International transfers

Commission insists €500 million contract raises no data protection concerns

The European Commission is seeking to reassure lawmakers that the awarding of a new contract for the operation of a communications service between EU institutions will not risk data from Brussels being transferred to the UK.

27 September 2022

GDR 100 Elite interviews: Osborne Clarke’s Flemming Moos and Ashley Hurst

Hamburg-based Osborne Clarke data practice head Flemming Moos and international head of tech, media and comms Ashley Hurst tell GDR about dark patterns, enforcement hotspots and the recent evolution of UK data protection litigation.

20 September 2022

German regulator casts doubt over court Schrems expansion

The German state of Baden-Württemberg’s authority has attacked a recent court decision from a state court that could expand the impact of Schrems II.

17 August 2022

German court rules EU subsidiaries no defence against Schrems II

A German procurement court has expanded the impact of Schrems II by ruling that even the hosting of data by European subsidiaries of US companies constitutes an unacceptable risk to the digital rights of EU citizens.

28 July 2022

ICO unveils more flexible UK BCR requirements

The UK’s data regulator has set out a simplified binding corporate rules approval process and a principles-based approach to intra-group data flows – but it is unclear whether the new process will actually speed up approval times.

26 July 2022

European Commission sued over data transfers

The European Commission is facing a lawsuit after it allegedly broke data protection rules by allowing personal data collected via its website to be transferred to a third country without the appropriate safeguards.

19 July 2022

Berlin watchdog probes web hosting services

The Berlin regulator has opened an investigation into the lawfulness of standard processing agreements used by large web hosting services.

19 July 2022

Danish DPA bans municipality's use of Google products

Denmark’s regulator has ordered a municipality to stop using Google Chromebook and Workspace after finding it carried out an inadequate data protection impact assessment –  including of the risks of transferring data to a third country.

15 July 2022

German businesses face barrage of small claims over US transfers

German regulatory prohibitions on companies’ use of US-based online services has led to a wave of claims for compensation by individuals – with many businesses feeling as though they have little choice but to pay up.

12 July 2022

UK to strike first post-Brexit data flow deal

The UK government has signed an adequacy agreement in principle with Korea, marking the country’s first deal guaranteeing frictionless data flows with another country since leaving the EU.

06 July 2022

Unlock unlimited access to all Global Data Review content