On 26 September 2024, the Court of Justice of the European Union issued a ruling stating data protection authorities are not obligated to render a fine or order corrective action following a data breach if the controller has taken remedial actions.
In an era where transparency and accountability are increasingly emphasized, whistleblowing has emerged as a vital mechanism for identifying and addressing breaches of law within organizations.
After the ECJ invalidated the former EU-US Privacy Shield, businesses who operate cross- border have been waiting to get another EU-US Adequacy decision which will enable a sound legal basis for cross- Atlantic data flows.
They stress that GDPR will prevail and the DGA does not create a new legal basis for processing of personal data, also adding that national Data Protection Authorities remain key to handle any data protection issue.