On February 28, 2023, the EDPB has adopted its opinion on the draft adequacy decision regarding the EU-U.S. Data Privacy Framework. Even if it has welcomed the improvements of the framework, the EDPB has still expressed concerns and requests of clarifications on several points such as to certain rights of data subjects, onward transfers, the...
The US Office of the Director of National Intelligence (ODNI) has released the “Intelligence Community Directive 126: Implementation Procedures for the Signals Intelligence Redress Mechanism under Executive Order 14086 which establishes, on the US side, the EU-US draft privacy framework. This Directive governs the handling of redress complaints regarding certain signals intelligence activities, as required by Sections...
The European Commission has formally initiated the process for adopting an adequacy decision on the EU-US Data Privacy Framework. However, also this version (the third) is not exempt from legal challenges. Read more on Euronews
On Friday 7 October, President Biden signed an Executive Order with the US steps to rebuild the European Union-U.S. Data Privacy Framework Read the White House fact sheet here
PrivacyRules Hong Kong legal member Tanner De Witt informs that on 12 May 2022 the Hong Kong Privacy Commissioner for Personal Data (“PCPD”) published new guidance on recommended model contractual clauses for cross-border transfers of personal data (“Model Contractual Clauses Guidance”). This supplements prior guidance published by the PCPD on cross-border personal data transfers in...
The Brazilian DPA (National Data Protection Authority – ANPD) has opened a call for contributions to collect inputs for the creation of a regulation on international transfers of personal data. The deadline is set to 17 June 2022. Contributions can be sent to this link. Since international data transfers are a vital instrument for developing...
The Berlin DPA (Berliner Beauftragten für Datenschutz und Informationsfreiheit) has published a concise guideline on international data transfers relating to Art. 44 and following of the EU GDPR. The guideline notes that personal data may only be processed if there is a permit for this in the law. If personal data is to be transferred...