Executive Summary Today, the Court of Justice of the European Union (‘CJEU’) handed down its long-awaited judgment in the ‘Schrems 2.0’ case (Facebook Ireland and Schrems (Case C-311/18)), about the validity of two means of legitimizing transfers of personal data outside the EEA under the EU General Data Protection Regulation (‘GDPR’)[1]. In somewhat of a […]
Data Security
SEC’s OCIE Issues Ransomware Risk Alert
On July 10, the SEC’s Office of Compliance Inspections and Examinations (OCIE) issued a Risk Alert noting the increasing sophistication of ransomware attacks on SEC registrants and service providers to SEC registrants. The Risk Alert is notable for its encouragement of financial services market participants more broadly and not just SEC registrants to monitor CISA […]
Japan’s Personal Information Protection Committee releases guidance on contact tracing mobile apps to combat COVID-19
On May 1, the Personal Information Protection Committee in Japan (PPC) released guidance on the use of contact tracing mobile apps (Apps) as one of the mechanisms to combat the spread of COVID-19 and highlighted five essential consideration points. Specifically, the PPC recommends that all “personal information handling business operators” carefully consider, and disclose their […]
CCPA Plaintiffs Testing whether Any CCPA Violation Can be Used to Bring Class Actions
Plaintiffs’ counsel have started to lay the groundwork in the last few weeks for a broad private right of action under the California Consumer Privacy Act (the “CCPA”). Alston & Bird has published an Advisory that evaluates this recent CCPA litigation, and offers practical advice to companies as they build CCPA compliance. In this Advisory, […]
Location and Mobile Data in the Fight against COVID-19 – An Overview of U.S. and Global Efforts
Governments are increasingly seeking to leverage consumer geolocation and other mobile device data to assist with fighting the spread of COVID-19, as cases continue to mount globally. Location data can be of significant value to public health models, such as models that determine areas where social-distancing measures are needed or test whether such measures are […]