The Transatlantic Debate | The 2nd Annual Data Privacy Conference USA

EDPB Wants Schrems II Compliance Now, but Clearer Guidance is Months Away

The European Data Protection Board (“EDPB”) plans to release further guidance in the coming months on specific steps that companies can take to export personal data from the European Economic Area to ...
Another Privacy Shield Bites the Dust

Another Privacy Shield Bites the Dust

While not outright eliminating the Swiss-U.S. Privacy Shield, the Swiss Data Protection Authority, the Federal Data Protection and Information Commissioner (FDPIC), announced in a position paper on September 8, 2020 that he no longer ...
Supplementing SCCs to Solve Surveillance Shortfalls

Supplementing SCCs to Solve Surveillance Shortfalls

This article was originally published in the IAPP Daily Dashboard on August 19, 2020. By invalidating the EU-U.S. Privacy Shield but not rejecting wholesale the use of standard contractual clauses to transfer ...
€16.7M Direct Marketing Fine Issued by Italian Authority

€16.7M Direct Marketing Fine Issued by Italian Authority

On July 9, 2020, the Italian Data Protection Authority (“Garante”) issued a 16.7 million euro fine against Wind Tre S.p.A., an Italian telecom operator, for a number of unlawful data processing activities ...
Privacy Shield

Privacy Shield Dies, SCCs Survive (With a Catch): CJEU

Today the Court of Justice of the European Union (“CJEU”) ruled that: The EU-U.S. Privacy Shield framework (“Privacy Shield”) is no longer a valid mechanism for exportation of personal data from the ...
CLOUD Act Bilateral Data Access Agreement

Preparing for the First CLOUD Act Bilateral Data Access Agreement

The British Are Coming . . . and They’re Bringing Their Own Legal Process Starting on July 8, 2020, for the first time, U.S. companies will be receiving binding legal process directly ...
Notable GDPR Enforcement Actions in the First Year and Key Takeaways

Notable GDPR Enforcement Actions in the First Year and Key Takeaways

In the year since the General Data Protection Regulation (“GDPR”) went into effect on May 25, 2018, companies worldwide have been adapting to the new privacy rules—and EU regulators have also been ...
New EU Cookie Consent Recommendation from Advocate General

New EU Cookie Consent Recommendation from Advocate General

On March 21, 2019, Advocate General Maciej Szpunar (“Advocate General” or “AG”) of the Court of Justice of the European Union (“CJEU”) issued an opinion in which he recommended that the Court ...