--- title: Blog | Outside GC | GDPR description: GDPR | The Outside GC blog features practical tips, insights, and other news from Outside GC's experienced on-demand attorneys. Read our latest blog posts here. --- [![logo-small.png](https://62401.hs-sites.com/hs-fs/hubfs/Outside_GC_May_2015/Logos/logo-small.png?width=90&name=logo-small.png "logo-small.png")](http://www.outsidegc.com) - BLOG - ** --- ### Headquarters 501 Boylston Street, 10th Floor Boston, MA 02116 (617)-737-5000 info@outsidegc.com ![hero_news-events.jpg](https://62401.hs-sites.com/hs-fs/hubfs/Outside_GC_May_2015/Backgrounds/hero_news-events.jpg?width=1600&name=hero_news-events.jpg "hero_news-events.jpg") ## ON-DEMAND INSIGHTS [![Google Analytics, Cookies and GDPR](https://62401.hs-sites.com/hubfs/iStock-477624206%20copy.jpeg) ](https://62401.hs-sites.com/blog/google-analytics-cookies-and-gdpr-outside-gc) ## [Google Analytics, Cookies and GDPR](https://62401.hs-sites.com/blog/google-analytics-cookies-and-gdpr-outside-gc) January 10, 2023 at 10:00 AM - [GDPR](https://62401.hs-sites.com/blog/topic/gdpr), Most U.S. companies by now have modified their business practices to comply with the General Data Protection Regulation (GDPR). However, when it comes to the use of analytics technologies such as Google Analytics, the compliance requirements are less clear given the added applicability of the EU “Cookies Directive” (formally, the EU Directive 2002/58/EC) which regulates the use of cookies alongside GDPR-imposed consent requirements. Although implementation of the Cookies Directive varies from country to country in the EU, a decision issued by one national authority can be suggestive of future action. Last year, France’s data protection authority, the French Commission Nationale de l’Informatique et des Libertés (CNIL), issued an important interpretation of the Cookies Directive as it relates to the use of Google Analytics on a website accessible by EU/EEA residents. [Continue Reading](https://62401.hs-sites.com/blog/google-analytics-cookies-and-gdpr-outside-gc) [![Important Compliance Deadline for U.S. Companies Handling EU Data](https://62401.hs-sites.com/hubfs/GDPR-General-Data-Protection-Regulation-for-European-Union-concept%2c-internet-956415084_1219x864.jpeg) ](https://62401.hs-sites.com/blog/important-compliance-deadline-for-u.s.-companies-handling-eu-data-outside-gc) ## [Important Compliance Deadline for U.S. Companies Handling EU Data](https://62401.hs-sites.com/blog/important-compliance-deadline-for-u.s.-companies-handling-eu-data-outside-gc) December 6, 2022 at 1:16 PM - [GDPR](https://62401.hs-sites.com/blog/topic/gdpr), The clock is ticking! The deadline for switching to the [new EU Standard Contractual Clauses (SCC)](https://www.outsidegc.com/blog/eu-scc-international-data-transfers) for data transfers between the EU and non-EU countries is December 27, 2022. As of that date, data controllers and processors around the world that process the personal data of EU residents will no longer be able to rely on the old SCCs without violating the General Data Protection Regulation (GDPR). In other words, companies are legally obligated to **replace all previously used SCCs with the new ones**,** **and should be able to demonstrate having done so in case of an audit. ** ** [Continue Reading](https://62401.hs-sites.com/blog/important-compliance-deadline-for-u.s.-companies-handling-eu-data-outside-gc) [![Understanding the Privacy Right to Be Forgotten](https://62401.hs-sites.com/hubfs/Trash-bin-form-lines%2c-triangles-and-particle-style-design.