA“) to the UK in the post-Brexit world.
The Opinions largely…
First Decision of a German Data Protection Authority on Supplementary Measures for International Personal Data Transfers from Europe
A decision issued on 15 March 2021 by the Bavarian Data Protection Authority (“BayLDA“, publication pending) is the first German enforcement action in connection with last year’s decision of the Court of Justice of the European Union (“CJEU“, “CJEU’s Decision“) on the validity of the European Commission’s Standard Contractual…
New requirements for transferring personal data from Europe: a detailed analysis of the new draft Standard Contractual Clauses published by the European Commission
On 12 November, the European Commission published draft standard contractual clauses for transfers of personal data from the European Union to third countries (“New SCCs“).
Once approved, the New SCCs will replace the previous standard contractual clauses which pre-date the implementation of the General Data Protection Regulation 2016/679 (“GDPR“). The draft…
European Commission publishes draft new standard contractual clauses for international personal data transfers and Article 28 GDPR clauses between EU controllers and processors
On 12 November, the European Commission published two sets of documents:
European Data Protection Board Publishes Guidelines on the Concepts of Controller, Joint Controller and Processor
On 2 September 2020, the European Data Protection Board (“EDPB”) published new Guidelines 07/2020 (“Guidelines”) for public consultation on the concepts of controller and processor under the European General Data Protection Regulation (“GDPR”). Once finalised, the Guidelines will replace the previous Working Party 29 Opinion 1/2010 (WP169), upon which…
Personal Data Transfers to the US and Other Non-EEA Countries
On 16 July 2020, the Court of Justice of the European Union (“CJEU“) examined the validity of the European Commission’s Privacy Shield Decision (Decision 2016/1250 on the adequacy of the protection provided by the EU-US Privacy Shield) as well as the validity of the European Commission’s Decision 2010/87/EC on Standard Contractual Clauses between…
A Global Guide to Employee Data Privacy
The Employment & Benefits group is pleased to announce the publication of A Global Guide to Employee Data Privacy, the latest in our series of global guides.
Benefits of the Guide
Our largest guide to date, it is designed to help employers with operations in more than one country navigate the specific, and increasing,…