25 May 2019 was GDPR’s first birthday. Since its introduction, privacy and data protection issues have continued to dominate public debate and regulators have signalled that large fines for non-compliance are imminent. Now is an opportune time to review your privacy and data protection regimes. We have more regulatory guidance and case law than we … Continue Reading
The German Data Protection Authorities (“DPAs”) released a paper on fines under Art. 83 General Data Protection Regulation (“GDPR”) in July 2017. Fines are hanging like a Sword of Damocles over the organizations that are getting ready for GDPR, since the upper limits of fines have been increased substantially. For example, German DPAs can currently … Continue Reading
On 1 September 2016, the Bavarian Data Protection Authority (“DPA”) issued a new guidance paper on sanctions under the new EU General Data Protection Regulation (“GDPR”) in the course of a series of non-binding guidance papers on selected topics in relation to the GDPR, which the DPA publishes periodically, and which can be found on the … Continue Reading
This post was also written by Nick Tyler and Regis Stafford. The American Bar Association (ABA) this week passed an important resolution urging all courts in the U.S. to: “consider and respect…the data protection and privacy laws of any…foreign sovereign, and the interests of any person who is subject to, or benefits from such laws, with … Continue Reading
A new French law, published on March 30, 2011, allows, among other things, the French Data Protection Authority, the CNIL, to give more publicity to sanctions it imposes. Prior to this reform, the French data protection authority could only publicize its rulings on its website and on “Légifrance”, the French official website for law. Publication … Continue Reading