GDPR: Lessons Learned from the First 100 Days

https://www.mayerbrown.com/exp....erience/Cybersecurit

The European Union’s ("EU") General Data Protection Regulation ("GDPR") entered into force on May 25, 2018 ("GDPR Day"). For most organizations, the road to GDPR compliance has been a bumpy one. The EU bodies had made few guidelines available ahead of time, and even with the two-year implementation period, a number of EU member states had not taken steps to adopt domestic laws or scale up their data protection authority by GDPR Day.

The GDPR sets forth a new regime for the protection of personal data in the EU. It imposes new compliance requirements on both controllers and processors and also strengthens rights for data subjects. It has a new extraterritorial reach, impacting businesses that were not previously subject to the EU Directive, and introduces material changes that impact the manner in which businesses around the world use personal data.

Please join members of Mayer Brown’s Cybersecurity & Data Privacy practice for a one-hour discussion of the first 100 days of GDPR, covering:

News, developments and first enforcement trends of GDPR since GDPR Day
Lessons learned from the management of personal data breaches
The (unintended) effects of negotiating a data protection addendum
New laws that the GDPR has inspired, such as those in California and Brazil