On 9 November 2023, the Court of Justice of the European Union (CJEU) held that an EU Member State may not subject an information…
On July 10, 2023, the European Commission adopted its adequacy decision for the EU-U.S. Data Privacy Framework (“DPF”). US companies that participate in the DPF will…
This morning, the Digital Services Act (DSA) was published in the Official Journal of the European Union. This officially starts the countdown for service designation and the DSA’s application.
On 4 October the European Council officially approved the DSA. That means that the only thing left is for it to be published in…
In March 2022, U.S. and EU leaders reached an agreement in principle on a new accord to protect data flows entitled the Trans-Atlantic Data…
As of August 13th, 2022, Legislative Decree No. 104 dated June 27th, 2022 (the so-called “Transparency Decree”), implementing Directive (EU) 2019/1152, came into force, establishing specific privacy obligations for employers, who make use of automated decision-making or monitoring systems.
The EU Commission proposed a new regulation called the Data Act. It contains extensive obligations for B2C, B2B and B2G data sharing, as well as rules requiring providers of cloud services to facilitate switching and interoperability between service providers. We’ve set out below our key takeaways.