--- title: Blog | Outside GC | Privacy (2) description: Privacy | The Outside GC blog features practical tips, insights, and other news from Outside GC's experienced on-demand attorneys. Read our latest blog posts here. (2) --- [![logo-small.png](https://62401.hs-sites.com/hs-fs/hubfs/Outside_GC_May_2015/Logos/logo-small.png?width=90&name=logo-small.png "logo-small.png")](http://www.outsidegc.com) - BLOG - ** --- ### Headquarters 501 Boylston Street, 10th Floor Boston, MA 02116 (617)-737-5000 info@outsidegc.com ![hero_news-events.jpg](https://62401.hs-sites.com/hs-fs/hubfs/Outside_GC_May_2015/Backgrounds/hero_news-events.jpg?width=1600&name=hero_news-events.jpg "hero_news-events.jpg") ## ON-DEMAND INSIGHTS [![Leveraging the GDPR Experience to Comply with the CCPA](https://62401.hs-sites.com/hubfs/iStock_36092184_XLARGE-1.jpg) ](https://62401.hs-sites.com/blog/leveraging-gdpr-experience-for-ccpa-compliance) ## [Leveraging the GDPR Experience to Comply with the CCPA](https://62401.hs-sites.com/blog/leveraging-gdpr-experience-for-ccpa-compliance) May 3, 2019 at 2:30 PM - [Privacy](https://62401.hs-sites.com/blog/topic/privacy), The EU’s sweeping data privacy law – GDPR (General Data Protection Regulation) – will celebrate its one year anniversary later this month. In this time, the GDPR is credited with, among other things, inspiring other jurisdictions, including the United States, to adopt similar legislation designed to protect the rights of individuals over their personal data and increase the transparency of data collection and processing activities. [Continue Reading](https://62401.hs-sites.com/blog/leveraging-gdpr-experience-for-ccpa-compliance) [![How the Nonprofit Landscape Will Change in 2019](https://62401.hs-sites.com/hubfs/Nonprofit-2019.jpg) ](https://62401.hs-sites.com/blog/how-the-nonprofit-landscape-will-change-in-2019) ## [How the Nonprofit Landscape Will Change in 2019](https://62401.hs-sites.com/blog/how-the-nonprofit-landscape-will-change-in-2019) January 29, 2019 at 1:48 PM - [Privacy](https://62401.hs-sites.com/blog/topic/privacy), Nonprofit legal departments can expect changes in 2019 due to new federal and state laws passed last year. Lakshmi Sarma Ramani, a member with our Washington D.C.-based team, offers an overview of the key issues that may impact nonprofits in her latest [ACC Docket article](https://www.accdocket.com/articles/nonprofit-laws-2019.cfm). [Continue Reading](https://62401.hs-sites.com/blog/how-the-nonprofit-landscape-will-change-in-2019) [![Update on the EU-U.S. Privacy Shield's Status](https://62401.hs-sites.com/hubfs/Protection-concept%2c-flag-of-the-EU-with-padlock.-3D-rendering-946296256_2125x1416.jpeg) ](https://62401.hs-sites.com/blog/update-on-the-eu-u.s.-privacy-shields-status) ## [Update on the EU-U.S. Privacy Shield's Status](https://62401.hs-sites.com/blog/update-on-the-eu-u.s.-privacy-shields-status) October 31, 2018 at 9:18 AM - [compliance](https://62401.hs-sites.com/blog/topic/compliance), Outside GC Member Stephan Grynwajc continues to keep a close eye on the fate of the EU-U.S. Privacy Shield data-sharing arrangement.  [Continue Reading](https://62401.hs-sites.com/blog/update-on-the-eu-u.s.-privacy-shields-status) [![GDPR National Derogations: The Next Phase of EU Privacy Compliance](https://62401.hs-sites.com/hubfs/28-flag-of-european-union-481716220_2026x2000.jpeg) ](https://62401.hs-sites.com/blog/gdpr-national-derogations-the-next-phase-of-eu-privacy-compliance) ## [GDPR National Derogations: The Next Phase of EU Privacy Compliance](https://62401.hs-sites.com/blog/gdpr-national-derogations-the-next-phase-of-eu-privacy-compliance) July 24, 2018 at 4:29 PM - [EU Laws](https://62401.hs-sites.com/blog/topic/eu-laws), U.S. companies handling the personal data of EU residents should now be familiar with the requirements of the General Data Protection Regulation (GDPR), the new data