03 December 2020
The EU Whistleblowing Directive
www.twobirds.com/en/in-focus/the-eu-whistleblowing-directive

Directive (EU) 2019/1937 on the protection of persons who report breaches of Union law (the Whistleblowing Directive) must be implemented by all EU Member States by no later than 17 December 2021.

26 November 2019
EDPB Publishes Guidelines on Data Protection by Design and by Default
www.twobirds.com/en/news/articles/2019/global/edpb-publishes-guidelines-on-data-protection-by-design-and-by-default

On 20 November 2019, the European Data Protection Board (“EDPB”) published its draft guidelines on the principles of Data Protection by Design and Default (the “Guidelines”) under Article 25 of the EU General Data ...

07 January 2019
Big Data & Issues & Opportunities: General Overview
www.twobirds.com/en/news/articles/2019/global/big-data-and-issues-and-opportunities-general-overview

This introductory article is the first in a series of articles looking into the legal, ethical and social issues and opportunities surrounding big data, which were brought to the forefront by the LeMO Project ...

04 February 2019
Big Data & Issues & Opportunities: Breach-related obligations
www.twobirds.com/en/news/articles/2019/global/big-data-and-issues-and-opportunities-breach-related-obligations

In this fifth article in our series on "Big Data & Issues & Opportunities" (see our previous article here), we focus on some of the breach-related obligations in a big data context. Where relevant, illustrations from ...

19 November 2019
EDPB Publishes Finalised Guidelines on Territorial Scope
www.twobirds.com/en/news/articles/2019/global/edpb-publishes-finalised-guidelines-on-territorial-scope

On 15 November 2019, the European Data Protection Board ('EDPB') published its finalized Guidelines on the Territorial Scope of the GDPR.

22 January 2019
Airlines and cyber risk: what is your legal obligation?
www.twobirds.com/en/news/articles/2019/global/airlines-and-cyber-risk-what-is-your-legal-obligation

Many of you will be familiar with the NISR (Network and Information Systems Regulations), which came into force on 9 May this year and which have been designed to prevent critical national infrastructure of EU countries ...

28 January 2019
Big Data & Issues & Opportunities: Cybersecurity
www.twobirds.com/en/news/articles/2019/global/big-data-and-issues-and-opportunities-cybersecurity

In this fourth article in our series on "Big Data & Issues & Opportunities" (see our previous article here), we focus on some of the cybersecurity aspects of big data processing. Where relevant, illustrations from the ...

17 November 2020
European Commission publishes proposed replacement Standard Contractual Clauses
www.twobirds.com/en/news/articles/2020/global/european-commission-publishes-proposed-replacement-standard-contractual-clauses

On 12 November 2020, the European Commission published a draft Implementing Decision on new standard contractual clauses for the transfer of personal data to third countries (Clauses).

02 November 2020
Information Commissioner fines Marriott International Inc. £18.4 million in relation to its 2018 data breach
www.twobirds.com/en/news/articles/2020/global/information-commissioner-fines-marriott-international

The Information Commissioner had originally served a Notice of Intent to fine Marriott £99.2 million. The final fine would have been £28 million, but was reduced by 20% to £22.4 million to take account of mitigating ...

19 October 2020
EDPB publishes draft guidelines on controllers and processors
www.twobirds.com/en/news/articles/2020/global/edpb-publishes-draft-guidelines-on-controllers-and-processors

On 02 September 2020 the European Data Protection Board (“EDPB” or "Board") published detailed guidelines on the concepts of controller and processor under GDPR (the “Guidelines”).