The Council of the European Union adopted a protocol allowing for free data flows between the EU and Japan as part of an economic partnership agreement. The protocol is designed to prevent data localization measures and offers a predictable legal framework.Full story...

France's data protection authority, the Commission nationale de l'informatique et des libertés, introduced a self-assessment tool for binding corporate rules. The tool allows companies that transfer personal data outside of the EU to "check the level of maturity of the project in relation to the req...

The Global Cross-Border Privacy Rules Forum marked its second anniversary by announcing the appointment of accountability agents working in five jurisdictions tasked with certifying organizations' compliance with the Global CBPRs and Global Privacy Recognition for Processor Systems. As part of the d...

Finland's District Court of Western Uusimaa sentenced hacker Aleksanteri Kivimäki to six years in prison for a cyberattack that stole the data of 33,000 Vastaamo therapy patients, Yleisradio Oy reports. Kivimäki was also charged with aggravated blackmail after he threatened to "spread the sensitive ...

The European Commission introduced two tools to anonymously report violations of the Digital Services Act and the Digital Markets Act. The tools ensure that whistleblowers' data is encrypted, "guaranteeing the complete privacy of the whistleblower in all its communications with the Commission."Full ...