One of the more controversial portions of the EU’s forthcoming General Data Protection Regulation is a provision restricting the ability of EU businesses to comply with demands from non-EU courts for the production of documents containing personal data. However, following a recent announcement by the UK government, these restrictions will not apply to businesses in the UK.
Many companies purchase cyber liability insurance to help cover their risk of computer fraud or attack. However, if not properly negotiated, some cyber insurance policies may not fully protect against all risks.
To strengthen data protection enforcement, the German legislature recently passed a law that permits registered consumer-protection organizations (called Verbände) to bring suits on behalf of consumers to enjoin data-protection violations.