{"id":1536,"date":"2022-01-26T10:47:03","date_gmt":"2022-01-26T16:47:03","guid":{"rendered":"https:\/\/www.bbrown.com\/?post_type=insight&p=1536"},"modified":"2022-04-11T10:30:17","modified_gmt":"2022-04-11T15:30:17","slug":"annual-data-privacy-regulatory-updates","status":"publish","type":"insight","link":"https:\/\/www.bbrown.com\/us\/insight\/annual-data-privacy-regulatory-updates\/","title":{"rendered":"Annual Data Privacy Regulatory Updates"},"content":{"rendered":"

[vc_row row_style=”page-hero” full_width=”stretch_row_content”][vc_column]\n\t

\n\n\t\t
\n\t\t\t
<\/div>\n\t\t\t\t\t\t\t
<\/div>\n\t\t\t\t\t<\/div>\n\n\t\t
\n\t\t\t
\n\t\t\t\t
\n\n\t\t\t\t\t\n
\n

White Paper<\/p>\n

\n Annual Data Privacy Regulatory Updates\n <\/h1>\n\t\n <\/div>\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t<\/div>\n\t\t<\/div>\n\n\t<\/div>\n\n\t\n[\/vc_column][\/vc_row][vc_row][vc_column width=”2\/3″]\n
\n \n

\n Annual Data Privacy Regulatory Updates\n <\/h1>\n\t\n <\/div>[vc_column_text]<\/p>\n

Introduction<\/h3>\n

While various ransomware attacks have been monopolizing recent headlines, it is critical to remember that data breaches are the baseline to cyber losses. As of Sept. 30, 2021, the number of publicly reported data breaches, year-to-date, had already exceeded the total number of breaches reported for the entirety of 2020. From both a regulatory and consumer-obligation perspective, organizations and their management teams should remain informed about developments to both novice and existing data privacy rules and regulations. This piece intends to provide customers with an update on data privacy regulations from an international and domestic standpoint.<\/p>\n

Data Privacy Regulation Update<\/h3>\n

European Union (EU) – General Data Protection Regulation<\/h4>\n

Since the spring of 2018, the General \u00a0Data \u00a0Protection \u00a0Regulation (GDPR) has served as the primary legislative mechanism regulating how companies protect citizens’ \u00a0personal data of the European \u00a0Union (EU). \u00a0The introduction of the GDPR bolstered the EU’s commitment to addressing \u00a0“privacy” as a fundamental human right; the EU \u00a0now possesses some of the strictest data privacy and protection laws worldwide.<\/p>\n

During the summer of 2021, the European Commission published novice Standard \u00a0Contractual \u00a0Clauses (SCCs) \u00a0regarding the transfer of personal data from the EU to third-party countries outside of EU jurisdiction, such as the United \u00a0States. However, there was one jurisdictional exception: \u00a0post-Brexit, the SCCs do not apply to transfers of personal data from the United \u00a0Kingdom.<\/p>\n

While the previous SCCs only stipulated specific requirements for controller-to-controller and controller-to-processor transfers, the SCCs introduced in \u00a0June 2021 stipulate requirements for those as well as transfers between processor-to-sub-processors and processors-to-controllers. The new guidelines contain novice requirements for data importers or controllers and processors located beyond the borders of the EU. \u00a0They are required for all new transfer agreements entered on or after Sept. 27, 2021. Agreements already in effect must be replaced with the new secs by Dec. 22, 2022.<\/p>\n

The new SCCs require data importers to confirm they will only disclose personal data to third parties outside of EU jurisdiction if such a \u00a0party has agreed to be bound by the terms of the clauses or <\/em><\/strong>that a \u00a0specific legal exemption applies. Since previous guidance explained that exemptions are not permitted for systemic transfers of personal data, a \u00a0data importer must now ensure that any party involved in processing the data, this includes any potential sub-processor, has also signed and agreed to the updated secs.<\/p>\n

