US/EU Safe Harbor Invalidated: Time for Model Contracts and Binding Corporate...
The agreement that allowed the transfer of personal data between businesses in the United States and the European Union was invalidated by the European Court of Justice on October 6, 2015. This “safe...
View ArticleHappy New Year! Tick. Tock. Let the countdown to GDPR begin!
As you put together your resolutions and plans for the new business year, it is important to remember that the European Union’s (“E.U.”) General Data Protection Regulation (“GDPR”) will go into effect...
View ArticleGDPR Quick Hits: Some Last Minute Thoughts as May 25th draws nigh
As we assist clients with preparing for GDPR compliance before and after this Friday’s effective date, I thought to share some quick thoughts on the law and what we are seeing here at Taft. “GDPR...
View ArticleSo goes the EU, so goes the world….Brazil’s new privacy law is on the horizon.
As we have often said here in the US, “so goes California, so goes the country” when it comes to laws of all kinds, not just those addressing privacy. Well, globally, the same can be said of the impact...
View ArticleOh the Times (and the Clauses), They are a-Changing’
Each month, new developments in European privacy law demonstrate both how the times are changing, and how the 2010 Standard Contractual Clauses are increasingly antiquated. Last month, the Commission...
View ArticleEurope Commission Releases Updated Standard Contractual Clauses for GDPR...
The European Commission has finally released the first updates to the standard contractual clauses (SCCs) required for certain cross-border transfers in more than 10 years. The new SCCs include...
View ArticleFreezing the Cloud: Microsoft Takes a Hardline on Data Privacy in the EU
The European Union’s (EU) General Data Protection Regulation (GDPR) sets out requirements for transferring personal data outside the European Economic Area. These requirements not only restrict the...
View ArticleOut with the Old and In with The New: European Commission’s New Standard...
It is the end of an era: September 27, 2021, officially marks the termination date for the Standard Contractual Clauses (SCCs) grace period set forth by the European Commission (“Commission”). In June...
View ArticleNew Personal Data Transfers out of the UK: Like the GDPR, but Different
This week, the new rules for personal data transfers to countries outside the United Kingdom (“UK”) went into effect. As of March 21, 2022, businesses transferring personal data from the UK to...
View ArticleData Transfers and Beyond: China Moves Closer to Finalizing Draft Provisions...
In the past year, we have seen an increase in the number of countries developing/updating legal frameworks (such as model agreements) that permit the transfer of personal data abroad. Transfer...
View ArticleWindows Pain? German Report Casts Doubt on Microsoft GDPR Compliance
Two weeks ago, the German Conference of the Independent Data Protection Authorities of Germany (Datenschutzkonferenz or “DSK”) released a report looking into Microsoft 365’s (Microsoft) compliance...
View ArticleDon’t Call It A Comeback: EU-U.S. Data Privacy Framework Inches Closer to...
On December 13, 2022, the European Commission published a draft adequacy decision for the EU-U.S. Data Privacy Framework (“EU-U.S. DPF or DPF”) signaling the potential return of the framework allowing...
View ArticleNothing Neutral about the New Swiss Federal Act on Data Protection
Switzerland is implementing new legislation to better protect its citizens’ data (“revFADP”), replacing the longstanding Federal Act on Data Protection of 1992. The revFADP improves the processing of...
View ArticleFull Steam Ahead: EU’s Digital Services Act Creates Global Impact
On November 16, 2022, the Digital Services Act (DSA) took effect across the European Union (EU). The DSA establishes new regulations applicable to “online intermediaries,” such as online marketplaces,...
View ArticleGermany’s Gearing up for European Health Data Space (EHDS) Compliance
The EU is gearing up for massive reform concerning the use and accessibility of health data, and Germany is taking note. Recently, Germany proposed several draft legislation focusing on the use of...
View ArticleThe EU AI Act – What Businesses Need to Know
Special thanks to Taft summer associate Tanner Wilburn for his significant contributions to this post. On July 12, 2024, the European Union’s Artificial Intelligence Act (AI Act) was published in the...
View ArticleAnother Update Already? New EU Standard Contractual Clauses on the Horizon to...
Three years after the European Commission’s (Commission) adoption of the updated Standard Contractual Clauses (SCCs), new clauses are on the horizon. The Commission announced a recent initiative in...
View Article