Theย European Commission published its FAQs on the adequacy decision regarding data transfers, which don't give all the necessary answers; let's try to give some clarifications on potential grey areas.
The GDPR fine of โฌ 1.2 billion issued by the Irish data protection commission against Meta raises the question of how companies deal with data transfers leading to a status of anxiety perfectly expressed by The Scream of Munch.
The long-awaited final version of the Standard Contractual Clauses for the Cross-Border Data Transfers from China (the "Chinese SCCs") was finally published on February 24, 2023, by the Cyberspace Administration of China ("CAC") through the Measures for Standard Contracts for Transferring Personal Information Overseas (the "Measures") forcing companies to act promptly.ย
The European Data Protection Board (EDPB) has adopted its opinion on the draft adequacy decision regarding the EU-US data privacy framework on data transfers under the GDPR.
The President of the United States has adopted the executive order to create the EU-US Data Privacy Framework, but is this the solution to the transfer of personal data out of the EEA?
There have been significant developments on cross-border transfers of personal data and โimportant dataโ from China and here is a summary of the current status.
The Italian privacy authority, the Garante, deemed that the use of Google Analytics results in unlawful transfers of personal data to the United States in violation of the principles outlined in the Schrems II ruling.
The FAQs published by the European Commission on the new Standard Contractual Clauses clarify aspects related to the proper use of SCCs to regulate transfers of personal data outside the EEA.
An agreement "in principle" on a new Privacy Shield regulating data transfers between the EEA and the United States might not change much for businesses.