The National Authority for the Protection of Personal Data (or “ANPDP” in Spanish), an organism within the Ministry of Justice and Human Rights, published a draft that addresses several modifications to the current Regulation of Law No. 29733, Personal Data Protection Law.

On July 10, 2023, the European Commission adopted its adequacy decision for the EU-U.S. Data Privacy Framework. Personal data can henceforth flow safely from the European Union to U.S. companies adhering to the new Framework, without having to put in place additional data protection safeguards.

After Indonesia’s Constitutional Court upheld contested provisions of the Personal Data Protection Law, the government is now drafting derivative regulations that will provide details on data processing requirements and sanctions for non-compliance with the new law.

An overview of its applicability, key exemptions, notice requirements, individual requirements, enforcement, and more.

MinterEllisonRuddWatts' Investing in New Zealand Guide is a helpful summary of New Zealand’s business framework, and provides an overview on establishing a business, while answering some preliminary questions asked by those unfamiliar with the country's business legislation and regulations.

We have the pleasure of presenting the latest issue of Setterwalls’ Life Sciences Report of May 2023. The report presents our view on selected current issues with respect to life sciences. We hope you will find the report of interest.

Argentina ratified Convention 108, a significant step for data protection. It demonstrates their commitment to the rule of law, human rights, and privacy. Argentina's ratification sets a higher standard, contributing to global efforts in data protection.

This guide provides an overview of key legal aspects for foreign investors interested in investing in Spain. It is not intended to be comprehensive, but to address practical issues that will help investors considering an investment project in Spain.

Transfers of websites, in particular merchant websites, are on the rise. However, some specificities relating to the transfer of e-businesses should be dealt with cautiously, in particular with regard to the items to be transferred and the protection of personal data.

The Data Protection Commission conducted a sweep late last year examining the ‘records of processing activities’ that organisations are obliged to maintain under Article 30 GDPR. Many of those examined were found by the DPC to be non-compliant.