Alston & Bird Privacy, Cyber & Data Strategy Blog

GDPR

Belgian Supreme Court rules that Data Protection Authority may impose administrative fines even where a data subject’s personal data were not processed

By , and

The Belgian Supreme Court ruled in a judgment of Oct. 7, 2021 that a data subject has the right to lodge a complaint with the Data Protection Authority against a processing practice that violates the GDPR (in this case, the data minimization principle in Article 6 of the GDPR), even where the data subject’s personal […]

September 27 Deadline Looming for EU Standard Contractual Clauses

By

On June 4th, the European Commission issued modernized Standard Contractual Clauses (SCCs) under the EU General Data Protection Regulation (GDPR) for data transfers from controllers or processors in the EU/EEA (or otherwise subject to the EU GDPR) to controllers or processors outside the EU/EEA (and not subject to the EU GDPR). The modernized SCCs will […]

UK Unveils Post-Brexit Data Plans with an Emphasis on International Transfers of Personal Data

By

Today, the UK Department of Digital, Culture, Media and Sport (“DCMS”) has made a series of announcements shedding light on the UK’s post-Brexit data strategy. The announcements – which emphasize the importance of international transfers of personal data to global trade – include as follows: A Press Release, providing an overview of the UK government’s […]

Alston & Bird Publishes 10 Key Takeaways from the New Standard Contractual Clauses

By

As highlighted by this blog on Friday, the European Commission has published long-awaited Standard Contractual Clauses (SCCs).  These represent the first updates to the SCCs in over a decade, with the last updates having been made in 2010. Alston & Bird partner Wim Nauwelaerts has now published an advisory titled “10 Key Takeaways from the […]

European Commission Publishes Long-Awaited New Standard Contractual Clauses

By

Today, the European Commission published finalized versions of new Standard Contractual Clauses (SCCs).  The Commission has published two sets of clauses: A set of SCCs to be used in controller-to-processor situations in conjunction with Art. 28 GDPR “data processor” terms applicable to such situations. A more general set of modular SCCs that can be used […]