On March 20, 2024, the House unanimously passed the Protecting Americans’ Data from Foreign Adversaries Act (PADFAA) (H.R. 7520), which prohibits data brokers from disclosing the sensitive data of individuals residing in the U.S. to “foreign adversaries”...

On Monday, July 17, 2023, the Department of Commerce launched a new website at https://www.dataprivacyframework.gov/s/ (“DPF Website”) providing more information about the new Data Privacy Framework covering EU, Swiss, and UK data transfers to the United States...

On July 10, 2023, the European Commission (“EC”) adopted its adequacy decision for the EU-U.S. Data Privacy Framework (“DPF”), ushering in a new era of transatlantic data flows. Key points: Adequacy Decision  The adequacy decision finds that,...

On December 13, 2022, the European Commission (the “Commission”) released a draft adequacy decision for the EU-U.S. Data Privacy Framework (“Framework”). The draft decision proposes the Framework as a new transfer mechanism for EU-U.S. data flows...

Today, the U.S. took a giant step toward resolving the “Schrems II” EU data transfer problem, possibly allowing the United States to earn a partial adequacy determination from the European Commission early next year. President...

The European Union and the United States announced an agreement in principle on a successor to the EU-U.S. Privacy Shield framework for the transfer of personal data to the U.S. The Court of Justice of the...

Get ready for a wave of contract renegotiations and related compliance activities. The European Commission (“EC”) has published two sets of standard contractual clauses (“SCCs”) to address different aspects of the General Data Protection Regulation...

The Bavarian Data Protection Authority (DPA) declared that a German company’s transfer of email addresses to U.S.-based email service Mailchimp was unlawful in light of the 2020 “Schrems II” decision issued by the Court of Justice of the...

Per the European Data Protection Board’s (EDPB) draft recommendations on data transfers following the Schrems II decision, data exporters and importers must work together to determine whether the importer country’s law ensures an essentially equivalent level of...

The European Data Protection Board (“EDPB”) plans to release further guidance in the coming months on specific steps that companies can take to export personal data from the European Economic Area to locations in the...