With the novel SCCs, it is no longer necessary for organizations to enter into separate data processing agreements to comply with \u00a0Article 28 of the GDPR<\/a>. Article \u00a028 requires data controllers to ensure they only appoint data processors capable of providing \u00a0“sufficient guarantees” of their intent and abilities to implement the terms set forth by the GDPR. The Article also requires data processing to be conducted pursuant to a contract, \u00a0making it a violation of the regulation for controllers and processors to fail to enter a written data-processing contract. \u00a0Modules Two and Three of the new clauses contain the requirements articulated within \u00a0Article \u00a028; therefore, for controller\u2022 to-processor and processor-to-processor data transfers, supplementary data processing agreements are no longer imperative.<\/p>\n

The new clauses also contain a \u00a0“docking clause”. While the previously utilized \u00a0SCCs were devised for two-party contracts, the new provisions allow for execution by multiple parties. The “docking clause” permits and highlights the process of adding additional parties to the SCCs during a contract’s lifetime.[\/vc_column_text]\t

\n\t\t\t\t\t\n\t\t\t\tContinue Reading<\/span>\n\t\t\t<\/a>\n\t\t\t<\/div>\n[\/vc_column][vc_column width=”1\/3″][vc_single_image image=”986″ alignment=”center”][vc_separator border_width=”2″ el_width=”60″][vc_column_text]<\/p>\n
by Nina Nisanova<\/h6>\n

and the Specialty Risk Solutions Cyber Risk team<\/p>\n

[\/vc_column_text]\t

\n\t\t\t\t\t\n\t\t\t\tConnect Now<\/span>\n\t\t\t<\/a>\n\t\t\t<\/div>\n[\/vc_column][\/vc_row]<\/p>\n<\/div>","protected":false},"excerpt":{"rendered":"

