Privacy & Information Security Law Blog

After much debate, the final version of the EU General Data Protection Regulation (“GDPR”) is expected to be adopted by the European Parliament this week and to take effect in early 2018. The GDPR will significantly change EU data protection law in several areas, affecting all businesses in the energy, financial, health care, real estate, manufacturing, retail, technology and transportation industries, among others. To assist in-house lawyers and privacy professionals with understanding the new GDPR and planning ahead for implementation, Hunton & Williams’ Privacy and Cybersecurity practice lawyers have released The EU General Data Protection Regulation, a Guide for In-House Lawyers covering these strategic areas:

• jurisdiction and territorial scope
• enforcement, sanctions and penalties
• supervisory authorities
• accountability
• notices
• privacy by design and by default
• profiling
• data breach reporting
• obligations of processors
• processing conditions
• anonymization and pseudonymization
• cross-border data transfers
• binding corporate rules
• seals, certifications and codes of conduct
• other areas remaining unharmonized