This article series from Thomson Reuters look the one-year mark of the European Union's General Data Protection Regulation from a U.S. perspective and its challenges for U.S. companies with regards to compliance. Part one is a report card and review of what has happened in the GDPR's first year and part two addresses the challenges ahead in data privacy with emphasis on the California Consumer Privacy Act, as well as other emerging data privacy regulations.
Data privacy and GDPR at one year, a U.S. perspective.

CIPM, CIPP/A, CIPP/C, CIPP/E, CIPP/G, CIPP/US, CIPT
Credits: 2
Related Stories
GDPR Genius
This interactive tool provides IAPP members ready access to critical GDPR resources — enforcement precedent, interpretive guidance, expert analysis and more — all in one location....
White Paper – GDPR at One Year: What We Heard from Leading European Regulators
(May 2019) – For this new IAPP white paper, IAPP Senior Privacy Fellow Caitlin Fennessy, CIPP/US, reviewed European Data Protection Board and DPA reports and sought input from regulators in Austria, France, Ireland and the United Kingdom on five key issues, including the number and nature of complai...
Web Conference: Privacy Engineering Live — Is Encrypted Data Personal Under the GDPR?
Original broadcast date: July 9, 2019
In this webinar, we'll be discussing a question that thoughtful privacy professionals agree to disagree on: Is encrypted data considered personal information under the GDPR? You'll hear from legal and technical experts about the case to be made on both sides of...
DLA Piper GDPR Data Breach Survey 2022
This report from DLA Piper takes a closer look at the number of breaches notified to regulators and the first fines issued under the new GDPR regime for the period from January 28, 2020, to January 27, 2021 — international Data Protection Day....
Data Partners and the GDPR: Questions to Ask
This article from FusionAuth helps developers and organizations make sure their applications are in compliance with the GDPR's third-party requirements. The GDPR requires organizations applications to not only be in compliance, but also the entire lifecycle of an application to also comply. Organiza...