protection law covering all countries in the EU, which went into effect on May 25, 2018. News about the GDPR has been plentiful, including [Outside GC’s own alerts](https://62401.hs-sites.com/blog/compliance-with-gdpr-eu-data-privacy-law). However, compliance with EU privacy laws does not end with this regulation. There are other EU legislations covering privacy matters outside of the GDPR, such as the E-Privacy Directive 2002/58/EC of 2002 (a/k/a the “Cookies Directive”) and the “national derogations” of individual EU member state laws which impose additional responsibilities for U.S. companies that use the personal data of its residents as part of their business activities. [Continue Reading](https://62401.hs-sites.com/blog/gdpr-national-derogations-the-next-phase-of-eu-privacy-compliance) [![The Likely Demise of the EU-U.S. Privacy Shield & Its Impact on U.S. Companies](https://62401.hs-sites.com/hubfs/Protection-concept%2c-flag-of-the-EU-with-padlock.-3D-rendering-946296256_2125x1416.jpeg) ](https://62401.hs-sites.com/blog/the-likely-demise-of-the-eu-u.s.-privacy-shield-its-impact-on-u.s.-companies) ## [The Likely Demise of the EU-U.S. Privacy Shield & Its Impact on U.S. Companies](https://62401.hs-sites.com/blog/the-likely-demise-of-the-eu-u.s.-privacy-shield-its-impact-on-u.s.-companies) July 5, 2018 at 2:58 PM - [compliance](https://62401.hs-sites.com/blog/topic/compliance), The future of the EU-U.S. Privacy Shield data-sharing arrangement is shaky at best. On June 12, 2018, a resolution was passed by the European Parliament’s Committee on Civil Liberties, Justice, and Home Affairs (LIBE) calling for the suspension of the Privacy Shield, *unless* the U.S. demonstrates full compliance with the requirements of the program by September 1, 2018. And today, following the recommendation of the LIBE, Parliament itself voted 303 to 223 (with 29 abstentions) in favor of suspension “unless the U.S. is fully compliant” by September 1st. The European Parliament took this action in response to a number of recent data breaches affecting Privacy Shield Certified-U.S. companies, causing concern over the effectiveness of the regulatory oversight of the framework, as well as well as over the sufficiency of the Shield’s certification requirements which are designed to protect the personal data of EU residents. If suspended, certified U.S. companies will no longer be able to leverage the benefits afforded to them by the Privacy Shield, forcing them to find new compliance mechanisms by which to transfer data from the EU in order to satisfy the requirements of the GDPR. [Continue Reading](https://62401.hs-sites.com/blog/the-likely-demise-of-the-eu-u.s.-privacy-shield-its-impact-on-u.s.-companies) ## [Even If You Are a U.S. Company, Don’t Ignore the GDPR](https://62401.hs-sites.com/blog/compliance-with-gdpr-eu-data-privacy-law) May 4, 2018 at 3:20 PM - [compliance](https://62401.hs-sites.com/blog/topic/compliance), **Complying with the EU’s New Data Privacy Law** ![GDPR.-Notebook-with-Notes-General-Data-Protection-Regulation-on-the-table-of-a-businessman-.-898176928_3869x2579](https://62401.hs-sites.com/hs-fs/hubfs/Outside_GC_May_2015/GDPR.-Notebook-with-Notes-General-Data-Protection-Regulation-on-the-table-of-a-businessman-.-898176928_3869x2579.jpeg?width=299&height=199&name=GDPR.-Notebook-with-Notes-General-Data-Protection-Regulation-on-the-table-of-a-businessman-.-898176928_3869x2579.jpeg)On May 25, 2018, the European Union (EU)'s General Data Protection Regulation (GDPR) comes into force, broadening the scope of privacy obligations for companies doing business in or with Europe. The GDPR applies to all businesses that collect and use personal information of EU residents, including organizations located outside the EU. U.S. companies, including Data Processors in the United States, may be subject to the GDPR if they offer products or services to EU residents or if they monitor the behavior of such residents even if they do not have a physical presence in the EU. [Continue Reading](https://62401.hs-sites.com/blog/compliance-with-gdpr-eu-data-privacy-law) [![What is the E.U.