Page 7 - Data Transfers News Today

European Commission approved and adopted a new version of the Standard Contractual Clause, designed to provide companies with a means to more securely transfer data out of the European Economic Area

New SCCs for international transfers of personal data are modular and also address processor to processor, and processor to controller transfers which fits the realty of transfers.

ENISA Publishes Threat Landscape Reports for 2020 On October 20, 2020, the European Union Agency for Cybersecurity ("ENISA") published a series of reports on the threat landscape in 2020. The reports focused on, among other things, malware, data breaches, ransomware attacks, information leakage, and phishing attacks. The reports identified and evaluated the top cybersecurity threats for the period of January 2019-April 2020. ENISA Publishes Guidelines for Securing the IoT Supply Chain On Nove...

Privacy Statement The Global Fund is committed to respecting the dignity and privacy of people, while balancing such rights with the Global Fund values of transparency and accountability and the ability of the Global Fund to carry out its mission. Privacy Principles Fair and legitimate processing Personal data should be processed in a fair and transparent manner and only if there is a legitimate basis for doing so. Legitimate bases include: In the vital or best interest of the Data Subject or a...

Brexit Updated: EU Set to Publish UK Adequacy Decision Wednesday, February 17, 2021 In a draft adequacy decision, reported to have been seen by the Financial Times (FT), the European Commission (the “ Commission”) is set to allow the continued free flow of data between the EU and UK, after confirming that the UK offers an adequate level of protection for personal data, pursuant to Article 45 of the General Data Protection Regulation (the “ GDPR”). According to the FT, the dra...

February 1, 2021 For the third consecutive year, following the publication of Gibson Dunn’s ninth annual U.S. Cybersecurity and Data Privacy Outlook and Review on Data Privacy Day, we offer this separate International Outlook and Review. Like many recent years, 2020 saw significant developments in the evolution of the data protection and cybersecurity landscape in the European Union (“ EU”): CJEU” or “ Court”) struck down as legally invalid the EU-U.S. Privacy Shield, on which some ...

Happy Data Privacy Day! Since 2007, privacy professionals from across the globe have gathered together on January 28 to raise awareness about data privacy and security best practices and issues. The past year presented new challenges and questions for organizations of all sizes, as we responded to enhanced and evolving cyber-attacks; addressed the implementation of new laws and regulations, like the California Consumer Privacy Act (CCPA) and the federal interoperability and information blocking...

Brexit, GDPR, AND The Timeline for Data Breaches Friday, January 22, 2021 The European Union (EU) and the United Kingdom (UK) finally came to an agreement on 24 December 2020 (EU-UK Trade and Cooperation Agreement, the Agreement), less than ten days after the European Data Protection Board (EDPB) published a statement on the consequences a no-deal situation would have on the flows of personal data between the EU and the UK (for previous coverage of General Data Protection Regulatio...

Friday, January 15, 2021 On January 15, 2020, the European Data Protection Board (“EDPB”) and European Data Protection Supervisor (“EDPS”) adopted joint opinions on the draft Standard Contractual Clauses (“SCCs”) released by the European Commission in November 2020, both for international transfers (“International SCCs”) and for controller-processor relationships within the EEA (“EEA Controller-Processor SCCs”).  Once finalized, the International SCCs will rep...

Organizations Should Plan in 2021 to Comply with The California Privacy Rights Act’s Enhanced Cybersecurity Safeguards Thursday, January 14, 2021 The California Privacy Rights Act (“CPRA”) leaps forward on cybersecurity by amending the California Consumer Privacy Act (“CCPA”) to impose enhanced protections. The CPRA enhancements apply to “for profit” companies and other organizations: (a) with more than $25 million in gross revenues in the preceding calendar year, or...