Strict data protection requirements apply to the use of location tracking systems both in the employment context and in cooperation with other companies. In its partial judgement from March 19, 2019, the Lüneburg Administrative Court ruled in compliance with the provisions of the General Data Protection Regulation and the new Federal Data Protection Act (BDSG) that unrestricted tracking of employee vehicles is impermissible ...
It’s 8 am, and you just learned that a material cyber-incident occurred in your organization. You fire up your Incident Response Plan. You engage outside counsel, and outside counsel engages a forensic firm. Your company, your outside counsel, and your forensic firm all sign an agreement that the forensic firm will work at the direction of outside counsel ...
INTRODUCTION In a previous issue of Decoded, we discussed the alarming fact that many medical devices, including those implanted in patients' bodies, are leaving the manufacturers with known cybersecurity flaws. Due to these known flaws, these devices are vulnerable to being hacked, and patients’ personal/protected health information ("PHI") stolen; or worse, the device being held hostage in a ransomware attack ...
Most of the attention at this week's ASEAN foreign ministers meeting in Manila focused on the failure of ASEAN to reach a definitive approach on establishing a human rights body for the grouping. The proposed ASEAN Charter is supposed to address human rights concerns through this new entity. Perhaps given the diversity in governance standards among members, this was to be expected ...
The Online Safety Act 2023 implements broad reforms for how many businesses must operate their online services. Here, Matthew MacLachlan explains the action to take now to comply. The Online Safety Act 2023 (‘the Act’) received Royal Assent in October 2023. Although the Act is now law, it will not be enforced by the regulator, Ofcom, until secondary legislation is passed and when Ofcom’s draft codes of practice are finalised ...
With cybersecurity risks increasing and evolving moving into 2023, the federal government is taking steps to help secure our cyber infrastructure. The recent passing of the 2023 omnibus spending agreement included additional funds for a variety of federal agencies in order to strengthen our cybersecurity apparatus. The Cybersecurity and Infrastructure Agency (“CISA”) received $1.3 billion for its cybersecurity programs. This is a $230 million increase over last year ...
On 28 May 2022, the Belgian law transposing EU Directive 2019/2161 into the Code of Economic Law (CEL) entered into force (the “Omnibus Act”). The Omnibus Act aims to modernise consumer protection given the increasing development of e-commerce. In addition to new transparency obligations for online marketplaces, the Omnibus Act has new general information obligations, and new unfair commercial practices and obligations for price reduction announcements that apply to all retailers ...
The European Commission adopted a new set of Standard Contractual Clauses (“New SCCs”), effective 27 June 2021, for the transfer of personal data to non-EU regions. From 27 September 2021 onwards, data exporters and data importers can only conclude contracts which incorporate the New SCCs for the transfer of personal data out of the European Union ...
Under the GDPR, transfers of personal data are permitted without restriction to countries that the European Commission (the "EC") has assessed as providing an "adequate" standard of protection for personal data. The current list of countries considered "adequate" is Andorra, Argentina, Canada (for commercial organisations), Faroe Islands, Guernsey, Israel, Isle of Man, Japan, Jersey, New Zealand, Switzerland and Uruguay and the United Kingdom ...
The OFT has announced that, for a trial period of 18 months, it will offer cash rewards to individuals that blow the whistle on cartels. Pay outs of up to £100,000 could be made at the OFT’s discretion – but only where the information provided helps the regulator to identify and take action against illegal cartels ...
The European Union has recently launched a new ccTLD (country code top level domain). Instead of using the various national European ccTLD's, such as .fr for French companies, .de for German companies, and .co.uk for U.K. companies, the EU has made available the .eu suffix as a Community-wide ccTLD. The new domain extension has already proved widely popular, with more than 100,000 applications for domain names filed thus far ...
