“Assuming a fair amount of hard work and that the EU institutions are able to put their political skills to good use, 2015 may be the year that sees the culmination of a legal modernisation process that has been running for the best part of four years,” Hogan Lovells Partner Eduardo Ustaran, CIPP/E, writes in a blog post, noting “the so-called ‘risk-based’ approach is emerging as the most likely solution to the very diverse views that exist in Europe as to how strict or flexible the future framework should be in regulating the exploitation of personal data.” Meanwhile, the Hunton & Williams’ Privacy and Information Security Law Blog examines the Council of the EU’s proposed revisions to the compliance obligations of data controllers and data processors and the risk-based approach to compliance.
Full Story