Inside Privacy

FEBRUARY 1, 2024

For example, transfers could create a conflict with EU or Member State law regarding the protection of the fundamental rights and freedoms of individuals, national security or defense, the protection of commercially sensitive data, or the protection of intellectual property rights.

Intellectual Property 72

Intellectual Property State law Court Compliance 72

Legal IT Group

JANUARY 22, 2024

With this regard, it is essential to know about the privacy legislation of this country since, nowadays, most internet businesses process the personal data of their clients, and they should do it in compliance with data protection laws. ” Thus, the Australian Privacy Act also aims to have a GDPR level of data protection.

Data protection 52

Data protection Compliance Litigator Litigation 52

Clio

NOVEMBER 16, 2023

For the 24-hour biennial requirement for experienced attorneys, (1) four hours must cover ethics and professionalism, (2) one hour must cover diversity, inclusion, and elimination of bias, and (3) one hour must cover cybersecurity, privacy, and data protection.

Attorney 52

Attorney Legal education Data protection Court 52

Debevoise Data Blog

MAY 23, 2022

Under ColoPA, controllers will also have to recognize global opt-out signals as of July 1, 2024—six months before this requirement is operative in Connecticut. Under the CCPA/CPRA, businesses must provide two methods for consumers to opt-out of the sale of their personal data. CTPA § 6(e)(1)(A)(ii).

Law 40

Law Law Compliance Attorney 40

Debevoise Data Blog

MAY 28, 2024

EDPB “Consent or pay” models: Businesses operating large online platforms should consider the European Data Protection Board’s recent opinion indicating that “consent or pay” models are unlikely to be GDPR-compliant. These developments, and more, are covered below.

Data protection 52

Data protection Compliance Law Law 52

Debevoise Data Blog

SEPTEMBER 23, 2024

Our top-five European data protection developments from August are: Uber fined for personal data transfer: The Dutch Data Protection Authority fined Uber €290 million for the unlawful transfer of European drivers’ personal data to the U.S., without sufficient safeguards.

Data protection 52

Data protection Court Software Compliance 52

Debevoise Data Blog

JANUARY 17, 2025

Our top-eleven European data protection developments for the end of 2024 are: EU Cyber Resilience Act: The Council of the European Union approved the Cyber Resilience Act , introducing cybersecurity requirements for digital products sold in the EU. The UK Upper Tribunal did not consider the provisions under the UK GDPR.

Data protection 52

Data protection Compliance Court State law 52

Eric Goldman

AUGUST 16, 2024

I’m pleased to announce the 2024 edition (15th edition) of my Internet Law casebook, Internet Law: Cases & Materials. Blockbuster with the North Carolina Supreme Court decision in Canteen v. I also did a quick calculation of the issuing courts represented among the 22 principal opinions. I replaced Harris v. The Harris v.

Dispute resolution 116

Dispute resolution Law Law Court 116

Debevoise Data Blog

APRIL 26, 2024

Key takeaways from March include: CNIL data security practice guide: The French DPA published an update of its data security practice guide for data protection officers, chief information security officers, computer scientists and legal experts. These developments, and more, are covered below.

Data protection 52

Data protection e-records Compliance Court 52

Debevoise Data Blog

SEPTEMBER 27, 2023

The AEPD held that a DPO cannot hold a position that leads them to determine the purposes and means of data processing. These developments, and more, covered below.

Data protection 52

Data protection Compliance e-filing Court 52

Debevoise Data Blog

AUGUST 27, 2024

Building on prior European guidance , the French and Irish DPAs published guidance on the deployment of generative AI, large language models and data protection. To that end, the EDPB proposed designating DPAs as the “national competent authorities” under the AI Act to create a single point of contact.

Data protection 52

Data protection Compliance Litigator Litigation 52

Debevoise Data Blog

NOVEMBER 21, 2023

Data protection & AI: In particular: (i) the French CNIL published its first set of guidance on GDPR compliance when developing AI tools; and (ii) the UK ICO issued a preliminary enforcement notice against Snap over its AI chatbot, alleging that Snap had not adequately assessed the privacy risks posed to child users of the tool.

Data protection 52

Data protection Compliance Failure-to-appear e-records 52

Inside Privacy

JULY 17, 2023

The Commission provides greater clarity on the process by which EU data subjects can submit complaints through the two-tier redress mechanism established under EO 14086 “concerning an alleged violation of U.S. The decision specifies that an EU data subject must submit a complaint to a Data Protection Authority (“DPA”) in an EU Member State.

Data protection 52

Data protection Compliance Court Law 52

Debevoise Data Blog

JANUARY 25, 2024

Sensitive personal data: The CJEU has clarified that the processing of special category personal data, such as health data, requires a legal basis under both GDPR Art. The rulings arose at the request of both the German and Lithuanian courts, following local administrative fines. The Court ruled that: “Scoring” (i.e.,

Data protection 40

Data protection Court e-records Compliance 40

Eric Goldman

FEBRUARY 15, 2024

.] * * * The European Union’s Digital Services Act (“DSA”), a significant legislative act of 93 articles and 156 recitals, will become fully effective from this Saturday, February 17, 2024. The DSA will require much agency and court interpretation to give legal certainty to intermediaries and the recipients of their services.

Due diligence 106

Due diligence Data protection Compliance Court 106

Technology Law Dispatch

FEBRUARY 7, 2024

With cybersecurity becoming a board-level issue, compliance officers, lawyers, board members, and business drivers are looking for official guidance or recommendations on cybersecurity measures to protect business, customers, and the wider economy. Whose guidance to use? In the US, NIST has a resource page for Critical Infrastructure: [link].

Data protection 64

Data protection Compliance Court Lawyer 64

new tech law blog

JUNE 22, 2023

This is because the obligations and prohibitions imposed on gatekeepers will either directly or indirectly vest other groups with rights they can pursue before national courts. The DMA vests these entities with certain rights, directly or indirectly, which they can enforce before national courts (Art. DMA recital 12). 5, 6 and 7 DMA.

Compliance 52

Compliance Data protection Court Software 52

Debevoise Data Blog

FEBRUARY 27, 2024

GDPR one-stop-shop: Businesses wishing to take advantage of the GDPR one-stop-shop system should take note of a new digest, published by the European Data Protection Board, which analyses the decisions made by so-called Lead Supervisory Authorities in this context.

Data protection 52

Data protection Compliance e-records Court 52

Inside Privacy

JANUARY 17, 2024

On January 15, 2024, the European Commission released its report on the first review of the functioning of the existing eleven adequacy decisions adopted under the pre-GDPR framework. Organizations should welcome the continued stability and legal certainty offered by the retention of the existing adequacy decisions.

Data protection 72

Data protection Court Law Law 72

Debevoise Data Blog

NOVEMBER 2, 2022

Digital Services Act to apply from 2024 or four months from designation as a very large online platform or search engine What happened : On 4 October 2022, the EU adopted the much-anticipated Digital Services Act (“DSA”).

Data protection 52

Data protection Compliance Machine learning Court 52

Debevoise Data Blog

JANUARY 16, 2025

DOJ Issues Landmark Rules on Sensitive Data On December 27, 2024, the U.S. Department of Justice (DOJ) issued the Final Rule on Preventing Access to Sensitive Data, creating a comprehensive export control regime to restrict the transfer of bulk sensitive personal and government-related data to foreign adversaries deemed threats to U.S.

Compliance 52

Compliance Due diligence e-records Time-tracking 52