European Commission adopts new adequacy decision for EU-US data flows

The European Commission has adopted its adequacy decision for the EU-U.S. Data Privacy Framework. The decision concludes that the US ensures an adequate level of protection – comparable to that of the EU – for personal data transferred from the EU/EEA to US companies under the new framework. Under the adequacy decision, personal data can…

Read More… from European Commission adopts new adequacy decision for EU-US data flows

Communications and Digital Committee launches inquiry into large language models

The House of Lords Communications and Digital Select Committee is launching an inquiry that will examine large language models and measures needed over the next one to three years to ensure the UK can respond to their opportunities and risks. This will involve evaluating the work of government and regulators, examining how well this address…

Read More… from Communications and Digital Committee launches inquiry into large language models

European Commission adopts new rules on enforcement of the GDPR in cross-border cases

SCL readers will be aware that the GDPR is enforced by independent national data protection authorities (DPAs) as well as national courts. If cases affect data subjects in more than one member state, the GDPR’s “one-stop-shop” enforcement system applies. This means that the DPA where the entity under investigation is based conducts the investigation in…

Read More… from European Commission adopts new rules on enforcement of the GDPR in cross-border cases

CJEU rules that a national competition authority can find, when examining an abuse of a dominant position, that the GDPR has been infringed

The CJEU has issued its long-awaited decision in the case of Case C-252/21 | Meta Platforms and Others. Users of Facebook must accepts its terms of service, which refer to Meta Platforms’ data and cookies policies. Under those terms, Meta Platforms collects data from other Meta Platforms group services, such as Instagram and WhatsApp, as…

Read More… from CJEU rules that a national competition authority can find, when examining an abuse of a dominant position, that the GDPR has been infringed

EU Data Act finalised

The European Data Act has been finalised between the European Parliament and the Council of the EU. It was originally proposed by the European Commission in February 2022. It says that it is needed because the full value of data in the European economy is not being reaped due to several factors. Key issues include…

Read More… from EU Data Act finalised