EU-U.S. Privacy Shield ensures “adequate level of data protection” but could be improved, EU Commission finds

On October 18, 2017, the EU Commission published its report on the first annual review of the EU-U.S. Privacy Shield. The report reflects the Commission’s findings on the implementation and enforcement of the EU-U.S. Privacy Shield framework in its first year of operation. According to the EU Commission, the Privacy Shield “continues to ensure an […]

Tags: ,

Privacy Shield certification does not mean compliance needs to extend beyond European data

When a US organization decides to self-certify under the EU-U.S. Privacy Shield, compliance with Privacy Shield principles becomes compulsory. This may be a problem for many US organizations because certain processing activities that they perform – which are perfectly lawful under American law — are unlawful under a Privacy Shield’s perspective. Why? And what to do? Let’s step […]

Tags: ,

Cristina Vicarelli, La disciplina di Google Analytics a cavallo tra Italia e Germania

Nel giugno del 2016, l’Autorità per la protezione dei dati personali (di seguito anche DPA) di Amburgo, in accordo con le altre presenti in Germania, si è occupata della compatibilità di Google Analytics con la normativa nazionale sulla protezione dei dati. Le indicazioni che sono emerse dal provvedimento dell’Autorità di Amburgo  appaiono a un primo […]

Tags: , ,

La disciplina di Google Analytics a cavallo tra Italia e Germania

Nel giugno del 2016, l’Autorità per la protezione dei dati personali (di seguito anche DPA) di Amburgo, in accordo con le altre presenti in Germania, si è occupata della compatibilità di Google Analytics con la normativa nazionale sulla protezione dei dati. Le indicazioni che sono emerse dal provvedimento dell’Autorità di Amburgo  appaiono a un primo […]

Privacy Shield certification does not mean compliance needs to extend beyond European data

When a US organization decides to self-certify under the EU-U.S. Privacy Shield, compliance with Privacy Shield principles becomes compulsory. This may be a problem for many US organizations because certain processing activities that they perform – which are perfectly lawful under American law — are unlawful under a Privacy Shield’s perspective. Why? And what to do? Let’s step […]

The US & Switzerland sign new Privacy Shield Framework to allow data transfer

On January 12, 2017, Switzerland approved the Swiss-U.S. Privacy Shield Framework. Switzerland considers the agreement as a valid legal mechanism to comply with Swiss requirements when transferring personal data from Switzerland to the United States. The Swiss-U.S. Privacy Shield Framework will replace the U.S.-Swiss Safe Harbor immediately. Switzerland will begin accepting Privacy Shield certifications starting […]

Tags: ,

Privacy Shield update: around 1300 active participants after over 4 months from start

As of mid December 2016, around 1300 companies were active under the EU-US Privacy Shield, according to the US Department of Commerce official website. The Privacy Shield Framework has now been effective for almost 4 months and it replaced the Safe Harbor, which had around 5,500 participants by 2016. The US Department of Commerce, International Trade Administration (ITA), […]

Tags: ,

EU Data Protection – glossary

Thanking CORDERY, we gladly publish the EU Data Protection – glossary (originally published by Cordery at http://www.corderycompliance.com/eu-data-protection-regulation-glossary/) We’ve put together this glossary to help explain some of the terms used in data protection and in the GDPR. If there’s a term you think we should add let us know. Agencia de Proteccción de Datos = the Spanish […]

Tags:

Privacy Shield officially adopted by the EU Commission … but American organizations “targeting Europe” might want to consider whether GDPR compliance would make more sense

On July 12, 2016, the European Commission officially approved the Privacy Shield, issuing the decision of adequacy (“Decision”). The Privacy Shield is supposed to provide a safe mechanism to transfer personal data from the EU to the US for those organizations that comply with the framework.  Compared to the Safe Harbor (which the Privacy Shield […]

Tags: ,

1 2 3 4 5 6 9