cross-border data transfers

Subscribe to cross-border data transfers

On 4 June 2020, Singapore’s Personal Data Protection Regulations 2014 (Regulations) were amended to specify that recipients of personal data located outside Singapore which are certified under the Asia‑Pacific Economic Cooperation Cross-Border Privacy Rules (APEC CBPR) System, would satisfy the cross-border data transfer requirements under Singapore’s data protection law.

The same outcome would be achieved if the recipient is a data intermediary (i.e., processes personal data on behalf of another), and is certified under the Asia‑Pacific Economic Cooperation Privacy Recognition for Processors (APEC PRP) System.
Continue Reading Singapore’s data transfer rules amended to recognise APEC CBPR and PRP certifications

At the end of April, a magistrate judge of the Southern District of New York denied a motion filed by Microsoft for the quashing of a search warrant issued under the Stored Communications Act (the Act). Microsoft had argued that the warrant should be quashed because the data concerned was stored in Ireland, and the…