Debevoise Data Blog

NOVEMBER 10, 2020

ICO targets the data broking industry : On 27 October, the ICO demanded that Experian make sweeping changes to data protection practices within its direct marketing business within three months or face further enforcement action. We will continue to report on developments as Experian’s appeal progresses.

Data protection 52

Data protection Intellectual Property e-records Machine learning 52

Debevoise Data Blog

JUNE 8, 2023

Third country data transfers : Businesses that transfer personal data outside of the EEA may want to review their transfer mechanisms in light of new guidance on the EU and South East Asia SCCs, and the DPC’s record-breaking €1.2 law” and, in particular, did not address issues identified by the CJEU in the Schrems II decision.

Data protection 52

Data protection Compliance e-records Dispute resolution 52

Debevoise Data Blog

NOVEMBER 21, 2023

Data protection & AI: In particular: (i) the French CNIL published its first set of guidance on GDPR compliance when developing AI tools; and (ii) the UK ICO issued a preliminary enforcement notice against Snap over its AI chatbot, alleging that Snap had not adequately assessed the privacy risks posed to child users of the tool.

Data protection 52

Data protection Compliance Failure-to-appear e-records 52

Debevoise Data Blog

FEBRUARY 27, 2024

GDPR one-stop-shop: Businesses wishing to take advantage of the GDPR one-stop-shop system should take note of a new digest, published by the European Data Protection Board, which analyses the decisions made by so-called Lead Supervisory Authorities in this context.

Data protection 52

Data protection Compliance e-records Court 52

Debevoise Data Blog

FEBRUARY 10, 2021

As covered in our Annual Review , 2020 was a blockbuster year for European data protection. However, the surveillance system was deemed to be neither limited to a specific period, nor to specific employees, as required by local law. Spanish DPA hands CaixaBank record €6m fine. While Notebooksbilliger.de

Data protection 52

Data protection Time-tracking Defendant Court 52

Debevoise Data Blog

FEBRUARY 20, 2023

Both investigations concerned the lawful basis relied on for the processing of user data to deliver personalised advertising. These developments, and more, covered below.

Data protection 52

Data protection Compliance e-records Court 52

Debevoise Data Blog

APRIL 26, 2024

Key takeaways from March include: CNIL data security practice guide: The French DPA published an update of its data security practice guide for data protection officers, chief information security officers, computer scientists and legal experts. To subscribe to the Data Blog, please click here.

Data protection 52

Data protection e-records Compliance Court 52

Debevoise Data Blog

JANUARY 25, 2024

Sensitive personal data: The CJEU has clarified that the processing of special category personal data, such as health data, requires a legal basis under both GDPR Art. 6, meaning that businesses may wish to review their records of processing activities to ensure that both are reflected. 9 and GDPR Art.

Data protection 40

Data protection Court e-records Compliance 40

Debevoise Data Blog

AUGUST 16, 2023

. : Business may want to revisit their cross-border data transfer arrangements following the new adequacy decision for the EU-U.S. Data Privacy Framework, assess whether they are eligible to self-certify and, if they are, whether it makes sense to. Data Privacy Framework (the “DPF”). Data Privacy Framework (the “DPF”).

Data protection 40

Data protection Analytics Compliance Time-tracking 40

Percipient

APRIL 22, 2023

The court-appointed the SBA as a receiver and permitted it to marshal Cardinal’s assets and business records. The law firm produced the documents but sought reimbursement for over $44,000 spent complying with the subpoena. Although the law firm petitioned for costs under Fed. The court denied the reimbursement request.

e-discovery 97

e-discovery Court e-records Litigator 97

Ikigai Law

AUGUST 7, 2023

somebody has to sound the alarm.” – Meryl Streep, The Laundromat The Prevention of Money Laundering Act (or, as its friends call it, the ‘PMLA’) is a long-arm law. Reporting entities must follow several compliance and reporting obligations under the anti-money laundering law. The data law is nearly here!

Data protection 52

Data protection Law Law e-records 52

MatterSuite

OCTOBER 27, 2023

Ever wondered how technology is reshaping the practice of law, an arena known for its venerable traditions and meticulous procedures? E-discovery solutions , a significant part of legal tech, were estimated to be a multi-billion-dollar industry. The global e-discovery market size was projected to reach $17.32

Legal tech 52

Legal tech Legal tech e-discovery Machine learning 52

Debevoise Data Blog

OCTOBER 11, 2021

On August 20, 2021, China’s Standing Committee of the National People’s Congress passed the Personal Information Protection Law (“PIPL”). In particular, the PIPL will make it harder for global companies doing business in China to move information around their global networks if the movement would take data across Chinese borders.

