New UK data protection law proposals
Government sets out response to consultation Commentary Following its September 2021 consultation on reform of UK data protection law, on 23 June 2022 the UK …
Data protection
Data protection, privacy and cyber
Personal data export from the UK
UK sets out two alternatives to provide adequate contractual protection for the export of personal data from the UK What happened? In February 2022, the …
UK’s proposed new data protection law
New UK data protection law: worthwhile divergence or political point-scoring? What is proposed? On 10 September 2021, the UK government published its proposals to reform …
EU finds UK has adequate protections for personal data
On 28 June 2021, the EU Commission found that the UK provides adequate protection for personal data, enabling personal to freely flow from the EU …
Using the new EU standard clauses to enable cross-border data export
From 27 June 2021, organisations will be able to adopt new ‘standard contractual clauses’ (SCCs) to permit lawful export of personal data from the EU …
Data export: EU provides more clarity after Schrems II
In documents published last week, the EU provided some welcome clarity on how organisations should address the invalidation of Privacy Shield as a basis for …
EDPB guidance on ‘supplemental measures’ for data export
On 10 November, the European Data Protection Board adopted a recommendation on supplemental measures which might be used to ensure compliance with the EU level …
European Data Protection Board releases updated controller / processor guidance for comment
Are you sure you are a data processor? Introduction On 7 September 2020, the European Data Protection Board (EDPB), successor to the ‘article 29 working …
EU and US start work on enhanced Privacy Shield: Mr Schrems to be persuaded…
On 10 August 2020, Following the European Court’s Schrems II judgment invalidating the US Privacy Shield (and calling into question the legal basis for other …
Exporting data from the EU after Schrems II: what to do now
As previously discussed, the European Court of Justice’s recent Schrems II decision both (i) invalidated the US privacy shield; and (ii) threw into question alternative …