-Illustration-vector-1021586546_1298x812.jpeg) ](https://62401.hs-sites.com/blog/understanding-the-privacy-right-to-be-forgotten) ## [Understanding the Privacy Right to Be Forgotten](https://62401.hs-sites.com/blog/understanding-the-privacy-right-to-be-forgotten) November 7, 2022 at 3:37 PM - [Data Privacy](https://62401.hs-sites.com/blog/topic/data-privacy), Since 2018, the General Data Protection Regulation (GDPR) has wielded a significant impact on privacy practices across the globe. Aside from offering strong protection for the personal data of European Union citizens, GDPR has effected many changes in the way companies conduct business when EU data is part of the equation. Likewise, it has become the gold standard and a model for privacy legislation in many jurisdictions within the United States, as well as around the world. [Continue Reading](https://62401.hs-sites.com/blog/understanding-the-privacy-right-to-be-forgotten) [![GDPR-Compliant Organizations: Why You May Need an EU Representative](https://62401.hs-sites.com/hubfs/GDPR-General-Data-Protection-Regulation-for-European-Union-concept%2c-internet-956415084_1219x864.jpeg) ](https://62401.hs-sites.com/blog/gdpr-compliant-organizations-why-you-may-need-an-eu-representative) ## [GDPR-Compliant Organizations: Why You May Need an EU Representative](https://62401.hs-sites.com/blog/gdpr-compliant-organizations-why-you-may-need-an-eu-representative) July 7, 2021 at 11:14 AM - [GDPR](https://62401.hs-sites.com/blog/topic/gdpr), The General Date Protection Regulation (GDPR) made its debut on the global privacy stage in 2018, and now, three years later, most U.S. companies doing business in the EU are well-aware of the regulation’s main provisions and their daily operational impact. However, the GDPR’s rules are expansive; and as a result, some of its “lesser known” articles have been overlooked by a number of smaller companies with limited in-house privacy resources. [Continue Reading](https://62401.hs-sites.com/blog/gdpr-compliant-organizations-why-you-may-need-an-eu-representative) [![The Privacy Shield is Dead: Next Steps for U.S. Importers of EU Data](https://62401.hs-sites.com/hubfs/iStock-1024269370.jpg) ](https://62401.hs-sites.com/blog/the-privacy-shield-is-dead-next-steps-for-u.s.-importers-of-eu-data) ## [The Privacy Shield is Dead: Next Steps for U.S. Importers of EU Data](https://62401.hs-sites.com/blog/the-privacy-shield-is-dead-next-steps-for-u.s.-importers-of-eu-data) April 1, 2021 at 11:05 AM - [EU Data Protection](https://62401.hs-sites.com/blog/topic/eu-data-protection), Since the adoption of the General Data Protection Regulation (GDPR), U.S. companies have invested a great deal of time and money in their compliance efforts; yet for many, their work is far from complete. For U.S. data importers, the July 2020 invalidation of the EU-U.S. Privacy Shield has left former “self-certified Shield” companies forced to find a new mechanism by which to lawfully transfer EU data into the U.S. Many of these companies will likely adopt the [new set of standard contractual clauses (SCCs),](https://www.outsidegc.com/blog/the-privacy-shield-is-dead-here-come-the-new-sccs) once they are finalized by the European Commission. [Continue Reading](https://62401.hs-sites.com/blog/the-privacy-shield-is-dead-next-steps-for-u.s.-importers-of-eu-data) [![The Privacy Shield is Dead: Now What?](https://62401.hs-sites.com/hubfs/Shield-with-flag-of-EU.-483479455_1096x959.jpeg) ](https://62401.hs-sites.com/blog/the-privacy-shield-is-dead-now-what) ## [The Privacy Shield is Dead: Now What?](https://62401.hs-sites.com/blog/the-privacy-shield-is-dead-now-what) July 17, 2020 at 1:14 PM - [Privacy](https://62401.hs-sites.com/blog/topic/privacy), [After years of uncertainty](https://www.outsidegc.com/blog/update-on-the-eu-u.s.-privacy-shields-status), the fate of the EU-U.S. Privacy Shield (“Shield”) has finally been determined. On July 16th, the EU’s highest court, the Court of Justice of the European Union (CJEU), [declared the Shield to be invalid](https://www.droit-technologie.org/wp-content/uploads/2020/07/Arr%C3%AAt-de-la-CJUE-Schrems-II.pdf) as a lawful mechanism for transferring the personal data of EU residents to the U.S. [Continue Reading](https://62401.hs-sites.com/blog/the-privacy-shield-is-dead-now-what) [![Cookies and the EU User](https://62401.hs-sites.com/hubfs/eu-cookie-law-cartoon-illustration-with-bitten-cookie-and-eu-flag-1181069475_1027x1027.jpeg) ](https://62401.hs-sites.com/blog/cookies-and-the-eu-user) ## [Cookies and the EU User](https://62401.hs-sites.com/blog/cookies-and-the-eu-user) June 29, 2020 at 3:21 PM - [GDPR](https://62401.hs-sites.com/blog/topic/gdpr), If a poll was taken of all U.S. companies using the personal information of European Union (EU) residents in connection with their business activities, most would report having taken steps to comply with the General Data Protection Regulation (GDPR). If you asked the same businesses what they have done to comply with the EU ePrivacy Directive of 2002 (also known as the “Cookies” Directive)[[1]](https://62401.hs-sites.com/blog/topic/gdpr/page/1#_ftn1), which regulates the use of cookies and other tracking technologies, many would need to admit they have not done anything.  [Continue Reading](https://62401.hs-sites.com/blog/cookies-and-the-eu-user) [![GDPR v. CCPA: Privacy Legislation Cousins](https://62401.hs-sites.com/hubfs/CCPA-V-GDPR.png) ](https://62401.hs-sites.com/blog/gdpr-v.-ccpa-privacy-legislation-cousins) ## [GDPR v. CCPA: Privacy Legislation Cousins](https://62401.hs-sites.com/blog/gdpr-v.-ccpa-privacy-legislation-cousins) June 26, 2020 at 10:56 AM - [GDPR](https://62401.hs-sites.com/blog/topic/gdpr), New York-area member Stephan Grynwajc recently wrote [an article](https://www.legaledge.co.uk/2020/06/gdpr-v-ccpa-privacy-legislation-cousins/) comparing the key terms of the EU's General Data Protection Regulation (GDPR) and California's Consumer Protection Act (CCPA), which was featured on the blog of our UK partners, [Legal Edge](https://www.legaledge.co.uk/).  [Continue Reading](https://62401.hs-sites.com/blog/gdpr-v.-ccpa-privacy-legislation-cousins) ### Subscribe to our Blog ### Popular Posts [View All Posts ›](https://www.outsidegc.com/blog/all) [![Share on Facebook](https://static.hubspot.com/final/img/common/icons/social/facebook-24x24.png)](http://www.facebook.com/share.php?u=https%3A%2F%2F62401.hs-sites.com%2Fblog%2Ftopic%2Fgdpr%3Futm_medium%3Dsocial%26utm_source%3Dfacebook) [![Share on LinkedIn](https://static.hubspot.com/final/img/common/icons/social/linkedin-24x24.png)](http://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2F62401.hs-sites.com%2Fblog%2Ftopic%2Fgdpr%3Futm_medium%3Dsocial%26utm_source%3Dlinkedin) [![Share on Twitter](https://static.hubspot.com/final/img/common/icons/social/twitter-24x24.png)](https://twitter.com/intent/tweet?original_referer=https%3A%2F%2F62401.hs-sites.com%2Fblog%2Ftopic%2Fgdpr%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&url=https%3A%2F%2F62401.hs-sites.com%2Fblog%2Ftopic%2Fgdpr%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&source=tweetbutton&text=Blog%20%7C%20Outside%20GC%20%7C%20GDPR) [![Share on Email](https://static.hubspot.com/final/img/common/icons/social/email-24x24.png)](mailto:?subject=Check%20out%20https%3A%2F%2F62401.hs-sites.com%2Fblog%2Ftopic%2Fgdpr%3Futm_medium%3Dsocial%26utm_source%3Demail%20&body=Check%20out%20https%3A%2F%2F62401.hs-sites.com%2Fblog%2Ftopic%2Fgdpr%3Futm_medium%3Dsocial%26utm_source%3Demail) This publication should not be construed as legal advice or a legal opinion on any specific facts or circumstances nor an offer to represent you. It is not intended to create, and receipt does not constitute, an attorney-client relationship. The contents are intended for general informational purposes only, and you are urged to consult your attorney concerning any particular situation and any specific legal questions you may have. Pursuant to applicable rules of professional conduct, portions of this publication may constitute Attorney Advertising. Outside GC is an innovative approach to legal services for growing and mature businesses. Companies who engage Outside GC fall into two main categories: (1) those [without in-house counsel](http://www.outsidegc.com/general-legal-counsel-corporate-counsel) who need regular, on-going legal support but do not wish to hire a full-time in-house lawyer, and (2) those [with in-house counsel](http://www.outsidegc.com/in-house-counsel-support) who do not wish to add more full-time resources to their existing in-house staff. [Contact us](http://www.outsidegc.com/contact) to speak to one of our on-demand attorneys. ## Search our Site ![logo-small.png](https://62401.hs-sites.com/hs-fs/hubfs/Outside_GC_May_2015/Logos/logo-small.png?width=90&name=logo-small.png "logo-small.png") Attorney advertising. Copyright @ 2026 Outside GC LLC. All rights reserved. ![](https://dc.ads.linkedin.com/collect/?pid=215705&fmt=gif)