The PRC issued Cross-Border Personal Information Handling Security Certification Specifications—one of three ways institutions of higher...

The European Commission recently published its draft EU-US Data Privacy Framework adequacy decision. If approved, the adequacy decision...

As we head into the fifth year of EEA General Data Protection Regulation (GDPR) enforcement, XL Law & Consulting has tracked a total of...

While it has been little over a year since China’s Personal Information Protection Regulation (“PIPL”) has taken effect, Chinese...

Cross-border transfer restrictions and obligations imposed by China’s Personal Information Protection Law (PIPL) and its supporting...

Draft standard contractual clauses (SCCs) were issued by China’s National Cyberspace Department in June The SCCs will likely be a welcome...