News

New EU privacy framework & UK Transfer Tools look to solve data transfer impasse

Hoping the third time’s a charm, the EU and US agreed in principle to terms that would allow businesses to transfer data to the US. This comes after two previous attempts failed because the EU felt citizen data wouldn’t be adequately protected. The question now is, if as before, the agreement will face legal challenges, including from privacy advocate Max Schrems and his noyb (stands for “none of your business”) group.

In even more proactive data-transfer solving news, the UK announced that new transfer tools are ready under UK GDPR. These are the International Data Transfer Agreement (IDTA), and an addendum to the EU Commission standard contractual clauses.

Read More – EU

Read More – UK

More News

Next Article

EU passes landmark Digital Markets Act – biggest change since GDPR

March 29, 2022

The EU announced sweeping change via the Digital Markets Act (DMA), to force Amazon, Apple, Google, Meta – and anyone else with $83 billion+ annual revenue – to significantly alter how they treat EU consumers and operate in the EU. The DMA targets treatment in app stores and marketplaces; on search engines, social networks, and web browsers; and in cloud and ad services. It requires the ability to unsubscribe, fair access for sellers, and notification of mergers or acquisitions. It forbids ad targeting without consent, preferential treatment against competitors, reuse... Read More >

CDPI Privacy Newsletter
Previous Article

IT’S THE LAW (03/29/2022)

March 29, 2022

The Utah Consumer Privacy Act (UCPA) has been signed, making Utah the fourth state, following California, Virginia and Colorado, to have its own privacy law. The law is considered more business-friendly than predecessors and sets a new precedent by having a two-step process to implement enforcement. While it does provide consumers the right to access their data and to opt out of sales (narrowly defined) and targeted advertising, it does not provide private right of action or require prior consent for collection of sensitive data.

CDPI Privacy Newsletter