Law 52

Law Law e-records Compliance 52

Debevoise Data Blog

APRIL 14, 2023

The PRA strongly criticised Wyelands’ lack of record-keeping policies and procedures to manage the use of WhatsApp communications, which the PRA found had prevented the bank’s Board and Risk function from effectively scrutinising transactions, as well as hindering the PRA’s supervision and investigation activities.

e-records 52

e-records Compliance e-filing Data protection 52

Debevoise Data Blog

OCTOBER 10, 2023

A foreign business not directly subject to GDPR may nevertheless be required to comply with GDPR restrictions if they have entered Standard Contractual Clauses or signed-up to the EU-US Data Protection Framework to facilitate the receipt of personal data. How will you ensure you deal with personal data transparently?

Data protection 52

Data protection e-records Compliance Law 52

Debevoise Data Blog

NOVEMBER 29, 2023

As one of the few well-progressed AI-specific laws currently in existence, the EU AI Act has generated substantial global attention. While some countries have indicated that they intend to allocate responsibility to their existing data protection authorities, others (such as Spain ) will create specific AI-focused agencies.

Data protection 52

Data protection Compliance e-records Law 52

Clio

OCTOBER 8, 2024

With a record 2,500 in-person and 1,500 virtual attendees, Jack highlighted Clio’s growth alongside AI’s transformative role in the legal profession, as outlined in the latest Legal Trends Report. These are firms that truly embody our mission to transform the legal experience for all. As the Robinson O.

Time-tracking 59

Time-tracking Judge Law firm Data protection 59

Lawmatics

JULY 2, 2024

Client intake in a law firm is an important process for onboarding new clients. Legal client intake automation can organize the compilation of essential data, such as personal information, contact details, preferences, and other relevant details, depending on the nature of the business. What is client intake in law?

Client Intake 40

Client Intake Software Time-tracking Legal software 40

Berkley Technology Law Journal

NOVEMBER 18, 2022

Legislation empowers the European Commission to designate certain tech companies as gatekeepers and impose obligations on them in relation to data, advertising, e-commerce, interoperability, and the commercial relationships between the service providers customers and end users. Dr. Jürgen Kühling. Mahima] 2:56 And I’m Mahima.

Law 100

Law Law Data protection Court 100

Berkley Technology Law Journal

NOVEMBER 18, 2022

Legislation empowers the European Commission to designate certain tech companies as gatekeepers and impose obligations on them in relation to data, advertising, e-commerce, interoperability, and the commercial relationships between the service providers customers and end users. Dr. Jürgen Kühling. Mahima] 2:56 And I’m Mahima.

Law 100

Law Law Data protection Court 100

Ikigai Law

AUGUST 4, 2023

India’s Digital Personal Data Protection Bill 2023 was introduced in Parliament on 3 August 2023. Once passed, the law will govern how businesses collect and use individuals’ data. Read on for a quick explainer of what the law means for you. An overview and summary of the law is on our blog. Who is affected?

Data protection 52

Data protection Law Law e-records 52

Debevoise Data Blog

JULY 31, 2023

Data Privacy Framework (the “DPF”). The decision enables businesses in Europe to transfer personal data to DPF-certified U.S. businesses without having to implement additional data protection safeguards. Data subjects may lodge complaints through both U.S.- In Schrems II , the CJEU found that U.S.

Data protection 52

Data protection Dispute resolution e-filing e-records 52

Debevoise Data Blog

JANUARY 14, 2022

5] In a motion passing 3-2 on a party-line vote, the Democratic commissioners removed the Chief Administrative Law Judge (the “ALJ”) from the role of Presiding Officer in Magnuson-Moss rulemaking; Chair Khan or her designee will instead assume the role of Presiding Officer, giving Chair Khan even greater control over future rulemaking efforts. [6]

Compliance 52

Compliance Court Litigator Litigation 52

Debevoise Data Blog

JANUARY 16, 2025

Department of Justice (DOJ) issued the Final Rule on Preventing Access to Sensitive Data, creating a comprehensive export control regime to restrict the transfer of bulk sensitive personal and government-related data to foreign adversaries deemed threats to U.S. Engaging in data-mapping exercises may alleviate this burden.

Compliance 52

Compliance Due diligence e-records Time-tracking 52