DLA Piper's Global Privacy and Data Protection Resource
What is the European Health Data Space?
On 3 May 2022, the EU Commission published a draft Regulation on the European Health Data Space (“HDS”). The Regulation is the first sector-specific proposal in the Commission’s “European Strategy for Data”, which aims at creating a ‘single market for data’. In so doing, the Commission…
Continue Reading The European Health Data Space – 5 Things You Need to Know
Max Schrems, through his organisation, ‘My Privacy is None of your Business’ (“noyb.eu”) has issued an open letter to U.S. and EU officials about the announcement of an ‘agreement in principle’ for a new Trans-Atlantic Data Privacy Framework (“letter”). The letter coincides with a visit to Washington, D.C. by a delegation…
Continue Reading NOYB open letter on the new EU – US data deal
A draft set of EDPB guidelines on the calculation of administrative fines under the GDPR is likely to lead to some further consistency among supervisory authorities on how fines are calculated – however, if adopted, the guidance leaves clear room for the current divergent approaches to continue.
On 12 May 2022, the European Data Protection…
Continue Reading Europe: EDPB Guidelines on calculation of fines under GDPR – a case of evolution, not revolution?
Today, through the Queen’s Speech, the UK Government has set out its legislative program for the next Parliamentary term. The speech outlined 38 proposed laws, including the Data Reform Bill.
The introduction of the Data Reform Bill will reform the UK’s current data protection framework, bringing in potentially significant changes to the UK GDPR and…
Continue Reading UK: Data Reform Bill: post-Brexit data reforms
Authors: Carolyn Bigg, Yue Lin Lee, Gwyneth To and Jing Qin Cho
Companies providing cybersecurity services (“CSPs“) in Singapore will now have to obtain a licence for the provision of such services by 11 October 2022.
The licensing framework took effect from 11 April 2022.
The licensing framework is part of the Cybersecurity…
Continue Reading Singapore: Cybersecurity service providers’ mandatory licensing by October 2022
Authors: Zoltán Kozma, Mark Almasy
The case involved the personal data processing
Authors: Carolyn Bigg, Yue Lin Lee, Gwyneth To
Increased financial penalties
From 1 October 2022, companies that breach the PDPA may face fines of up to:
Penalties imposed under the PDPA could…
Continue Reading Singapore: Higher Fines for Breach of Personal Data Protection Act 2012 (PDPA) – up to 10% of Singapore Turnover
What has happened?
The European Union has today announced ‘agreement in principle’ with the United States on a new data transfer framework, intended to replace the Privacy Shield framework that was struck down in the 2020 Schrems II decision of the Court of Justice of the European Union.
The agreement was announced in a joint…
Continue Reading Privacy Shield 2.0? EU and US announce potential new data transfer framework
On 1 March 2022, the Department for Digital, Culture, Media & Sport (“DCMS”) released their most recent draft Telecommunications Security Regulations (“Regulations”) and an associated draft Code of Practice (“Code of Practice”) for consultation. The Regulations and Code of Practice form part of several new security measures introduced…
Continue Reading UK: Draft Telecoms Security Regulations and Code of Practice released for consultation
By: Heidi Waem and Verena Grentzenberg
On 2 February 2022, the Belgian Data Protection Authority (Belgian DPA) rendered its long-awaited decision against IAB Europe with regard to the IAB Transparency and Consent Framework (TCF).
In this blogpost we will discuss:
…
Continue Reading Belgian DPA decision on IAB Transparency and Consent Framework