[vc_row row_style=”page-hero” full_width=”stretch_row_content”][vc_column][\/vc_column][\/vc_row][vc_row][vc_column width=”2\/3″][vc_column_text] Introduction While various ransomware attacks have been monopolizing recent headlines, it is critical to remember that data breaches are the baseline to cyber losses. As of […]<\/p>\n","protected":false},"author":66,"featured_media":1537,"template":"","meta":{"_acf_changed":false,"inline_featured_image":false,"footnotes":""},"insight_category":[34],"class_list":["post-1536","insight","type-insight","status-publish","has-post-thumbnail","hentry","insight_category-property-casualty"],"acf":[],"yoast_head":"\nAnnual Data Privacy Regulatory Updates - Brown & Brown<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.bbrown.com\/us\/insight\/annual-data-privacy-regulatory-updates\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Annual Data Privacy Regulatory Updates\" \/>\n<meta property=\"og:description\" content=\"[vc_row row_style=”page-hero” full_width=”stretch_row_content”][vc_column][\/vc_column][\/vc_row][vc_row][vc_column width=”2\/3″][vc_column_text] Introduction While various ransomware attacks have been monopolizing recent headlines, it is critical to remember that data breaches are the baseline to cyber losses. As of […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.bbrown.com\/us\/insight\/annual-data-privacy-regulatory-updates\/\" \/>\n<meta property=\"og:site_name\" content=\"Brown & Brown\" \/>\n<meta property=\"article:modified_time\" content=\"2022-04-11T15:30:17+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.bbrown.com\/wp-content\/uploads\/2022\/01\/WP_Annual-Data-Privacy-Regulatory-Updates_Website-Graphic.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1000\" \/>\n\t<meta property=\"og:image:height\" content=\"750\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.bbrown.com\\\/us\\\/insight\\\/annual-data-privacy-regulatory-updates\\\/\",\"url\":\"https:\\\/\\\/www.bbrown.com\\\/us\\\/insight\\\/annual-data-privacy-regulatory-updates\\\/\",\"name\":\"Annual Data Privacy Regulatory Updates - Brown & Brown\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.bbrown.com\\\/us\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.bbrown.com\\\/us\\\/insight\\\/annual-data-privacy-regulatory-updates\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.bbrown.com\\\/us\\\/insight\\\/annual-data-privacy-regulatory-updates\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.bbrown.com\\\/wp-content\\\/uploads\\\/2022\\\/01\\\/WP_Annual-Data-Privacy-Regulatory-Updates_Website-Graphic.jpg\",\"datePublished\":\"2022-01-26T16:47:03+00:00\",\"dateModified\":\"2022-04-11T15:30:17+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.bbrown.com\\\/us\\\/insight\\\/annual-data-privacy-regulatory-updates\\\/#breadcrumb\"},\"inLanguage\":\"us\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.bbrown.com\\\/us\\\/insight\\\/annual-data-privacy-regulatory-updates\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"us\",\"@id\":\"https:\\\/\\\/www.bbrown.com\\\/us\\\/insight\\\/annual-data-privacy-regulatory-updates\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.bbrown.com\\\/wp-content\\\/uploads\\\/2022\\\/01\\\/WP_Annual-Data-Privacy-Regulatory-Updates_Website-Graphic.jpg\",\"contentUrl\":\"https:\\\/\\\/www.bbrown.com\\\/wp-content\\\/uploads\\\/2022\\\/01\\\/WP_Annual-Data-Privacy-Regulatory-Updates_Website-Graphic.jpg\",\"width\":1000,\"height\":750},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.bbrown.com\\\/us\\\/insight\\\/annual-data-privacy-regulatory-updates\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.bbrown.com\\\/us\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Insights\",\"item\":\"https:\\\/\\\/www.bbrown.com\\\/us\\\/news-events\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Annual Data Privacy Regulatory Updates\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.bbrown.com\\\/us\\\/#website\",\"url\":\"https:\\\/\\\/www.bbrown.com\\\/us\\\/\",\"name\":\"Brown & Brown\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.bbrown.com\\\/us\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.bbrown.com\\\/us\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"us\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.bbrown.com\\\/us\\\/#organization\",\"name\":\"Brown & Brown\",\"url\":\"https:\\\/\\\/www.bbrown.com\\\/us\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"us\",\"@id\":\"https:\\\/\\\/www.bbrown.com\\\/us\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.bbrown.com\\\/wp-content\\\/uploads\\\/2021\\\/12\\\/cropped-BBRetail002-RGBrevs.png\",\"contentUrl\":\"https:\\\/\\\/www.bbrown.com\\\/wp-content\\\/uploads\\\/2021\\\/12\\\/cropped-BBRetail002-RGBrevs.png\",\"width\":1000,\"height\":136,\"caption\":\"Brown & Brown\"},\"image\":{\"@id\":\"https:\\\/\\\/www.bbrown.com\\\/us\\\/#\\\/schema\\\/logo\\\/image\\\/\"}}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Annual Data Privacy Regulatory Updates - Brown & Brown","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.bbrown.com\/us\/insight\/annual-data-privacy-regulatory-updates\/","og_locale":"en_US","og_type":"article","og_title":"Annual Data Privacy Regulatory Updates","og_description":"[vc_row row_style=”page-hero” full_width=”stretch_row_content”][vc_column][\/vc_column][\/vc_row][vc_row][vc_column width=”2\/3″][vc_column_text] Introduction While various ransomware attacks have been monopolizing recent headlines, it is critical to remember that data breaches are the baseline to cyber losses. As of […]","og_url":"https:\/\/www.bbrown.com\/us\/insight\/annual-data-privacy-regulatory-updates\/","og_site_name":"Brown & Brown","article_modified_time":"2022-04-11T15:30:17+00:00","og_image":[{"width":1000,"height":750,"url":"https:\/\/www.bbrown.com\/wp-content\/uploads\/2022\/01\/WP_Annual-Data-Privacy-Regulatory-Updates_Website-Graphic.jpg","type":"image\/jpeg"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.bbrown.com\/us\/insight\/annual-data-privacy-regulatory-updates\/","url":"https:\/\/www.bbrown.com\/us\/insight\/annual-data-privacy-regulatory-updates\/","name":"Annual Data Privacy Regulatory Updates - Brown & Brown","isPartOf":{"@id":"https:\/\/www.bbrown.com\/us\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.bbrown.com\/us\/insight\/annual-data-privacy-regulatory-updates\/#primaryimage"},"image":{"@id":"https:\/\/www.bbrown.com\/us\/insight\/annual-data-privacy-regulatory-updates\/#primaryimage"},"thumbnailUrl":"https:\/\/www.bbrown.com\/wp-content\/uploads\/2022\/01\/WP_Annual-Data-Privacy-Regulatory-Updates_Website-Graphic.jpg","datePublished":"2022-01-26T16:47:03+00:00","dateModified":"2022-04-11T15:30:17+00:00","breadcrumb":{"@id":"https:\/\/www.bbrown.com\/us\/insight\/annual-data-privacy-regulatory-updates\/#breadcrumb"},"inLanguage":"us","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.bbrown.com\/us\/insight\/annual-data-privacy-regulatory-updates\/"]}]},{"@type":"ImageObject","inLanguage":"us","@id":"https:\/\/www.bbrown.com\/us\/insight\/annual-data-privacy-regulatory-updates\/#primaryimage","url":"https:\/\/www.bbrown.com\/wp-content\/uploads\/2022\/01\/WP_Annual-Data-Privacy-Regulatory-Updates_Website-Graphic.jpg","contentUrl":"https:\/\/www.bbrown.com\/wp-content\/uploads\/2022\/01\/WP_Annual-Data-Privacy-Regulatory-Updates_Website-Graphic.jpg","width":1000,"height":750},{"@type":"BreadcrumbList","@id":"https:\/\/www.bbrown.com\/us\/insight\/annual-data-privacy-regulatory-updates\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.bbrown.com\/us\/"},{"@type":"ListItem","position":2,"name":"Insights","item":"https:\/\/www.bbrown.com\/us\/news-events\/"},{"@type":"ListItem","position":3,"name":"Annual Data Privacy Regulatory Updates"}]},{"@type":"WebSite","@id":"https:\/\/www.bbrown.com\/us\/#website","url":"https:\/\/www.bbrown.com\/us\/","name":"Brown & Brown","description":"","publisher":{"@id":"https:\/\/www.bbrown.com\/us\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.bbrown.com\/us\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"us"},{"@type":"Organization","@id":"https:\/\/www.bbrown.com\/us\/#organization","name":"Brown & Brown","url":"https:\/\/www.bbrown.com\/us\/","logo":{"@type":"ImageObject","inLanguage":"us","@id":"https:\/\/www.bbrown.com\/us\/#\/schema\/logo\/image\/","url":"https:\/\/www.bbrown.com\/wp-content\/uploads\/2021\/12\/cropped-BBRetail002-RGBrevs.png","contentUrl":"https:\/\/www.bbrown.com\/wp-content\/uploads\/2021\/12\/cropped-BBRetail002-RGBrevs.png","width":1000,"height":136,"caption":"Brown & Brown"},"image":{"@id":"https:\/\/www.bbrown.com\/us\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/www.bbrown.com\/us\/wp-json\/wp\/v2\/insight\/1536","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.bbrown.com\/us\/wp-json\/wp\/v2\/insight"}],"about":[{"href":"https:\/\/www.bbrown.com\/us\/wp-json\/wp\/v2\/types\/insight"}],"author":[{"embeddable":true,"href":"https:\/\/www.bbrown.com\/us\/wp-json\/wp\/v2\/users\/66"}],"version-history":[{"count":0,"href":"https:\/\/www.bbrown.com\/us\/wp-json\/wp\/v2\/insight\/1536\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.bbrown.com\/us\/wp-json\/wp\/v2\/media\/1537"}],"wp:attachment":[{"href":"https:\/\/www.bbrown.com\/us\/wp-json\/wp\/v2\/media?parent=1536"}],"wp:term":[{"taxonomy":"insight_category","embeddable":true,"href":"https:\/\/www.bbrown.com\/us\/wp-json\/wp\/v2\/insight_category?post=1536"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}