Publication
Horizon Scanning: Investigations and Enforcement
In this horizon scan, we focus on key developments affecting companies operating in the UK, including in light of the recent change in UK government.
Global | Publication | May 2018
Authors: Fiona Bundy-Clarke, Emma Humphries
The EU General Data Protection Regulation (GDPR) will apply directly in all EU Member States from 25 May 2018. It will repeal and replace Directive 95/46EC and its Member State implementing legislation.
Together with the Directive on the Processing of Personal Data for the Purpose of Crime Prevention, the GDPR presents the most ambitious and comprehensive changes to data protection rules around the world in the last 20 years.
The GDPR rules apply to almost all private sector processing by organisations in the EU or by organisations outside the EU which target EU residents. The export regime will ensure their impact is felt where such organisations transfer personal data to the EU.
The maximum fines for non-compliance are the higher of €20m and four per cent of the organisation’s worldwide turnover.
The broad territorial scope of GDPR and the global nature of the shipping industry requires shipowners around the world to consider carefully whether the regulation applies to their business.
Shipowners will be affected if they:
The concept of accountability is at the heart of the GDPR rules: it means that organisations need to be able to demonstrate that they have analysed the GDPR’s requirements in relation to their processing of personal data and that they have implemented a system or programme that allows them to achieve compliance.
Our GDPR checklist is designed to give an illustrative overview of the requirements likely to impact most types of businesses and the practical steps that organisations need to take to meet those requirements. It can be used to gain an understanding of where an organisation has gaps in its compliance and to articulate how its control programme meets the requirements. It should be noted that certain parts of the GDPR (such as exceptions to the data subject rights and where processing is in the substantial public interest) are supplemented by Member State local legislation and guidance from local data protection authorities and the Article 29 Working Party, which becomes the European Data Protection Board under the GDPR.
Publication
In this horizon scan, we focus on key developments affecting companies operating in the UK, including in light of the recent change in UK government.
Publication
As you begin planning for the upcoming financial year, it is likely that legal operations projects are on your radar. However, securing the necessary budget can be challenging. Our roundtable on October 1, ‘Preparing for FY2025 - Building a compelling business case’, will help you create compelling business cases for your legal initiatives.
Publication
On 3 September 2024, the ECJ delivered its judgment in Illumina’s appeal against the General Court’s (GC) judgment confirming the European Commission’s (EC) powers to review concentrations under the EU Merger Regulation (EUMR) in circumstances where no Member State has jurisdiction under national law.
Subscribe and stay up to date with the latest legal news, information and events . . .
© Norton Rose Fulbright LLP 2023