Focusing on the latest digital trends and risks and developments in the field of data protection, privacy, information and cyber law.

China: Technology Export Control and Beyond

Emma Keeling

As technology and IP have increasingly become the focal point of tensions between the US and China, the Chinese Government announced its amendments to the Catalogue of Technologies Prohibited or Restricted from Export (the Catalogue) on 28 August 2020. It is worth noting that China has long had a technology export control regime in place. Read More

Schrems II – The CJEU Leaves Us With More Questions Than Answers

David Smith

Immediately following the landmark decision of the CJEU in Schrems II on 16 July my colleague Nigel Parker discussed, in his blog, the decision and its likely implications for international data transfers. More recently Jane Finlayson-Brown has discussed The European Data Protection Board’s (EDPB) FAQs on the judgment. I am now adding some further thoughts Read More

Schrems II – EDPB FAQs response

Jane Finlayson-Brown

Further to last week’s landmark decision by the Court of Justice of the European Union (CJEU) in Case -311/18 Data Protection Commissioner v Facebook Ireland Ltd and Maximillian Schrems (Schrems II) invalidating the EU-US Privacy Shield data transfer mechanism, European data protection regulators have been discussing their response and EU data exporters have been waiting. Read More

French Conseil d’Etat partially annuls the CNIL’s guidelines on cookies and other tracking devices

Laurie-Anne Ancenys

The Conseil d’Etat, the French Administrative Supreme Court, (the Council) partially annuls the CNIL’s cookies guidelines, on aspects related to cookie walls, for lack of competence. The background to this decision are guidelines on cookies and other tracking devices, issued by the French supervisory authority (the CNIL), on 4 July 2019. The purpose of these Read More

CJEU invalidates EU-US Privacy Shield framework and upholds EC Standard Contractual Clauses

Nigel Parker

On 16 July 2020, the Court of Justice of the European Union (the CJEU) issued a landmark decision in Case C-311/18 Data Protection Commissioner v Facebook Ireland and Maximillian Schrems (commonly referred to as Schrems II). The CJEU invalidated the European Commission’s (the EC) adequacy decision on the EU-US Privacy Shield and upheld the general Read More

Schrems II : What Might We Expect on 16 July?

David Smith

Thursday 16 July promises to be a red letter day in the data protection world, at least for those of us with an interest in international transfers of personal data. This is when the Court of Justice of the European Union (CJEU) has said that it will announce its long awaited decision in the Schrems Read More