Topic
International Data Transfers
455 published works
Privacy World
Upcoming Events in Asia
By Scott Warren
Please join us at these upcoming events to hear the latest trends, updates and insights within the global Data Privacy realm. Thailand & SE Asia: 7th International Arbitration SummitFebruary 25…
CyberAdviser
Chinese Enforcement Actions Reinforce Need for Global Privacy Compliance Strategy
By Madison Etherington, Gregory P. Szewczyk
China’s internet regulatory authority and top prosecutors have recently released a series of enforcement actions and cases, aimed at highlighting enforcement priorities in the data security realm over the last…
China Law Insight
三尺之律四海之人——数据出境监管政策体系结构及实务操作指南（含自贸区数据出境负面清单全量梳理），兼解读《个人信息出境认证办法》
By King & Wood
作者：宁宣凤 吴涵 方禹 2025年10月17日，国家互联网信息办公室、国家市场监督管理总局联合公布《个人信息出境认证办法》，将于2026年1月1日起实施。“按照国家网信部门的规定经专业机构进行个人信息保护认证”是《个人信息保护法》第三十八条所规定的向境外提供个人信息的法定途径之一。 按照官方表述，“《办法》的出台，明确了通过认证方式向境外提供个人信息的具体实施路径，标志着《个人信息保护法》明确的数据出境安全评估、个人信息保护认证、个人信息出境标准合同等出境制度设计的全面落地，也标志着我国数据跨境流动制度体系的全面建立。”《认证办法》出台后，我国完整构建了数据出境监管的法律体系，包含3部法律，《网络安全法》《数据安全法》和《个人信息保护法》；1部行政法规，《网络数据安全管理条例》；4部部门规章，《数据出境安全评估办法》《个人信息出境标准合同办法》《个人信息出境认证办法》和《促进和规范数据跨境流动规定》。 阅读更多
The Formiti Privacy News Blog
Malaysia’s PDPA 2024: What Multinationals Must Know About New Liability, Processor Risks, and Cross-Border Data Transfer Rules
By Formiti
The 2024 amendments to Malaysia’s PDPA directly apply data protection obligations to data processors, not just controllers. This means third-party vendors and contractors handling personal data now face statutory liability…
Privacy Compliance & Data Security
EU Regulators are coming directly after non-EU processors for GDPR violations
By Odia Kagan
I'm a non-EU data processor, no EU regulator is coming after me right? Wrong, says French regulator, CNIL, in new decision fining SaaS provider 1 Million EUR! At issue in…
Connect on Tech
Beyond Borders: What Businesses Need to Know About Global Cyber Laws & Risks
By Justine Phillips, Dr. Lukas Feiler Vinod Bange, Benjamin Slinn, Adrian Brandauer
This article was originally published by AI Journal: https://aijourn.com/beyond-borders-what-businesses-need-to-know-about-global-cyber-laws-risks/ As we enter 2026, global cybersecurity risk and laws are rapidly expanding. Geopolitical tensions, technological advancements, and evolving regulatory frameworks are reshaping…
La Revue
DUAA 2025 : transferts internationaux de données – refonte de l’évaluation des risques au UK
Cet article est le sixième d'une série d’articles[1] examinant les changements apportés par le « Data (Use and Access) Act 2025 » ou Loi DUA par comparaison au RGPD. L'approche du…
Privacy Matters
EU-U.S. Data Privacy Framework Survives First Challenge
By John Magee, Rachel de Souza, Alexa Smith, Giulio Coraggio, Tommaso Ricci, Denise Lebeau-Marianna, Heidi Waem, John Gevertz, Daniel Caprio
The EU General Court has dismissed a French MEP's challenge to the EU-U.S. Data Privacy Framework ("DPF") for the transfer of personal data between the European Union ("EU") and the…
Tax Blog
Executive Order 14117 Comes into Force: Key Considerations for Cross-Border Data Transfers
What Happened? On January 8, 2025, the United States Department of Justice (“DOJ”) issued a final rule (“Final Rule”) to implement Executive Order 14117, “Preventing Access to Americans’ Bulk Sensitive…
Eye On Privacy
New Texas Law Requires Storage of Electronic Health Records in U.S.
By Julia Kadish, Michael Sutton
Starting January 1, 2026, health care practitioners in Texas are required to store electronic health records in the United States under a new Act. It applies to all records- regardless…