Sign in Subscribe

Codes of Conduct

This tag covers Codes of Conduct as structured frameworks for translating privacy, data protection, AI, and responsible data-governance requirements into practical sector- or activity-specific rules. It covers GDPR Codes of Conduct under Articles 40 and 41, including development, approval, monitoring, accountability, and use in international transfers, as well as Codes of Conduct under the EU AI Act and comparable industry or regulatory frameworks in the U.S. and other jurisdictions.

When Can Personal Data Leave the EU? A Practical Guide to GDPR International Transfers

When Can Personal Data Leave the EU? A Practical Guide to GDPR International Transfers

A practical guide to GDPR international data transfers, explaining when personal data may leave the EEA and how adequacy decisions, appropriate safeguards, SCCs, BCRs, Transfer Impact Assessments, and Article 49 derogations enable lawful cross-border transfers.

Controller-to-Processor Transfers: What Article 28 GDPR Requires

Controller-to-Processor Transfers: What Article 28 GDPR Requires

A practical guide to Article 28 GDPR requirements for controller-to-processor relationships, covering mandatory contracts, processor due diligence, required terms, sub-processor authorization, liability, security, oversight, and the distinction from international data transfer rules.