The Standard Contractual Clauses under which the transfers occur may no longer be valid after the demise of Privacy Shield.
Brazil establishes its first data protection authority
The authority will oversee compliance with the General Data Protection Law, which will come into force in August 2020.
German court sides with Google on the Right To Be Forgotten
European Court of Justice invalidates EU-US Privacy Shield scheme
The Court annulled the scheme through which transfers of personal data from the EU to the US take place, however companies can still use standard contractual clauses.
European Commission concludes two-year review of GDPR
The Commission maintains the Regulation is generally working, but has found room for improvement in cooperation between countries.
Google loses appeal against GDPR fine in France
The Council of State confirmed the decision of the data protection authority to fine Google €50m for its targeted advertising practices.
Advice on the use of mobile data to tackle the coronavirus pandemic in Europe
The EDPS calls for effective data anonymisation, and urges the EC to roll back the measure as soon as practical.
German data protection authorities criticise the one-stop shop mechanism in GDPR
Regulators’ criticism is important in light of the upcoming two-year review of the GDPR, which the EC will carry out later in 2020.
Indian government proposes a new Personal Data Protection Bill
The bill largely resembles the first draft of 2018; however, it makes broader exemptions for public authorities, and foresees the creation of a ‘sandbox’ for innovation purposes
EC to propose detailed regulation of facial recognition
The Commission is planning new laws on Artificial Intelligence, strengthening the rights of the GDPR amid recent high-profile scrutiny of facial recognition.
