EDPB on data transfer from EEA to UK

On February 12, 2019 the European Data Protection Board (EDPB) warned that in the absence of an agreement between the EEA and the UK (no-deal Brexit), the UK will become a third country from 00.00 am CET on 30 March 2019. The EDPB provides 5 steps organizations that transfer data to the UK should take […]

Tags: ,

Privacy Shield not robust enough to withstand ECJ’s future legal scrutiny, European Data Protection Supervisor opines

  On May 30, 2016, the European Data Protection Supervisor (EDPS) – whose mission is to advise the EU institutions on the data protection implications of their policies — published Opinion 4/2016 on the EU-U.S. Privacy Shield draft adequacy decision. According to the press release the Privacy Shield as it stands is not robust enough to withstand future […]

Tags: , ,

European Commission Issues Post-Schrems Communication on EU-US Data Transfers

Introduction Developments following the European Court’s 6 October 2015 Schrems ruling that declared data transfers under Safe Harbor invalid continue apace with the publication of an official 16-page Communication from the European Commission of 6 November. Please refer to our main alert for the background and our comments (including 3 videos) on the Schrems judgment and its consequences along with […]

Jonathan Armstrong, Gayle McFarlane, and André Bywater, European Commission Issues Post-Schrems Communication on EU-US Data Transfers

Introduction Developments following the European Court’s 6 October 2015 Schrems ruling that declared data transfers under Safe Harbor invalid continue apace with the publication of an official 16-page Communication from the European Commission of 6 November. Please refer to our main alert for the background and our comments (including 3 videos) on the Schrems judgment and its consequences along with […]

Tags: , ,

ECJ decisione in case C-136/17 (GC v CNIL) is not a complete victory for Google

On 24 September 2019 the Court of Justice of the European Union (ECJ) issued two decisions  concerning Google: Cases C-507/17 (Google v CNIL) and C-136/17 (GC v CNIL) . See comments to Case C-507/17 here. Apparently, both decisions are a success for Google. Not a complete success in Case C-507/17, however. And not a complete success […]

List of GDPR Guidelines prepared by WP29

Finalised GDPR Guidelines – Guidelines on Data Protection Officers (DPO), more here; – Guidelines on the right to data portability, more here; – Guidelines for identifying a controller or processor’s Lead Supervisory Authority, more here; – Guidelines on Data Protection Impact Assessment (DPIA) and determining whether processing is “likely to result in a high risk”, […]

Tags: ,

Francesca Giannoni-Crystal, The rationale of Advocate General Bot’s Opinion in Schrems: why the Safe Harbor Decision is invalid

On September 23, Advocate General Yves Bot at the European Court of Justice (“AG”) released his Opinion in C-362/14 (Maximilian Schrems v. Data Protection Commissioner). Waiting for the decision of the European Court of Justice – expected on October 6 – and keeping in mind that the Court follows the Advocate General’s opinions 80% of […]

Tags: ,