The following is part of Greenberg Traurig’s ongoing series analyzing cross-border data transfers in light of the new Standard Contractual Clauses, approved by the European Commission in June 2021.
| Visual | Summary |
 |
|
Transfers from EEA Controller to non-EEA Processor: Controller A (EEA)→ Processor Z (US)→ Controller A (EEA)
The following is part of Greenberg Traurig’s ongoing series analyzing cross-border data transfers in light of the new Standard Contractual Clauses, approved by the European Commission in June 2021.
| Visual | Summary |
 |
|
Transfers from EEA Controller to EEA Processor: Controller (EEA)→ Processor (EEA) → Affiliated Processor (US)
The following is part of Greenberg Traurig’s ongoing series analyzing cross-border data transfers in light of the new Standard Contractual Clauses approved by the European Commission in June 2021.
| Visual | Implications |
 |
|
Transfers from EEA Controller to EEA Processor: Controller (EEA) Processor (EEA) → Employee of Processor (non-EEA)
The following is part of Greenberg Traurig’s ongoing series analyzing cross-border data transfers in light of the new Standard Contractual Clauses approved by the European Commission in June 2021.
| Visual | Implications |
 |
|
Is all consent created equal? How the different privacy statutes treat the standard for consent.
Consent plays a role in almost all modern privacy statutes. In some privacy statutes, like the GDPR, it can function as one of many lawful purposes to process data. In other privacy statutes, like the VCDPA and the CPA, it is mandated for certain types of data processing (e.g., sensitive category data processing). How consent
Controller A (EEA)→ Controller B (US)→ Controller C (US)
The following is part of Greenberg Traurig’s ongoing series analyzing cross-border data transfers in light of the new Standard Contractual Clauses approved by the European Commission in June 2021.
| Visual | Implications |
 |
|
Do people always have the right to withdraw consent?
Modern privacy laws contain different definitions for the term “consent,” and different standards for when consent will, and will not, be effective.
In Europe, the right of an individual to withdraw consent for the processing of their personal data has become near axiomatic and is often referred to by Member State supervisory authorities. The right
EU Commission Confirms Adequate Level of Data Protection in South Korea
With its adoption of an adequacy decision pursuant to Art. 45 General Data Protection Regulation (GDPR) for the Republic of Korea on Dec. 17, 2021, the European Commission has declared that the country provides an adequate data protection level comparable with GDPR standards.
Cross-Border Transfer Master Class: Controller (EEA)→ Controller (EEA)→ Branch Office (US)
The following is part of Greenberg Traurig’s ongoing series analyzing cross-border data transfers in light of the new Standard Contractual Clauses approved by the European Commission in June 2021.
 |
|
Cross-Border Transfer Master Class: Transfers from EEA Controller to Non-EEA Controller: Controller (EEA) → Controller (EEA) → Affiliated Processor (US)
 |
|