Topic
Data Transfer
1,085 published works
Data Privacy Dish
Data Transfers from Data Subjects in the EEA to non-EEA Processors of EEA Controllers
By David A. Zetoony, Andrea C. Maciejewski
Controller A (Non-EEA) → Processor Z (Non-EEA) → Sub-processor Y (EEA) → Controller A (Non-EEA) (same country) Visual Description and Implications Transfer 1: No mechanism needed. Company A is not…
Media & Privacy Risk Report
UK-US Data Transfers Post Brexit
By Jonathan Maude, Jonathan Edgelow
The UK government’s reform of data protection laws and the mechanics of cross-border data transfers has accelerated in the first half of 2022. Various European regulators, including the UK’s Information…
Global Policy Watch
China Releases Measures for a Security Assessment of Cross-Border Data Transfers To Take Effect in September 2022
By Yan Luo, Allan Topol
In addition to the two developments we reported on in our last blog post, on July 7, 2022, the long-waited, final version of the Measures for Security Assessment of Cross-border Data Transfer (《数据出境安全评估办法》,…
Inside Privacy
China Releases Measures for a Security Assessment of Cross-Border Data Transfers To Take Effect in September 2022
By Yan Luo
In addition to the two developments we reported on in our last blog post, on July 7, 2022, the long-waited, final version of the Measures for Security Assessment of Cross-border…
Inside Privacy
Cross-Border Data Transfer Developments in China
By Yan Luo
After more than seven months since China’s Personal Information Protection Law (《个人信息保护法》, “PIPL”) went into effect, Chinese regulators have issued several new (draft) rules over the past few days to…
Global Policy Watch
Italian Garante bans use of Google Analytics
By Dan Cooper
On June 23, 2022 the Italian data protection authority (“Garante”) released a general statement (here) flagging the unlawfulness of data transfers to the U.S. resulting from the use of Google…
Data Protection Report
Points to note on the European Commission’s questions and answers on the Revised Standard Contractual Clauses (SCCs)
By Marcus Evans, Shiv Daddar (UK)
On May 25th 2022, the European Commission published a series of questions and answers on the SCCs to be used between controllers and processors within the European Economic Area (EEA),…
RopesDataPhiles
Transatlantic Data Flows – Where Are We Now?
Since the joint announcement by US President Joe Biden and European Commission President Ursula von de Leyen, on 25 March 2022, of an agreement in principle on the long-awaited replacement…
Data Privacy Dish
Data transfers that are exempt from the definition of ‘sale’
The term “sale” is defined slightly differently between and among modern U.S. data privacy statutes with some statutes defining the term as including exchanges of personal information in return for…
Privacy Compliance & Data Security
Where Is a Transfer? Datatilsynet Says Almost Everywhere!
By Odia Kagan
Let's say you are an EU company. You engage a processor. Data is processed in the EU. There is no transfer. But in the processor-sub-processor data processing agreement, the data…