EU-Japan Mutual Adequacy Decisions Effective as of January 23, 2019

This article examines the implications the recent EU-U.S. Data Privacy Framework will have on U.S.-based life sciences companies.

The differences between the EU General Data Protection Regulation (GDPR) and U.S. state data breach notification laws do not just represent differing compliance burdens. More importantly, they could weigh in favor of a different approach to investigation and could drive diverging EU and U.S. approaches to notification for the same incident, requiring companies to take into account distinctions in the types of information, incidents, and risks to affected individuals that trigger notification obligations.

With the end of the Brexit transition period around the corner, companies doing business in the EU and UK must prepare for data protection change – and not only international data transfers. Our Privacy & Data Security Team offers key action points for companies to take to ensure compliance.

The EU recently took the first step toward potential direct regulation of artificial intelligence. Although not legally binding, the guidelines are important because they represent the first significant government-initiated effort to influence the use of AI systems.

An EU-focused update on privacy, data security, and all things cyber by the attorneys of Alston & Bird.