News

Data Protection and GDPR

PIPL: Navigating the Evolving Data Protection Landscape in China

15/02/2024

Towards safe, reliable and human-centred AI

The EU’s Artificial Intelligence (AI) Act marks a global first, introducing rules for the use and provision of AI systems. At the heart is a commitment to fostering trust in AI to unlock and maximise the vast social and economic possibilities offered by these technologies.

15/02/2024

Managing cyber risk

All companies face the risk of cyber-attacks. In general, the question is when and not if an attack will strike. Companies should therefore strengthen their cyber resilience and implement robust measures to be prepared to handle all aspects of an attack if/when it occurs.

11/10/2023

More about transfers of Personal Data to the USA

As of today, the British decision to approve transfers to the USA comes into effect. This means that transfers to the USA are now legally permissible from both the United Kingdom and the European Union. The decisions currently in place likely also mean that further transfers from the USA can be accepted - these are known as onward transfers.

11/07/2023

EU-U.S. Data Privacy Framework: What does it mean for businesses and what to expect going forward?

On 10 July 2023, the European Commission adopted its adequacy decision for the United States.

27/02/2023

China: Long-awaited standard contract released and filing requirement added for transfer of personal information out of China

On 24 February 2023, the Cyber Administration of China ("CAC") issued measures containing a standard contract template for transfers of personal information, detailed guidelines including for a required impact assessment and a filing-requirement for transfers of personal information from China to other countries.

11/12/2022

Transfer of employee information outside of China under PIPL and the new Draft Standard Contract

The Cyberspace Administration of China has issued a draft standard contract for cross-border transfers of personal information out of China which will, if adopted, constitute a valid transfer mechanism under the Chinese Personal Information Protection Law. Both the transferring entity and the overseas recipient must still be aware of additional data protection requirements related to cross-border transfers, including reporting requirements.

23/10/2022

New Guidelines and Recommendations on Data Protection at the Workplace

The Norwegian Data Protection Authority (Nw.: Datatilsynet) has recently published both updated guidelines on employees' whistleblowing and an interesting study on monitoring and control of employees' digital activities (both available only in Norwegian). Both these new initiatives relate to data protection at the workplace, and are relevant to all businesses.

29/09/2022

1 - A Europe Fit for the Digital Age

The European Union has recently been active in terms of legislative developments relating to technology and digitalisation. News about Digital Services Act, Digital Markets Act, European Union's new Artificial Intelligence Act, Data Act and Data Governance Act are emerging frequently and there is a new development almost every week.

04/09/2022

Credit Information Act: new rules for credit assessments and processing of personal data

This article provides an overview of key issues in the new Credit Information Act which businesses must be aware of to ensure compliance with the new regulations.

09/11/2021

New Draft Decision's Potential Impact on GDPR's Strict Consent Rules

The Irish Data Protection Commissioner's new draft decision has received significant attention. The decision relates to the legal basis of processing under the GDPR and it is criticised by many for giving entities a by-pass from GDPR's strict rules. In this article, Wikborg Rein looks into the draft decision and evaluates what it might mean for the application of the GDPR in the future.

08/11/2021

Facebook to Delete Personal Data of More Than One Billion Users

Last week, Facebook announced their decision to stop using the face recognition technology. Facebook's decision comes against the backdrop of intensifying concerns around data privacy and Facebook's practices, and it is expected to affect more than one billion users. Wikborg Rein reviews the details of Facebook's decision and its potential consequences in this brief article.

28/06/2018

Implementing the GDPR in Norway

The General Data Protection Regulation (GDPR) starts to apply within the European Union (EU) from 25th May 2018. Since the GDPR is an EU regulation, it will have direct applicability and direct effect in all EU member states as from that date. Norway, however, is not an EU member state but a member of the European Economic Area (EEA) and a different procedure therefore applies before the GDPR can become part of Norwegian law.