Managing Data Breaches in a Complex International Scenario

• Jurisdiction: European Union
• Year: 2021
• Author: Erik Valgaeren

Speaker

Erik specialises in legislation and regulations regarding IT, internet, e-commerce, e-communications, privacy, digitisation and new technologies. He also has a wealth of experience in all intellectual property aspects of the aforementioned specialisations and a thorough knowledge of the technical aspects relating to communication.

In addition to providing legal advice on legislation and regulations, Erik drafts contracts and handles projects concerning web services, outsourcing, cloud services, system integration, software implementation, data management and privacy, artificial intelligence and innovation partnerships. In the field of communications law, Erik advises both traditional telecom operators and suppliers of infrastructure services and new media and social network services. He also litigates before courts and arbitral tribunals. Erik has extensive experience in arbitration and is regularly involved as an arbitrator for Cepina.

Topic

In his analysis, Erik Valgaeren delves into a variety of scenarios involving personal data breaches that possess cross-border implications, meticulously highlighting the potential repercussions in accordance with the General Data Protection Regulation (GDPR). Valgaeren's exploration extends to breaches occurring within establishments located outside the European Union, unraveling the intricate dimensions of the GDPR's territorial jurisdiction and elucidating the intricacies of data subjects' rights pertaining to access requests.

In these scenarios, Valgaeren meticulously dissects the multifaceted nature of personal data breaches, each underscored by its own set of circumstances and consequences. Central to Valgaeren's exposition is the concept of the GDPR's territorial scope. He deftly navigates the nuanced nuances of this scope, revealing how the GDPR extends its authority to non-EU establishments that process the personal data of EU citizens. This extension is contingent upon the establishment's offering of goods or services to EU residents or monitoring their behavior within the EU, underscoring the GDPR's commitment to safeguarding the rights and privacy of European data subjects irrespective of their...