Publication
Legal strategies to tackle fraud in early-stage investments in Asia
In the wake of the recent eFishery scandal early-stage investors are recalibrating their approach to due diligence and risk tolerance.
GDPR Checklist
EU GDPR will apply from May 25, 2018
Global | Publication | April 2018
The EU General Data Protection Regulation (GDPR) will apply directly in all EU Member States from 25 May 2018. It will repeal and replace Directive 95/46EC and its Member State implementing legislation.
Together with the Directive on the Processing of Personal Data for the Purpose of Crime Prevention, the GDPR presents the most ambitious and comprehensive changes to data protection rules around the world in the last 20 years.
The GDPR rules apply to almost all private sector processing by organisations in the EU or by organisations outside the EU which target EU residents. The export regime will ensure their impact is felt where such organisations transfer personal data to the EU. The maximum fines for non-compliance are the higher of €20m and 4 per cent of the organisation’s worldwide turnover.
The concept of accountability is at the heart of the GDPR rules: it means that organisations need to be able to demonstrate that they have analysed the GDPR’s requirements in relation to their processing of personal data and that they have implemented a system or programme that allows them to achieve compliance.
Our GDPR checklist is designed to give an illustrative overview of the requirements likely to impact most types of businesses and the practical steps that organisations need to take to meet those requirements. It can be used to gain an understanding of where an organisation has gaps in its compliance and to articulate how its control programme meets the requirements. It should be noted that certain parts of the GDPR (such as exceptions to the data subject rights and where processing is in the substantial public interest) are supplemented by Member State local legislation and guidance from local data protection authorities and the Article 29 Working Party, which becomes the European Data Protection Board under the GDPR.
If your organisation needs assistance with analysing and implementing changes arising from the application of the GDPR please contact one of the Norton Rose Fulbright data protection team members whose details are set out at the back of the checklist.
Recent publications
Publication
REMA: what lies ahead
As we stand on the cusp of transformative change within the energy sector, anticipation builds around the UK government’s impending decision on the Review of Electricity Market Arrangements (REMA). This briefing provides a recap of the proposals made to date and looks at the potential future impact of the REMA proposals on market players.
Publication
Decree 57/2025 - Key Features and Impact on Direct Power Purchase Agreements in Vietnam
Following the launch of the new Electricity Law on 30 November 2024, which took effect on 1 February 2025 (Electricity Law 2024), Decision No. 768/QD-TTg (Decision 768) issued on 15 April 2025 by the Prime Minister of Vietnam approved the revised National Power Development Plan VIII (PDP 8) for the period 2021–2030, with a vision to 2050. This decision replaces the previous Decision No. 500/QD-TTg, dated 15 May 2023.
Subscribe and stay up to date with the latest legal news, information and events . . .