Raul Rubio, Author at Connect On Tech

In Data Privacy

Consideration for EU Service Providers Supporting EU and Non-EU Customers

The new standard contractual clauses for data transfers to third countries (“Ex-EU SCCs”) and standard contractual clauses for controllers and processors in the EU/EEA (“Intra-EU SCCs”) issued by the European Commission provide for, both, chances and challenges for EU service providers supporting EU and non-EU customers, some of which are outlined below. 1. When do the Ex-EU SCCs apply? EU service providers supporting non-EU customers might want to enter into the new Ex-EU SCCs with…

In EU GDPR

Intra-EU/EEA Standard Contractual Clauses: What you need to know

The European Commission (“EC”) recently issued a set of standard contractual clauses for controllers and processors in the EU/EEA (“Intra-EU SCCs”). The Intra-EU SCCs accompany a wider set of clauses issued for extra-EU/EEA personal data transfers (“Extra-EU SCCs”), covering transfers between different types of data processing actors (processors, controllers, sub-processors etc.). Both of them were published in the Official Journal of the European Union on June 7, 2021. The clauses for intra-EU data processing arrangements…

In Data Privacy

The New European Commission Standard Contractual Clauses: What you need to know

The European Commission (“EC”) recently issued its revised standard contractual clauses for data transfers to third countries (“Ex-EU SCCs”) and a companion set of standard clauses for controllers and processors in the EU/EEA (“Intra-EU SCCs”). Both are now published in the Official Journal. The following is an introduction to the core elements of the Ex-EU SCCs and a brief overview of the Intra-EU SCCs. Legal Context The Ex-EU SCCs are a mechanism that companies can…

In Data Privacy

The third anniversary of the GDPR: Looking ahead

May 25, 2021 by Benjamin Slinn, Magalie Dansac Le Clerc, Yann Padova, Dr Michaela Nebel, Raul Rubio, Francesca Gaudino, Jennie Nilsson, Dr Lukas Feiler, Prof. Dr. Michael Schmidl, Nathalja Doing, Radoslaw Nozykowski and Elisabeth Dehareng 27 Mins Read

The 25 May 2021 marks the third anniversary of the GDPR coming into force. As we have moved from preparation for the GDPR to business as usual compliance with the GDPR, regulators have focused on various issues in different jurisdictions. Although we are now three years into compliance with the GDPR being part of our day to day operations, it is clear that interpretation and expectations regarding compliance from the courts and regulators continue to…

In Data Privacy

Data Protection Day – Looking ahead to 2021

January 28, 2021 by Benjamin Slinn, Elisabeth Dehareng, Magalie Dansac Le Clerc, Julie Martinez, Julia Kaufmann, Michaela Nebel, Francesca Gaudino, Raul Rubio, Jennie Nilsson, Kensaku Takase, Joan Tan, Jacqueline Wong, Flavia Rebello, Brian Hengesbaugh, Harry Valetk and Ken Chia 25 Mins Read

Happy Data Protection Day! The 28 January each year is celebrated as Data Protection Day (or Data Privacy Day outside of Europe), which marks the anniversary of the Council of Europe’s Convention 108. To mark Data Protection Day 2021, we have summarised some of the key trends and developments in the EU, UK and beyond from a data protection perspective and looking ahead to what to expect for 2021. You can jump to specific country…

In Data Privacy

GDPR two years on: What’s happened and what’s ahead?

May 22, 2020 by Benjamin Slinn, Joanna De Fonseka, Julia Kaufmann, Magdalena Kogut-Czarkowska, Francesca Gaudino, Magalie Dansac Le Clerc, Yann Padova, Jennie Nilsson, Elisabeth Dehareng, Raul Rubio, Patricia Pérez, Antonio Muñoz-Torrero, Andre Walter and Wouter Seinen 45 Mins Read

It has been two years since the GDPR came into force on 25 May 2018 and during that time, we have seen more guidance published at an EU level as well as from data protection authorities in Member States which has impacted how organisations approach areas of GDPR compliance. We have also seen enforcement action from data protection authorities across the EU and UK. There have also been other significant developments, over the past two…

In Communications & Mobility

European Data Protection Board Publishes Draft Guidelines on Connected Vehicles

March 3, 2020 by Benjamin Slinn, Joanna De Fonseka, Julia Kaufmann, John McGovern, Francesca Gaudino, Raffaele Giarda and Raul Rubio 9 Mins Read

The European Data Protection Board (EDPB) has published its draft guidelines on processing personal data in the context of connected vehicles for public consultation. The Guidelines have a wide reach and will apply to more than just vehicle manufacturers. We have summarised the key points and recommendations from the EDPB in the Guidelines below. The public can provide comments to the EDPB until March 20th, 2020. Thereafter, the EDPB will finalize and adopt the Guidelines,…