Orrick Partner Discusses Transatlantic Data Compliance

RFG Weekly Roundup

Orrick's Christian Schroder, head of the firm's IP/IT & Data Privacy Practice Group in Germany, shared his thoughts on recently imposed fines on Hamburg-based subsidiaries of U.S. companies for transferring personal data of EU citizens to the U.S. based on the now invalid EU-US Safe Harbor Framework.

Christian noted that, "theoretically, fines up to EUR 300,000 are possible. However, as all three companies altered their transfer methods after being under investigation, fines were reduced by the German data protection authorities (“DPA”). The head of the Hamburg DPA announced that any firm found not complying with the requirements shall be issued a larger fine then the ones issued now."