• Skip to primary navigation
  • Skip to main content
  • Skip to primary sidebar
  • Skip to secondary sidebar

Alston & Bird Privacy, Cyber & Data Strategy Blog

  • Home
  • Services
  • Events
  • Contacts

EU Regulation

After Schrems II: A Proposal to Meet the Individual Redress Challenge

August 18, 2020 By Paul Greaves

On July 16, 2020, the Court of Justice of the European Union (CJEU) invalidated the EU-U.S. Privacy Shield in the Schrems II case. In an article written by Georgia Tech professor and Alston & Bird Senior Counsel Peter Swire with co-author Kenneth Propp, entitled ‘After Schrems II: A Proposal to Meet the Individual Redress Challenge’, […]

Filed Under: Board Governance & Cyber Risk Management, Privacy & Cyber Regulatory Enforcement Tagged With: Cross-border, EU Data Protection, EU Privacy, EU Regulation, European Court of Justice, European Union (EU), GDPR, International Data Transfers, Max Schrems Decision

European Data Protection Board Statement Provides Preliminary Insight into Use of Standard Contractual Clauses Following Schrems II Judgment

July 20, 2020 By Wim Nauwelaerts and Paul Greaves

On July 17, 2020, the European Data Protection Board (‘EDPB’) published a statement on the outcome of the Schrems II judgment, passed by the Court of Justice of the European Union (‘CJEU’) the day before. The judgment invalidated the EU-U.S. Privacy Shield, and issued a number of clarifications and caveats on the use of Standard […]

Filed Under: Board Governance & Cyber Risk Management, European Privacy & Cybersecurity, Privacy & Cyber Regulatory Enforcement Tagged With: EU Data Protection, EU Privacy, EU Regulation, European Court of Justice, European Union (EU), GDPR, Max Schrems Decision, Safe Harbor 2.0

Schrems 2.0: CJEU invalidates EU-US Privacy Shield and emphasizes exporter obligations when using Standard Contractual Clauses

July 16, 2020 By Paul Greaves and Wim Nauwelaerts

Executive Summary Today, the Court of Justice of the European Union (‘CJEU’) handed down its long-awaited judgment in the ‘Schrems 2.0’ case (Facebook Ireland and Schrems (Case C-311/18)), about the validity of two means of legitimizing transfers of personal data outside the EEA under the EU General Data Protection Regulation (‘GDPR’)[1]. In somewhat of a […]

Filed Under: Adtech & Digital Tracking, Board Governance & Cyber Risk Management, Consumer Protection/FTC, European Privacy & Cybersecurity, National Security & Digital Crimes, Privacy & Cyber Regulatory Enforcement Tagged With: EU Data Protection, EU Regulation, European Court of Justice, European Union (EU), Federal Trade Commission (FTC), GDPR, International Data Transfers, Max Schrems Decision, Regulatory Enforcement

French CNIL Launches Public Consultation on Cookie Consent Recommendations

January 17, 2020 By Paul Greaves and Wim Nauwelaerts

On January 14, 2020, the French data protection authority (CNIL) launched a public consultation on its draft recommendations for the collection of consent in the context of cookies and other tracking technologies (the ‘draft Recommendations’). Under EU ePrivacy rules, such technologies generally may not be placed on – or accessed from – users’ devices without […]

Filed Under: Adtech & Digital Tracking, Board Governance & Cyber Risk Management, European Privacy & Cybersecurity, Privacy & Cyber Regulatory Enforcement Tagged With: Behavioral Tracking, CNIL, Consent, Cookies, ePrivacy, EU Data Protection, EU Privacy, EU Regulation, French, GDPR

Wim Nauwelaerts Authors Summary of EDPB’s Guidelines of the GDPR

January 9, 2020 By Privacy, Cyber & Data Strategy Team

Wim Nauwelaerts, Brussels partner and leader of the firm’s EU Privacy and Data Protection practice, has authored a summary of the European Data Protection Board’s (EDPB) guidelines on the territorial scope of the GDPR. On November 12, 2019, the EDPB adopted the final version of its guidelines – almost one year after they had been […]

Filed Under: Board Governance & Cyber Risk Management, European Privacy & Cybersecurity, Privacy & Cyber Regulatory Enforcement Tagged With: EU Data Protection, EU Regulation, European Union (EU), GDPR Implementation

  • « Go to Previous Page
  • Page 1
  • Page 2
  • Page 3
  • Page 4
  • Page 5
  • Page 6
  • Interim pages omitted …
  • Page 15
  • Go to Next Page »

Primary Sidebar

This blog is a service of Alston & Bird’s Privacy, Cyber & Data Strategy team and focuses on key data privacy and data security issues.


Receive email notifications when new posts are added.

Receive email notifications when new posts are added.


RANSOMWARE FUSION CENTER
Click here to request access

THE DIGITAL DOWNLOAD
Click here to see the editions

PRIVACY & CYBER EVENTS
Click here to see upcoming and past events

PRIVACY & CYBER MAILINGS
Click here to sign up


Secondary Sidebar

Categories

Recent Posts

  • How to Comply with the EU AI Act: Guidance from the Spanish AI Regulator
  • New EU Regulation Clarifies Cybersecurity Rules for IoT Devices and Other ‘Products with Digital Elements’
  • California AG Announces $1.4 Million Settlement with Mobile App Provider for Alleged CCPA Violations
  • SEC Dismisses Remaining Claims Against SolarWinds
  • The EU Digital Omnibus: A European Data Law Shake-Up May Be Coming
Copyright © 2025 · Alston & Bird · All Rights Reserved. Privacy.
This website uses cookies to improve functionality and performance. By continuing to browse this site, you are consenting to the use of cookies on this website.