EU & US firms awaited a Privacy Shield adequacy decision under US-EU Data Transfer Framework Executive Order.

An analysis of previous adequacy decisions for learnings about cross-border data transfers that follow the guidance of data protection authorities and the European Commission.

What’s missing from the draft adequacy decision for the EU-U.S. Data Privacy Framework?

Experts discuss the political events surrounding the EU-US data transfer mechanism intended to replace the Privacy Shield, invalidated under Schrems II back in 2020, and the UK-US joint statement on adequacy consideration.

Cross-border data transfer restrictions can have a significant business impact. As companies continue to rely on the ability to access and share data, …

On July 16, 2020, the Court of Justice for the European Union decided the Schrems II case (officially: Case C-3-11/18 Data Protection Commissioner v Facebook Ireland Limited and Maximillian Screms). The outcome was that the EU-US Privacy Shield was invalidated, and any contractual safeguard mechanism used to transfer personal data out of the European Union – not just those relying […]

Paul Breitbarth and Dr. K Royal connect with two of the biggest names in the privacy field, Chris Babel, the CEO of TrustArc and Hilary Wandall, Chief Compliance Officer at Dun and Bradstreet.

In July 2020, the Court of Justice of the European Union invalidated the Privacy Shield agreement between the European Union and the United States because it did not offer protection essentially equivalent…

We live in strange times that often remind us how important it is to live our lives in freedom and to enjoy our fundamental rights. This week on Serious Privacy, Paul Breitbarth and K Royal talk about the war in Ukraine, but also about a lot of data protection related developments around the world. Topics include the new privacy law that is awaiting the […]

If your organization transfers data from the EU into another country, the European Commission’s new updates to Standard Contractual Clauses (SCCs), Adequacy Decisions, and EDPB Data Transfer Guidance may be relevant to you.

Always interesting and always evolving, international data transfers have new developments.

On 28 June 2021, the European Commission announced it has approved two adequacy decisions for the United Kingdom (UK). With these decisions, one under the General Data Protection Regulations (GDPR) and one under the European law enforcement directive, the Commission confirms the UK offers a level of data protection that is essentially equivalent to that in the European Union (EU). With this hurdle out […]