As the preferred new Information Commissioner appeared before the DCMS Select Committee for pre-appointment scrutiny today, we consider some of the key elements of the UK’s ambitious package of post-Brexit global data plans (“UK Global Data Plans“). Read more

China’s Personal Information Protection Law (“PIPL”) was passed on 20 August 2021. PIPL presents certain challenges for compliance, which is required when it comes into force on 1 November 2021. Overview Lack of clarity over what constitutes consent Lack of clarity over “contract necessity” as a complete exception to consent Safeguards for transferring personal information … Read more

This year is a pivotal year for data laws in China, with two very significant pieces of new legislation coming into force – the Data Security Law (“DSL“), governing important/core data, and the Personal Information Protection Law (“PIPL“), governing personal information, on 1 September 2021 and 1 November 2021 respectively. The key issue is how … Read more

The UK has taken its first big data protection step in a post-Brexit world with the Information Commissioner’s Office (“ICO“) publishing its own version of an international data transfer agreement and accompanying methodology for conducting international risk assessments on 11 August 2021. The ICO has published the following documents, which all inter-relate with one another: … Read more

With the interim data transfer window under the Brexit Trade Agreement expiring yesterday, on 28 June 2021 the European Commission adopted two adequacy decisions confirming the UK as an adequate jurisdiction for GDPR and Law Enforcement Directive purposes – just in time to allow the uninterrupted free flow of personal data from the European Union … Read more

In a busy few weeks for international data transfers following the publication of final standard contractual clauses for both the international transfer of personal data to third countries (“SCCs“) (see our blog post here)  and Article 28 clauses (see our blog post here), as well as the European Commission adopting two adequacy decisions for the … Read more

Simultaneous with the European Commission publishing its final standard contractual clauses for the international transfer of personal data (see our blog post here for further information) (the “New SCCs“), they have now published a final set of standalone Article 28 clauses for use between controllers and processors in the EU, also termed ‘standard contractual clauses’ … Read more

Seven months after the European Commission published its draft new Standard Contractual Clauses for data transfers between EU and non-EU countries (the “Draft SCCs“) for consultation (see our blog post here (the “Draft SCCs Blog“)), they have now published a finalised set of Standard Contractual Clauses (“Final SCCs“) with little fanfare (available here). It should … Read more