Joe Jones’ Post

🌐 The introduction of the Data Bridge allows UK organizations to transfer personal data to U.S. counterparts certified under the "U.K. Extension to the EU-US Data Privacy Framework (DPF)." 📅 Set to take effect on 12 October, this development marks a significant milestone in transatlantic data transfers. #DataBridge #DataPrivacy #UKUSDataExchange

In #DPF news: as of October 12, 2023, companies can transfer personal data from the UK to the U.S. under the UK Extension to the EU-U.S. DPF with no further safeguards. Companies will be able to use the UK Extension as an alternative to the #SCCs. However, companies can also keep their SCCs if this makes sense for them - e.g., if the SCCs support longstanding contractual relationships or if the company is concerned about potential challenges to the UK Extension. Thanks Joe Jones for bringing us the news! #datatransfers #privacy #privacypros #dataprotection #gdpr #privacylaw

The report "Moving forward on data free flow with trust: new evidence and analysis of business experiences" https://lnkd.in/ej8qF2TC adopted in April by the 38 OECD countries may not have got all the visibility it deserves. Prepared at the initiative of Japan and welcomed by the G7 Digital and Tech Ministers at their meeting in Takasaki https://lnkd.in/dnXQFCVt, this report collects the experiences of +40 companies and legal practitioners in all regions of the world where rules relating to the transfer of personal data are either in force or under more or less advanced development. The aim of this exercise was to gather practical experiences on the challenges that companies of all sizes and in all sectors face in effectively protecting individuals' data in this fast changing global regulatory environment. These experiences were synthetised in such a way as to contribute to ongoing reflections on the various levers available to governments and regulators collectively to help them deal with such challenges and move forward on #DFFT. A salient point of the report is that companies, like policymakers and of course people, have a shared interest in ensuring a high level of data protection. In this regard, facilitating compliance with these rules is essential to ensure the effectiveness of meaningful protection in data flows, in particular by enabling the optimisation of resources devoted to the protection of personal data. Obviously, this report focused on business perspectives covers only one of the many aspects of DFFT and collecting the views of regulators and civil society as a whole on these issues will be needed to advance this ambitious agenda. Other themes including non-personal data transfers, data sharing, follow-on work to the Declaration on government access to personal data held by private sector entities https://lnkd.in/ezTTXHEU, regulatory cooperation, #PETs, among others, are also at the heart of our reflections on the Institutional Arrangement for Partnership (IAP) to operationalise DFFT. Kudos to Francesca Casalini for the huge work accomplished on this report, with Shihori Maeda. We are indebted to Steve Wood David N. Alfred Ruth Boardman Simon Hania Mercy King'ori Danny Kobrata Phil Lee Peter Leonard Caroline Louveaux Derek Ho Melody Musoni, PhD Fabrice Naftalski Karima Noren Yann Padova Kwang Bae Park Mark Parsons Deepak Pillai Paulo Brancher Jaqueline Simas de Oliveira Takeshige Sugimoto Omer Tene Eduardo Ustaran Daimhin Warner Dino Wilkinson Masha Ooijevaar Bojana Bellamy Natascha Gerlach CIPP/E Vivienne Artz OBE FCSI (Hon) Caitlin Fennessy Isabelle Roccia IAPP - International Association of Privacy Professionals International Air Transport Association (IATA) and many others who shared their experience with us.

With China accounting for as much as 23% of transnational #dataflows, its stringent data localization rules have sweeping implications for #globaltrade and #innovation. Rebecca Arcesati and Jeroen Groenewegen-Lau explain the mechanics of China’s data management: https://buff.ly/3NnV7iV Some key takeaways: - Security and growth imperatives have persuaded Beijing that the market alone cannot handle data safely and efficiently; the party-state must remain firmly in charge of all key levers of policy and society in China. - The regulatory and institutional overhaul of China’s data governance framework over the past six years frames Beijing’s efforts to harness data as a national resource and a factor of production. For more on this topic, also see: https://buff.ly/3uTUF5t - Beijing has strengthened its control and visibility over China’s data flows through party and #stateagencies like the Cyber Administration of China, as well as through a range of platforms that sit in strategic positions in China’s economic and social structures. https://buff.ly/3RzEljh - Increasingly, privately owned Chinese and foreign firms alike must navigate party-state control over data transfers, both within China and across borders. But forcing foreign companies to submit data would be inconsistent with Beijing's current effort to attract #FDI.

Europe in the last six years has rolled out a raft of data laws. China has strict internet regulations. The US, meanwhile, has no federal standards to govern its powerful #techgiants. Keith Rockwell examines the leadership crisis in global #datagovernance: https://buff.ly/3VDQENX ICYMI: The #USTR’s October 2023 withdrawal of support for trade rules that promote cross-border information access will produce significant economic costs for the US and its allies. Joseph W. of the Global Data Alliance assessed the move's impact: https://buff.ly/3U23mos Also: The datasphere is becoming a dangerous arena as governments partner with and co-opt private companies to turn them into techno-nationalist assets. The race for data supremacy will reshape the trade landscape, Alex Capri writes: https://buff.ly/3TM1ZbY And: As we enter the #digitalage, the clash between #internationallaw and sovereignty resurfaced once again in the form of data sovereignty. Can trade agreements facilitate the convergence of different models of data governance? Henry Gao examines: https://buff.ly/3Jo20OV

The UK-US Data Bridge Regulations, took effect yesterday, October 12, 2023. These regulations recognize the United States as providing sufficient data protection as long as organizations are listed on the EU-US Data Privacy Framework (DPF) and participate in the UK Extension to the DPF. The DPF basically replaces the invalidated EU-U.S. Privacy Shield. It facilitates data transfers between the UK and the US without additional assessments or safeguards. With these regulations in place, organizations can seamlessly exchange data with US entities that meet specific criteria without the burden of additional assessments or safeguards. This not only streamlines the process but also fosters trust and ensures compliance. As the data protection landscape continues to evolve, these measures represent a forward-looking approach to data transfer, ultimately benefiting organizations on both sides of the Atlantic.