Topic
Data Transfer
1,085 published works
China Law Insight
Interpretation of the Measures on Security Assessment of Cross-border Data Transfer (Draft for Comment)
By King & Wood
According to the official website of the Cyberspace Administration of China (“CAC”), the Measures on Security Assessment of Cross-border Data Transfer (Draft for Comment) (the "Measures") was released for public…
Data Privacy Dish
Cross-border transfer master class: Does a US controller need to use the SCCs when it onward transfers data received from a European to a US processor?
By David A. Zetoony, Andrea C. Maciejewski, Carsten A. Kociok
Companies are allowed to transfer personal data outside the European Economic Area (EEA) if they are (1) transferring data to an entity that is within a country that has been…
Data Privacy Dish
Cross-border transfer master class: Does a US controller need to use the SCCs when it onward transfers data received from a European to another controller in the US?
By David A. Zetoony, Andrea C. Maciejewski, Carsten A. Kociok
Companies are allowed to transfer personal data outside the European Economic Area (EEA) if they are (1) transferring data to an entity that is within a country that has been…
Data Privacy Dish
Cross-border transfer master class: Does a US controller need to use the SCCs when it receives data directly from a European?
By David A. Zetoony, Andrea C. Maciejewski, Carsten A. Kociok
No. Companies are allowed to transfer personal data outside the European Economic Area (EEA) if they are (1) transferring data to an entity that is within a country that has…
Data Privacy Dish
Cross-Border Transfer Master Class: Onward Transfers from Controllers in the US to Another Controller in the US
By David A. Zetoony, Andrea C. Maciejewski, Carsten A. Kociok
Companies are allowed to transfer personal data outside the European Economic Area (EEA) if they are (1) transferring data to an entity within a country recognized by the European Commission…
Data Privacy Dish
Cross-Border Transfer Master Class: Does a US Controller Need to Use the SCCs When It Receives Data Directly from a European?
By David A. Zetoony, Andrea C. Maciejewski, Carsten A. Kociok
No. Companies are allowed to transfer personal data outside the European Economic Area (EEA) if they are (1) transferring data to an entity within a country recognized by the European…
Technology Law Dispatch
GDPR: Is it a transfer? Is it not a transfer? It’s EDPB guidance on Chapter V
The European Data Protection Board (EDPB) recently adopted Guidelines 05/2021 (the Guidelines) on the interplay between what it means to be outside the European Economic Area (EEA) but directly applicable…
Privacy Compliance & Data Security
You Use a US-Based Sub Processor, You Lose, German Court Says
By Odia Kagan
If you use a U.S.-based sub processor (even for data processed in the EU), you lose, the German administrative court of Wiesbaden said in an interim decision. No transfer. No…
Data Privacy Dish
When a European Union data subject transmits data directly to a US company, is an adequacy measure required?
No. The GDPR requires that when a “controller or processor … transfer[s] … data to a third country” that is not considered to have data protection laws analogous to those…
La Revue
Projet de lignes directrices du CEPD clarifiant la notion de transfert de données vers un pays tiers, y compris vers une organisation hors UE soumise au RGPD (au titre de son article 3)
Le 18 novembre 2021, le Comité Européen de la Protection des Données, le « CEPD »[1] a publié (en anglais) un projet de lignes directrices (ci-après « Lignes directrices ») sur l'interaction entre l'application…