Companies should look "behind the curtain" to ensure they are complying with a "complex web of legal obligations," beyond their data privacy policy, said Lathrop GPM lawyers in a blog post Friday.
Cross-Border Data and Transfers
Cross-border data transfers are a flashpoint in global privacy law, particularly between the EU and U.S. Mechanisms like the EU-U.S. Data Privacy Framework and Standard Contractual Clauses face ongoing scrutiny by courts and regulators as global corporate operations must sync with divergent national regulatory environments. This legal uncertainty has pushed companies to adopt more rigorous transfer impact assessments and contractual safeguards. This page tracks regulatory developments, enforcement actions, and emerging requirements for international data flows.
The EU Council approved rules to facilitate handling GDPR cross-border data protection complaints, it announced Monday.
The European Data Protection Board (EDPB) backed the European Commission's plans to grant Brazil an adequacy decision to allow data flows but urged the EC to address "a few remaining points," it said Wednesday in an email.
Differences in data transfer regulatory regimes adversely affect international trade in digital and data-reliant services, economists from the European Centre for International Political Economy said in a paper published last month.
The U.S. should be working with the EU to establish global standards on privacy, safety and security, American and European officials said Wednesday during the Business Software Alliance’s Transform event.
An appeal this week of an EU General Court ruling in a case that questioned the EU-U.S. Data Privacy Framework (DPF) will bring the issue to the European Court of Justice (ECJ) again, IAPP officials and privacy lawyers said Thursday. Euractiv reported French Parliament Member Philippe Latombe's appeal Wednesday. Latombe didn't immediately comment.
The Global Cross-Border Privacy Rules (CBPR) Forum added the Dubai International Financial Centre as a full member, bringing the number of participants to 10 members and four associates, the forum said Friday.
Higher education institutions face new data security challenges, including increased “global regulatory requirements on data privacy,” JacksonLewis attorneys blogged Friday.
Most changes to the U.K.'s data protection regime will ease data flows between the U.K. and EU, but some should be clarified and monitored, the European Data Protection Board (EDPB) said Monday.
Privacy is an ever-evolving landscape, meaning that company privacy policies, technologies and teams must be constantly updated, panelists said Wednesday during a webinar hosted by Didomi, a consent-management software vendor. With enforcement actions by regulators increasing and legislators continuing to implement new laws, companies must stay on top of the latest developments, they added.