On March 19, 2024, China issued the Regulation on the Implementation of the Law of the PRC on the Protection of Consumer Rights and...

Generative AI poses both opportunities and risks for organizations. Higher education institutions should strongly consider drafting AI...

On September 6, 2023, the Cyberspace Administration of China (CAC) imposed a fine of RMB 50 million (approximately $7 million USD) on the...

On September 28, 2023, Chinese regulatory authorities published Draft Measures on regulating and facilitating cross-border transfers; the...

This publication was posted on 7/28/2023 (Updated 10/25/2023).

In late May 2023, cybercriminals gained unauthorized access to the personal information of IHEs’ students, employees, and other community...

By now, nearly everyone has heard of “blockchains” and “NFTs,” and some universities are even using them to issue and validate...

Several U.S. universities’ access to China’s largest academic database has been suspended as of April 1 due to data privacy and data...

On February 24, 2023, the Cyberspace Administration of China (CAC) released the final Standard Contractual Clauses (SCCs) for the Chinese...

The PRC issued Cross-Border Personal Information Handling Security Certification Specifications—one of three ways institutions of higher...

The European Commission recently published its draft EU-US Data Privacy Framework adequacy decision. If approved, the adequacy decision...

As we head into the fifth year of EEA General Data Protection Regulation (GDPR) enforcement, XL Law & Consulting has tracked a total of...

While it has been little over a year since China’s Personal Information Protection Regulation (“PIPL”) has taken effect, Chinese...

Cross-border transfer restrictions and obligations imposed by China’s Personal Information Protection Law (PIPL) and its supporting...

Draft standard contractual clauses (SCCs) were issued by China’s National Cyberspace Department in June The SCCs will likely be a welcome...