Privacy Law Matters Blog

By Jennifer Ruehr and Susan Lyon-Hintze Non-EU organizations that process personal data as data controllers or processors frequently ask whether they are subject to the General Data Protection Regulation (“GDPR”). The answer depends in part on the “territorial scope” provisions in Article 3 of the GDPR. Organizations fall under the territorial scope of the GDPR…

Next Tuesday, November 8, 2016, Hintze Law partner Mike Hintze will present his new paper, "Viewing the GDPR Through a De-Identification Lens: A Tool for Clarification and Compliance," at the Brussels Privacy Symposium.  The key argument is that if European regulators acknowledge that there is a full spectrum of de-identification techniques, and develop guidance under the…

By Carolyn Krol On February 2, 2016, following the announcement of the EU-U.S. Privacy Shield Agreement, the U.S. Department of Commerce distributed a fact sheet about the new data-transfer agreement with the European Union. The fact sheet provides further detail on the elements of the agreement described in the EU Commission's press release.The Department of…

By Carolyn Krol On February 2, 2016, representatives of the European Commission and the United States agreed on a new framework for transatlantic data flows, referred to as the “EU-U.S. Privacy Shield.” This long awaited announcement follows the October 6, 2015, decision by the EU Court of Justice invalidating the EU-U.S. Safe Harbor agreement. While…