Auteurs: Anneleen Van de Meulebroucke et Justine De Meersman (Eubelius)Date de publication: 04/02/2021 À la suite du Brexit, le Royaume-Uni est un pays tiers à la lumière du RGPD à compter du 1er janvier 2021. Le « EU-UK Trade and Cooperation Agreement » (« l'accord ») comprend un mécanisme de transition sur l'échange ultérieur de données
Auteur: Claeys & EngelsDate de publication: 04/02/2021 Dans le sillage du mouvement « Black Lives Matter », les entreprises veulent accroître la diversité de leur personnel. Les employeurs souhaitent parfois demander à leurs travailleurs ou candidats de fournir volontairement des informations personnelles (« contrôle de la diversité »). Il s'agit souvent de données sur
Authors: Stéphanie De Smedt, Nina Orlić, Kim Lucassen and Emilia Fronczak (Loyens & Loeff)Publication date: 31/12/2020 As of 1 January 2021, the UK qualifies as a ‘third country’ pursuant to the EU General Data Protection Regulation 2016/679 (GDPR). From a data protection perspective, this means, in principle, that additional measures
Authors: Geert Somers and Liesa Boghaert (Timelex) Publication date: 25/11/2020 The CJEU ruling from 16 July 2020 in the Schrems II case created a lot of uncertainty for organisations transferring personal data outside the EEA. Not only was the EU-US Privacy Shield invalidated, the Court also imposed conditions for the use of standard contractual clauses (SCCs)
Auteur: Claeys & Engels Date de publication: 13/11/2020 Début octobre, l’autorité de protection des données d’Hambourg a décidé d’infliger une amende de 35,3 millions d’euros au service center de H&M à Nuremberg parce que l’enseigne de mode suédoise avait violé la vie privée de ses travailleurs en conservant de nombreuses
Authors: Vanessa Marquette and Sara De Moor (Loyens & Loeff) Publication date: 28/10/2020 The National Bank of Belgium (NBB) has issued fifteen recommendations for cloud service providers in the insurance sector, which will apply as from 1 January 2021. The recommendations cover the entire outsourcing process and build in higher
Authors: Tim Fransen and Matthias Bruynseraede (K Law) Publication date: 28/08/2020 On 17 July 2020, the Court of Justice of the European Union (CJEU) issued its long-awaited judgement in the ‘Schrems II’ case.[1] In this article, we provide an insight into the significance of the judgement and its effect on personal
Authors: Peter Craddock, Jacqueline van Essen, Terrence Dom and Vincent Wellens (NautaDutilh) Publication date: 06/07/2020 On 6 July 2020, the European Data Protection Supervisor (EDPS) published a report on the use of data protection impact assessments (DPIAs) within EU institutions. This report, based on replies by 39 EU institutions, bodies
Author: Stéphanie De Smedt (Loyens & Loeff) Publication date: 12/05/2020 In February 2020, the Markets Court (a division of Brussels’ Court of Appeal) annulled the decision by which the Belgian Data Protection Authority (BDPA) had imposed an administrative fine of EUR 10,000 on a retailer for the use of electronic
Authors: Bernd Fiten and Geert Somers (Timelex) Publication date: 29/04/2020 Did you know the GDPR can be relevant to your company even if you do not have an establishment in the EU? In this blog you will read 5 things you need to know about the GDPR representative, which you