Court and regulatory enforcement update

Each year, the International Programme features a detailed discussion of recent court decisions—mostly from the United States—on privacy, data security, and cross-border data transfer issues. This year the focus has shifted to regulatory enforcement actions, as European data protection authorities closed out their dockets under their old national laws and started enforcement under GDPR. One year in, the GDPR is already resulting in notable decisions providing guidance for practitioners, with sizeable fines in a few exemplar cases. Data protection authorities in the APAC region are flexing their regulatory muscle as well. Our panel of privacy and data security legal scholars will lead a dialogue on the most instructive cases from the past year.