Topic
Personal Data
336 published works
Texas Construction Law Blog
Constructing Compliance: What the Construction Industry Needs to Know about the Texas Data Privacy and Security Act
*Co-author Lynn Rohland The Texas Data Privacy and Security Act (TDPSA) is now in full effect, and this comprehensive legislation establishes stringent mandates on how consumer-related personal data of Texas…
Privacy Matters
China: New definition and guidelines on Sensitive Personal Information now finalised
By Carolyn Bigg, Amanda Ge, Venus Cheung, Qiuyang Zhao
We previously wrote about proposed changes to the definition of sensitive personal information under a June 2024 draft of the Guide for Sensitive Personal Information Identification ("Guide"). The Guide has…
The HB Blog
FAQs on Mexico Data Protection Law
Mexico Data Protection Law 1. What is the Federal Law on the Protection of Personal Data Held by Private Parties? Answer: This is Mexico’s primary legislation governing the collection, processing,…
China Law Insight
从某全球网约车服务运营商违规跨境传输个人数据处罚案例再看欧盟与中国的数据出境治理
By King & Wood
作者：宁宣凤 吴涵 徐梦悦 陈琳珺 2024年7月22日，荷兰数据保护机构（Autoriteit Persoonsgegevens，下称“AP”）基于欧盟《一般数据保护条款》（下称“GDPR”）的规定发布一项最终调查决定，该决定对某全球网约车服务运营商（下称“U公司”）处以2.9亿欧元罚款，原因在于U公司未能根据GDPR第五章有关个人数据跨境传输的合规要求向欧盟境外传输司机的个人数据。本次案件作为2024年期间就违规跨境传输个人数据活动施加最高处罚力度的案件，自处罚决定发布之日起即引起了全球范围内的广泛关注，同时也为各个司法辖区内开展数据跨境传输活动的企业敲响了合规警钟。 在此，本文拟从本案件所涉及的事实背景、核心争议焦点说开去，以近距离观察GDPR中有关数据跨境传输的合规要求在实践环境中的演绎与欧盟数据保护机构的执法思路，并再度思考与展望中国有关数据跨境治理路径的脉络与未来。 阅读更多
The Global Privacy Watch
Malaysian Parliament Passes Personal Data Protection (Amendment) Bill 2024
The Personal Data Protection (Amendment) Bill 2024 (“PDPB”) was at last passed by the Malaysian Parliament at the end of July. After Royal Assent and publishing, it will become law…
Privacy Compliance & Data Security
Who Put the PI in My AI?
By Odia Kagan
So, you want to onboard an AI solution that contains personal information. But how? I recently discussed this and more during a BigID webinar. Here are some questions i ask…
Eye On Privacy
Maryland, the Old Line State, Creates New Lines with Consumer Privacy Law
By Liisa Thomas, Kathryn Smith
Maryland’s new comprehensive data privacy law, the Maryland Online Data Privacy Act, was recently signed into law by Governor Moore. This brings the total number of state “comprehensive” privacy laws…
Privacy World
China Finalizes New Regulations to Relax Personal Data Exports from China
By Lindsay Zhu, Scott Warren, Haowen Xu
Nearly six months after the Cyberspace Administration of China (CAC) was first introduced for public consultation, with its draft regulations proposing to ease outbound data transfers from China (Draft Regulations)…
Privacy & Information Security Law Blog
CNIL Publishes Latest Edition of Its Practice Guide for the Security of Personal Data
On March 26, 2024, the CNIL published the 2024 edition of its Practice Guide for the Security of Personal Data, which is intended to support organizations in their efforts to…
China Law Insight
行至水穷处，坐看云起时——如何理解和应对美国限制访问敏感个人数据行政命令
By King & Wood
作者：宁宣凤 吴涵 徐梦悦 张凯勋 王澈 高彤玥 2024年2月28日，美国总统拜登正式签署第14117号行政命令，即《关于防止受关注国家获取美国人大量敏感个人数据和美国政府相关数据的行政命令》（Executive Order on Preventing Access to Americans’ Bulk Sensitive Personal Data and United States Government-Related Data by Countries of Concern）（“《14117行政令》”），指示美国司法部颁布条例，以禁止或限制美国主体进行会导致中国、俄罗斯等6个“受关注国家”和相关主体访问美国人敏感个人数据（特定种类的个人识别符、地理位置数据和相关传感器数据、生物特征标识符、人类组学数据、个人健康数据、个人财务数据）和美国政府相关数据的交易。 阅读更多