U.K. ICO Publishes New SCCs on Cross-Border Data Transfers

A newly issued mechanism for cross-border transfers of personal data governed by the UK GDPR has entered into force. The new mechanism, created by the UK Information Commissioner’s Office (ICO), offers two alternative solutions. The first is an “International Data Transfer Agreement” (IDTA), which constitutes a standalone agreement that follows the blueprint of the EU Standard Contractual Clauses (SCCs). The ...

U.S. Presidential Order Calls for Examination of a Central Digital Currency

A new Executive Order issued by U.S. President Joe Biden, calls on federal agencies in the United States to examine the implications of the dramatic growth in the digital assets markets absent appropriate regulation and urges them to consider launching a U.S. Central Bank Digital Currency (CBDC).

The Order aims to reduce the risks that digital assets might pose to ...

E.U. and U.S. To Establish a New Framework for Int’l Data Transfers

The United States Government and the European Union Commission announced that they had reached an agreement “in principle” on a new framework for cross-border data transfers to enable predictable and stable data flows between the EU and the US. The new framework is intended to replace the Privacy Shield, which was invalidated in July 2020 when the Court of Justice ...

Utah Enacts New Consumer Privacy Act

Utah Governor Spencer Cox signed the Utah Consumer Privacy Act (UCPA) into law, making Utah the fourth US state to adopt comprehensive privacy legislation, following California in 2018, and Virginia and Colorado in 2021. The UCPA will become effective on December 31, 2023.

The UCPA applies to businesses who act either as “controllers” or “processors”, and who: (1) conduct business ...

Israeli Privacy Protection Authority Publishes Draft Guidelines on Data Protection in Tele-Health Services

The Israeli Privacy Protection Authority (PPA) published draft guidelines on data protection and privacy obligations in tele-health services. The guidelines are addressed to healthcare organizations, clinics, health practitioners, and relevant service providers involved in data processing operations throughout the tele-health value chain.

The draft guidelines map out the relevant privacy and data-protection-related provisions in statutes, regulations, and professional rules of ...

Israeli MoH Publishes Guidelines on Cybersecurity Defense in the Health Sector

The Israeli Ministry of Health (MoH) issued a new circular on the principles of cybersecurity defense in the Israeli health sector. The circular specifies the cybersecurity measures that must be taken to protect a health organization’s cyber assets (i.e., the personal and medical information stored in its databases); guides on appropriate cybersecurity risk management and cyber-attack preparedness and response; sets ...

Ukraine Legalizes Trade in Cryptocurrency and Digital Assets

Ukrainian President Volodymyr Zelenskyy signed into law a new act aimed at opening up the Ukrainian market for lawful digital asset and cryptocurrency trade. The new market will be governed by the Ukrainian National Commission on Securities and Stock Market, in cooperation with the National Bank of Ukraine.

The act specifies, among other things, the legal status and classification of ...

European Commission Publishes Proposal for Regulation on Fair Access and Use of Data

The European Commission published a newly proposed regulation for data access and reuse, aimed at facilitating free access to digital data by businesses, academic institutions, public administration, consumers, and other stakeholders. The proposed regulation does not aim to govern personal data, but rather technical data.

Among other issues, the proposed regulation intends to enable consumers to freely access and use ...