By Leslie Veloz and Jennifer Ruehr
The Hong Kong Office of the Privacy Commissioner for Personal Data (“PCPD”) recently published its Checklist on Guidelines for the Use of Generative AI by Employees (“Checklist”). The goal of the Checklist is to help organizations draft internal policies and procedures governing employee use of generative AI (“GenAI”) tools, especially where GenAI is used to process personal data.
Read More
By Susan Hintze and Hansenard Piou
Note that the Autorité has not yet been published the decision in question as it is in process of redacting information relating to trade secrets. Please check back for updates.
Read More
Hintze Law continuously tracks privacy and security updates around the world to bring you a regular update of the latest developments. Below is a snapshot of updates from the last month. If you missed our last round of updates, you can find those here.
Read More
By Zachary Douglas
Here’s a snapshot of some privacy developments from this summer. If you missed our last post, you can find it here.
Read More
Here’s a snapshot of the state, national, and global privacy, security, and data developments tracked by our team over the past few weeks.
Read More
By Leslie Veloz
Here’s a snapshot of the privacy, security, and data developments tracked by our team over the past few weeks.
Read More
By Elizabeth Crooks and Deb Gray
Here’s a snapshot of the privacy, security, and data developments tracked by our team over the past few weeks.
Read More
By Deb Gray
Our friends at KL&M Law, in Warsaw Poland, were kind enough to share unpublished decisions from the data protection authority (DPA) of Poland (UODO) that they obtained as part of a recent information request. The resulting report, on nearly 80 decisions, is divided into thematic sections: Marketing, Financial sector, Insurance sector, COVID and health information, Publicly available data, Labor issues, Claims, Video surveillance, Personal data breach, and Miscellaneous.
Read More
By Cameron Cantrell
Here’s a snapshot of the privacy, security, and data developments tracked by our team over the past few weeks.
Read More
By Leslie Veloz
Here’s a snapshot of a few privacy developments from the past few weeks.
Read More
By Taylor Widawski
Here’s a snapshot of a few privacy developments from the past few weeks.
Read More
By: Emeka Egwuatu and Destiny Ginn
Here’s a snapshot of a few of the privacy developments we followed over the past few weeks.
Read More
By Destiny Ginn, Summer Associate
Here’s a snapshot of a few of the privacy developments we followed over the past few weeks.
Read More
By Alex Schlight and Emeka Egwuatu
Here’s a snapshot of a few of the privacy developments we followed over the past couple of months from March 22, 2022 – to June 6, 2022.
Read More
By Elizabeth Crooks and Chehalis Dorman
Here’s a snapshot of a few of the privacy developments we followed from the past couple of months from February 10, 2022 to March 21, 2022.
Read More
By Mason Fitch
Here’s a round up of a few of the privacy developments we followed from the past couple of months from December 2021 - February 10, 2022.
Read More
By Emeka Egwuatu
Our latest snapshot of recent privacy law developments from around the world.
Read More
As you may be aware, last Thursday the Court of Justice of the European Union (CJEU) issued a dramatic opinion in the Schrems II case that invalidated the EU-U.S. Privacy Shield Agreement and called into question the extent to which U.S. companies can rely on the EU Standard Contractual Clauses (SCCs) as the basis for data transfers.
Read More
By Jennifer Ruehr and Susan Lyon-Hintze
Non-EU organizations that process personal data as data controllers or processors frequently ask whether they are subject to the General Data Protection Regulation (“GDPR”). The answer depends in part on the “territorial scope” provisions in Article 3 of the GDPR. Organizations fall under the territorial scope of the GDPR when they meet one of two main criteria: the “establishment” criterion under Article 3(1) or the “targeting” criterion under Article 3(2). On November 16, 2018, the European Data Protection Board (“EDPB”) released “Guidelines 3/2018 on the territorial scope of the GDPR (Article 3)-Version for public consultation.” These guidelines provide interpretation and clarification of the Article 3 criteria that can help organizations understand and evaluate how the GDPR applies to their data processing.
Read More
Next Tuesday, November 8, 2016, Hintze Law partner Mike Hintze will present his new paper, "Viewing the GDPR Through a De-Identification Lens: A Tool for Clarification and Compliance," at the Brussels Privacy Symposium.
Read More