Sign in Subscribe

Topic

Data Protection Law

Data Protection Law: A distinct legal right that originated in Europe in the 1970s as the “protection of individuals in the context of automated data processing.” It regulates how personal data is processed whether or not the information is private. In the EU, data protection and privacy are separate fundamental rights. Data protection laws now exist in many countries worldwide. The United States does not recognize an equivalent, as a distinct legal right separate from privacy.

When Can Personal Data Leave the EU? A Practical Guide to GDPR International Transfers

A practical guide to GDPR international data transfers, explaining when personal data may leave the EEA and how adequacy decisions, appropriate safeguards, SCCs, BCRs, Transfer Impact Assessments, and Article 49 derogations enable lawful cross-border transfers.

GDPR Data Security Explained: A Practical Guide to Technical and Organizational Measures

A practical guide to GDPR data security requirements, including risk assessments, technical and organizational measures, encryption, pseudonymization, resilience, processor oversight, staff training, authentication, and the ongoing testing needed to protect personal data.

The GDPR’s DPIA Requirement: Identifying, Assessing, and Mitigating High-Risk Processing

A practical guide to GDPR Data Protection Impact Assessments (DPIAs), explaining when they are required, the nine high-risk criteria, how to assess and mitigate risks, conduct a DPIA, document decisions, and determine when prior consultation is required.

Controller-to-Processor Transfers: What Article 28 GDPR Requires

A practical guide to Article 28 GDPR requirements for controller-to-processor relationships, covering mandatory contracts, processor due diligence, required terms, sub-processor authorization, liability, security, oversight, and the distinction from international data transfer rules.