The Hague’s district court has ruled that loot boxes qualify as a game of chance under the Dutch Betting and Gaming Act (BGA). The…
BCRs as a robust alternative to Privacy Shield and SCCs Binding corporate rules are considered the âgold standardâ for international data transfers, primarily as…
The European Court of Justice (“ECJ”) issued a landmark ruling earlier today that invalidates the EU – US Privacy Shield Framework (“Privacy Shield”) in Case C-311/18 (“Schrems II”).
Introduction Recently, the European Commission published its evaluation report on the first two years of the General Data Protection Regulation (GDPR). The Commission focused…
It has been two years since the GDPR came into force on 25 May 2018 and during that time, we have seen more guidance…
On March 2, 2020, the Dutch Data Protection Authority (DDPA) published its notice of a monetary penalty notice, issued under the General Data Protection…
At the doorstep of 2020, advocate general Hendrik Saugmandsgaard Ăe (a.g.) rendered his opinion in the so called “Schrems II case” and opined on…
The European Union’s highest court, the Court of Justice of the European Union (CJEU), is evaluating the legitimacy of the EU standard contractual clauses…
On 27 January, the data protection authority in the Netherlands (“Dutch DPA”) published its main policy priorities (so called “themes”) for the year 2017.…
Effective 2016, Netherlands’ businesses must notify the Dutch data protection authority (“DPA”) and sometimes individuals if they suffer certain data breaches that involve personal…