Topic
Data Processing
189 published works
The Data Advisor
Non-EEA Based Vendors Caught by GDPR’s Long-Arm Provisions
By Jan Dhont, Nikolaos Theodorakis
The General Data Protection Regulation (GDPR) does not just impact companies located in the European Economic Area (EEA). It has a “long-arm” provision which may subject foreign companies to its…
Privacy Compliance & Data Security
France Offers Guide for Processing COVID-19 Related Data Under GDPR
By Odia Kagan
France's Data Processing Authority CNIL weighs in on Coronavirus and GDPR. Employers should NOT: Collect in a systematic and generalized manner, or through individual inquiries and requests, information relating to…
Inside Privacy
Italian Supervisory Authority Publishes COVID-19 Guidance
By Dan Cooper
On March 2, 2020, the Italian Supervisory Authority (“Garante”) published a “statement” in which it clarifies how companies should process personal data in the context of their efforts for preventing…
Inside Cybersecurity & Privacy Law
10 Commandments for Processing Personal Data Through Video Devices in the EU
By Mark A. Prinsley, Oliver Yaros
On January 29, 2020, the European Data Protection Board ("EDPB") released Guidelines 3/2019 on processing personal data through video devices ("Guidelines"). The Guidelines shed light on the EU General Data…
Privacy and Cybersecurity
NIST Releases a Standard for Privacy
By Jon Washburn
As states fill the legal void for consumer privacy rights,[1] a new federal standard has emerged to assist companies with their compliance efforts. The National Institute of Standards and Technology…
Inside Cybersecurity & Privacy Law
EDPB Issues Draft Guidelines on Processing Personal Data for Connected Vehicles
By Oliver Yaros
The European Data Protection Board (“EDPB”), an EU body of national supervisory authorities and the EU Commission, released today the text of draft guidelines on processing personal data in the…
Privacy Zone
NIST Privacy Framework Version 1.0
The National Institute of Standards and Technology (NIST) released version 1.0 of its Privacy Framework: A Tool for Improving Privacy Through Enterprise Risk Management, which follows the structure of the…
Cleary Cybersecurity and Privacy Watch
UK ICO Finally Issues GDPR Fine
By Emmanuel Ronco, Natalie Farmer, Chloe Hassard
The UK Information Commissioner’s Office (“ICO”) issued its first penalty notice under the GDPR in December 2019. Despite publishing notices of its intention to fine Marriott and British Airways in…
HL Chronicle of Data Protection
Washington State to Try Again for a Comprehensive Privacy Law
By Mark Brennan, Scott Loughlin, Timothy Tobin, Bret Cohen, Melissa Bianchi, Filippo Raso
Washington State is already shaping up as a center of state privacy legislation for 2020. Last year, SB 5376 gained significant traction in the legislature, passing the state Senate almost…
HL Chronicle of Data Protection
Should I Be Worried About the GDPR? – EDPB’S Guidelines on the GDPR’S Territorial Scope
By Víctor Mella, Santiago de Ampuero
Does the GDPR really apply to my company? From a data protection standpoint, this is the first thing that comes to mind within non-EU companies. In many cases, the GDPR…