Data Transfers between U.S. and EU After New General Data Protection Regulation and Under the New EU-U.S. Privacy Shield

Description

U.S. companies face complex, cross-border data protection laws governing data exchanged between U.S. locations and those in other countries. Things are now more complicated for companies sending or receiving information from EU locations since the EU’s Dec. 2015 formal agreement on the new GDPR, which replaces the 1995 data protection directive.

The new GDPR further restricts the use of data and allows for significantly stiffer penalties, up to four percent of global gross revenue, for noncompliance. The GDPR applies broadly, including companies based outside the EU that provide goods and services in the EU.

In addition to the GDPR, in Schrems v. Data Protection Authority the EU’s Court of Justice invalidated the U.S.-EU safe harbor, which enabled companies to move personal data between the EU and U.S. Counsel to companies doing business in the EU must understand the new environment and prepare to meet the new data protection requirements. Companies should establish policies and procedures that anticipate and mitigate data protection risks in corporate and commercial transactions.

Listen as our authoritative panel examines the new EU regulation for data protection and what companies and their counsel should due in advance of the new requirements. The panel will also discuss the impact of the Schrems decision on the flow of data between the U.S. and the EU and the new safe harbor provision that is expected. The panel will offer best practices for complying with the requirements for data protection and minimizing the risk of investigation.