Related insights: Data, Privacy and FOI

Thumbnail

GDPR Update: Top EU Court Strikes Down Validity of EU-US Privacy Shield Framework; Upholds Standard Contractual Clauses

Jul 16 2020
Today, July 16, 2020, the EU’s top court, the Court of Justice of the European Union (CJEU), issued its highly anticipated decision in the Schrems II case. In doing so, CJEU has invalidated the EU-US Privacy Shield Framework and held that its prior decision regarding Standard Contractual Clauses (SCCs) remains valid. Following this decision, US businesses can no longer rely on the EU-US Privacy Shield Framework as a legal mechanism for transferring personal data from the European Economic Area (EEA) to the US. However, companies can still leverage the SCCs in certain instances. The decision highlighted the requirement to for the data exporter to ensure adequate levels of protections are in fact in place prior to transfers.  
Thumbnail

Ted Claypoole in Atlanta Business Chronicle: California Consumer Privacy Act Represents Major Shift in how Consumer Data May Be Collected, Used

Jan 27 2020
ATLANTA—Business across the country and around the world are taking care to ensure they are in compliance with the sweeping new California Consumer Privacy Act (CCPA). Womble Bond Dickinson attorney Ted Claypoole has been working closely with companies to help them prepare for the CCPA, which took effect Jan. 1, and he recently spoke with the Atlanta Business Chronicle about the CCPA’s requirements.
Thumbnail

WBD advises NCR Corporation on £100 million technology acquisition

Jan 09 2020
Womble Bond Dickinson (WBD), has advised NCR Corporation, a global enterprise technology company for the retail, hospitality and banking industries, on the acquisition of Zynstra for approximately £100 million. Zynstra, based in Bath, has developed innovative "edge virtualisation" software which optimises existing retail store technology to enhance customer and employee experiences through faster innovation and which reduces cost to serve in-store.

A Likely Crisis for Data Transfers to the UK post “No-Deal Brexit”

Aug 27 2019
Under EU data management laws, no one can send, grant access to, or otherwise transfer personal data to a country outside the European Union/European Economic Area (EU/EEA) unless the EU has made a formal decision that its data protection measures are “adequate.” Adequacy for these purposes means treating data in a manner similar to the EU.

New Data Breach Reporting Requirements in Canada

Oct 29 2018
Canada now follows the US trend to require reporting of personal data exposures. Beginning November 1, 2018, a change in the law will require companies subject to Canada’s federal data protection laws to report data breaches in certain instances.