We first posted this alert on 17 March 2023 and have updated this to reflect recent developments. Introduction In September 2022 the UK government introduced the “Retained EU Law (Revocation and Reform) Bill” (“the Bill”) which aims at amending, repealing or replacing retained EU law that, in the government’s view, “is no longer fit for Read more »
Jonathan Armstrong – Original Gangster Great Gentleman in Compliance
Cordery’s Jonathan Armstrong was recently a guest on the well-known Great Women in Compliance (GWIC) Podcast, co-hosted by Lisa Fine and Mary Shirley. Jonathan was invited onto the podcast to kick off the 2022 program. GWIC said of the podcast: “While Mary and Lisa usually start out each quarter with a joint discussion, this time Read more »
UK Proposals & Consultation for Data Transfers, including Standard Contractual Clauses/International Data Transfer Agreement (IDTA)
Introduction The UK’s data protection regulator the ICO has now finalised and published materials for international data transfers including with regard to Standard Contractual Clauses. This article looks at this latest development in brief. What’s this all about? By way of quick background, under EU GDPR, international data transfers can only be made in certain Read more »
New EU Standard Contractual Clauses
In this film Cordery’s Jonathan Armstrong & André Bywater talk through the issues with data transfer after the changes to the EU Standard Contractual Clauses (also called EU Model Terms). They look at the reasons behind these changes, EDPB guidance and give practical tips on compliance. The film builds on Cordery’s guidance here https://www.corderycompliance.com/edpd-guidance-international-data-transfers/ & Read more »
European Data Protection Board Issues Guidance about International Data Transfers
Introduction The European Data Protection Board (EDPB) recently finalised and published its guidance on international data transfers entitled “Recommendations 01/2020 on measures that supplement transfer tools to ensure compliance with the EU level of protection of personal data” (“Recommendations”). This article looks at this development in brief. What’s this all about? Under General Data Protection Read more »
Client Alert: EU Data Protection Adequacy Decisions Approved
Introduction On 28 June 2021, as we predicted in our earlier alerts, the European Commission adopted two adequacy decisions for the UK, one under the General Data Protection Regulation (GDPR) and the other for the Law Enforcement Directive (LED). The decisions are similar to earlier drafts and include a so-called “Sunset Clause” which means that Read more »
EU Finalises New Model/Standard Contractual Clauses for International Data Transfers
Introduction The European Commission has now finalised and published new Model/Standard Contractual Clauses for international data transfers. This article looks at this latest development. What’s this all about? Under the previous EU data protection regime and the General Data Protection Regulation (GDPR) international data transfers can only be made in certain ways and subject to Read more »
UK Court Ruling Limits Liability of Data Protection Representatives
What’s this all about? In the case of Baldo Sansó Rondón v. LexisNexis Risk Solutions UK Ltd. the High Court in London, UK recently gave an important ruling about EU GDPR Data Protection Representatives and liability. This article looks at the issues. Some data protection terms are used in this note which are explained at Read more »
EU Whistleblowing Legislation FAQs
We first published these FAQs in June 2020 and we have made some changes to reflect more recent developments Introduction In 2019 the EU introduced a new law to enable whistleblowers to report about EU law irregularities – this law also harmonises the minimum level of protection available to whistleblowers across the EU. These new Read more »
Client Alert: Locatefamily.com fined €525,000 for failure to appoint a DPR
Introduction One of the most overlooked obligations in GDPR is the requirement for organisations who are subject to GDPR but outside the EU to appoint a Data Protection Representative (DPR). But that’s likely to have much more attention now with the fine announced this morning for Locatefamily.com from the Netherlands DPA (the Autoriteit Persoonsgegevens or Read more »
- 1
- 2
- 3
- …
- 10
- Next Page »