EU GDPR regime

EU GDPR regime

The General Data Protection Regulation, Regulation (EU) 2016/679 (EU GDPR) regime became applicable across the EEA (which at the time included the UK) on 25 May 2018. The EU GDPR ceased to apply to the UK on 31 December 2020 at 11 pm.

This subtopic addresses key features of the EU GDPR at a supranational (ie EEA) level. Individual EEA states may exercise a number of national derogations and other discretions to put in place various additional or alternative data protection laws and the various supervisory authorities in each state may adopt different interpretation or approaches in practice. This topic does not consider the position under the laws of specific EEA states or the guidance of specific EEA supervisory authorities. You should refer to guidance from the relevant national supervisory authorities and national law regarding

To view the latest version of this document and thousands of others like it, sign-in with LexisNexis or register for a free trial.

TAKE A FREE TRIAL

Latest Information Law News

A closer look at the Data (Use and Access) Bill of 2024

Information Law analysis: Victoria Hordern, partner at Taylor Wessing LLP, discusses the Data (Use and Access) Bill, how it differs from previous proposals, who will be impacted, and key takeaways for data protection and privacy practitioners.

Operational resilience—a look at your contracts and the impact of DORA

EU Law analysis: Kristof de Vulder, Alessandro Ferrari and Linzi Penman, partners, and Conor McEneaney, legal director, at DLA Piper, discuss the scope and impact of the upcoming Digital Operational Resilience Act (DORA). They offer practical guidance to organisations dealing with one of the most comprehensive gap analysis and remediation exercises to face the EU financial services sector in recent years.

Court of Appeal clarifies law on state of mind necessary for breach of confidence (Kieron Corrigan & Co Ltd v Bashir Timol)

Information Law analysis: The Court of Appeal has handed down one of the first breach of confidence judgments since the Supreme Court’s decision in Lifestyle Equities v Ahmed. While this decision does not meaningfully consider Lifestyle Equities (indeed, the appellant conceded on one of its grounds of appeal due to that judgment), it provides further clarification on the scope of the primary liability of agents or employees of corporate entities in breach of confidence proceedings. It further considers the state of mind which the claimant must establish to have been held by the defendant to sustain a breach of confidence allegation. The judgment also considers and provides guidance for how to deal with documents disclosed late in proceedings (in this case, after a trial on liability and during disclosure as to quantum), and particularly on whether to provide for a retrial in light of such evidence. Written by Mark Nichols, senior associate at Potter Clarkson LLP.

NCSC releases Annual Review 2024, highlighting cybersecurity progress

The National Cyber Security Centre (NCSC) has published its eighth Annual Review, covering the period from 1 September 2023 to 31 August 2024. The review showcases the organisation's efforts to enhance the UK's online safety and provide clarity in an increasingly complex digital landscape.

View Information Law by content type :

News