This summer the ICO has issued significant fines in relation to high profile data breaches since acquiring its new “GDPR charged” powers. With less publicity, but nonetheless important given the increasing awareness of the rights of data subjects to claim damages for breaches of data protection legislation, the Ministry of Justice has recently announced that there are going to be some changes to the Civil Procedure Rules (“CPR”) from 1 October 2019 onwards as regards…

The California  Consumer Privacy Act (“CCPA”), the most expansive state privacy law in US history, will take effect on January 1, 2020. Our team will share with readers a series of alerts on the major elements of the CCPA. The first in the series – The California Consumer Privacy Act Series – Part 1: Applicability – focuses on the Act’s applicability, including who it will affect, personal information as defined by the CCPA, and the…

On February 20, 2019, members of California’s Privacy and Consumer Protection Committee (“Committee”) held a hearing at the State Assembly to review concerns from various stakeholders regarding California’s Consumer Protection Act (“CCPA”). In particular, how the law should be amended prior to its 2020 effective date. Indeed, in its present formulation, the CCPA has given rise to a number of controversies. For example, even though not discussed during the hearing, whether the Act should, as…

What’s New? On 5 September 2018, the EU Commission commenced proceedings to adopt an Adequacy Decision in relation to Japan’s protection of personal data by issuing a draft ‘Commission Implementing Decision’. This is an important step towards the culmination of discussions between the EU and Japan that were initiated in January 2017, with the aim of permitting the free flow of personal data between the parties. These discussions were part of the broader free trade…

Last month, the Department of Health and Human Services Office for Civil Rights (“OCR”) issued two helpful new HIPAA guidance documents regarding research uses and disclosures of PHI, fulfilling a mandate in the 21st Century Cures Act (Public Law 114-255) (the “Act”).  Although the documents merely reaffirm prior guidance in many places, the documents also contain helpful new information and serve to collect prior guidance spread in numerous places into a single location.  The first …

The latest data privacy Alert from the Squire Patton Boggs’ Data Protection & Cybersecurity team covers news from the week of 6 November 2017.            …