On 9 August 2023, U.S. President Joe Biden signed the Executive Order on Addressing United States Investments in Certain National Security Technologies and Products in Countries of Concern (the "Executive Order"), to regulate U.S. persons engaged in transactions or investment activities in China (including mainland China, Hong Kong and Macau) that involve certain technologies and products. The U.S ...
The Indonesian Minister of Health has issued Minister of Health Regulation No. 24 of 2022 on Medical Records (“MOH 24/2022”), under which the MOH requires all healthcare facilities to keep electronic medical records. MOH 24/2022 allows, among other things, cooperation between a healthcare facility and a third-party electronic organizer and covers who may have access to electronic medical records ...
The rapid development of technology in the modern era has required more effective and efficient case and court administration services. In addition, Article 2 (4) of Law Number 48 of 2009 on Judicial Powers requires the justice system to be simple, quick and low cost. For this reason, the Indonesian Supreme Court saw a need to reform the administrative and justice system in order to overcome the existing obstacles and challenges of administering the justice system ...
The Policy will apply to a broader range of regulated entities and includes updates to take account of Jersey’s evolving regulatory framework. The key amendments to the Policy are as follows: private funds or other funds with a consent issued pursuant to the Control of Borrowing (Jersey) Order 1958 (“COBO”), (which could include funds not domiciled in Jersey and unregulated funds) are not caught under the Policy ...
News of a new federal law on foreign direct investment in the UAE has many people asking: “Does this mean I can now form a new company with majority foreign ownership?” The answer is the same as previously, “No, not yet”. Companies incorporated in the UAE require a minimum of 51 percent UAE ownership. As an exception to this rule, 100 percent foreign ownership is permitted in free zones. The new law may lead to further exceptions in the future ...
On 25 March 2022, the European Commission and the United States Government announced an “agreement in principle” on a new EU-US Trans-Atlantic Data Privacy Framework (the Framework). The purpose of this is to address the concerns that the Court of Justice of the European Union (CJEU) raised in the Schrems II decision, and thus allow the flow of personal data from the EU to the US in a manner that is compliant with the requirements of the GDPR ...
On 25 March 2022, the European Commission and the United States Government announced an “agreement in principle” on a new EU-US Trans-Atlantic Data Privacy Framework (the Framework). The purpose of this is to address the concerns that the Court of Justice of the European Union (CJEU) raised in the Schrems II decision, and thus allow the flow of personal data from the EU to the US in a manner that is compliant with the requirements of the GDPR ...
The agreement on a new EU-U.S. data privacy framework between EU Commission President Ursula Von Der Leyen and U.S. President Joe Biden had already been announced on 25 March 2022 (for background, please refer to our previous article The EU-US Privacy Shield: Third Time’s a Charm? – Mamo TCV) ...
Following the adequacy decision, as outlined in our previous article, personal data may be transferred from the EU/EEA to companies in the US that are listed on the «Data Privacy Framework List«. The EDPB confirms in their information note that in these cases, there is no need to establish other transfer tools ...
To create the most favorable environment for the intensive development of the IT industry and pooling resources for the new projects, the Russian Government has adopted a Law introducing a number of changes and tax incentives for the IT and Technology Companies. It will be effective starting from January 1st, 2021. Below, we provide our consolidated analysis of the new rules and recommendations on steps to be taken to prepare for the forthcoming changes ...
On Jan. 29, the National Bank of Ukraine adopted a regulation on the procedure for granting residents individual NBU licenses to transfer hard currency outside Ukraine as payment for monetary assets. According to this new regulation, prior to making a payment in hard currency to a non-resident seller of monetary assets - except for external government T-bills -, a resident purchaser must obtain from the NBU an individual license authorizing the remittance ...
The Migration Advisory Committee (MAC) has today published its report1 on immigration reform. As the MAC itself acknowledges, there will be “winners” and “losers” in any policy for immigration reform.On an initial reading of the report, it would appear the reforms proposed, while impacting all sectors, would be most challenging for those sectors employing a low-skilled workforce ...