-U.S. Privacy Shield Framework & How Does Certification Work?](https://62401.hs-sites.com/hubfs/iStock_36092184_XLARGE.jpg) ](https://62401.hs-sites.com/blog/what-is-the-e.u.-u.s.-privacy-shield-framework-how-does-certification-work) ## [What is the E.U.-U.S. Privacy Shield Framework & How Does Certification Work?](https://62401.hs-sites.com/blog/what-is-the-e.u.-u.s.-privacy-shield-framework-how-does-certification-work) August 4, 2016 at 10:09 AM - [compliance](https://62401.hs-sites.com/blog/topic/compliance), The E.U.-U.S. Privacy Shield Framework was formally approved July 12, 2016 when the E.U. Commission deemed the Privacy Shield Framework “adequate” to enable data transfers under E.U. law. U.S. businesses that meet the Privacy Shield requirements can self-certify online beginning August 1. U.S. businesses processing E.U. customer or employee data, or with plans to do so in the near future, should consider Privacy Shield certification. [Continue Reading](https://62401.hs-sites.com/blog/what-is-the-e.u.-u.s.-privacy-shield-framework-how-does-certification-work) ### Subscribe to our Blog ### Popular Posts [View All Posts ›](https://www.outsidegc.com/blog/all) [![Share on Facebook](https://static.hubspot.com/final/img/common/icons/social/facebook-24x24.png)](http://www.facebook.com/share.php?u=https%3A%2F%2F62401.hs-sites.com%2Fblog%2Ftopic%2Fprivacy%3Futm_medium%3Dsocial%26utm_source%3Dfacebook) [![Share on LinkedIn](https://static.hubspot.com/final/img/common/icons/social/linkedin-24x24.png)](http://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2F62401.hs-sites.com%2Fblog%2Ftopic%2Fprivacy%3Futm_medium%3Dsocial%26utm_source%3Dlinkedin) [![Share on Twitter](https://static.hubspot.com/final/img/common/icons/social/twitter-24x24.png)](https://twitter.com/intent/tweet?original_referer=https%3A%2F%2F62401.hs-sites.com%2Fblog%2Ftopic%2Fprivacy%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&url=https%3A%2F%2F62401.hs-sites.com%2Fblog%2Ftopic%2Fprivacy%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&source=tweetbutton&text=Blog%20%7C%20Outside%20GC%20%7C%20Privacy%20%282%29) [![Share on Email](https://static.hubspot.com/final/img/common/icons/social/email-24x24.png)](mailto:?subject=Check%20out%20https%3A%2F%2F62401.hs-sites.com%2Fblog%2Ftopic%2Fprivacy%3Futm_medium%3Dsocial%26utm_source%3Demail%20&body=Check%20out%20https%3A%2F%2F62401.hs-sites.com%2Fblog%2Ftopic%2Fprivacy%3Futm_medium%3Dsocial%26utm_source%3Demail) This publication should not be construed as legal advice or a legal opinion on any specific facts or circumstances nor an offer to represent you. It is not intended to create, and receipt does not constitute, an attorney-client relationship. The contents are intended for general informational purposes only, and you are urged to consult your attorney concerning any particular situation and any specific legal questions you may have. Pursuant to applicable rules of professional conduct, portions of this publication may constitute Attorney Advertising. Outside GC is an innovative approach to legal services for growing and mature businesses. Companies who engage Outside GC fall into two main categories: (1) those [without in-house counsel](http://www.outsidegc.com/general-legal-counsel-corporate-counsel) who need regular, on-going legal support but do not wish to hire a full-time in-house lawyer, and (2) those [with in-house counsel](http://www.outsidegc.com/in-house-counsel-support) who do not wish to add more full-time resources to their existing in-house staff. [Contact us](http://www.outsidegc.com/contact) to speak to one of our on-demand attorneys. ## Search our Site ![logo-small.png](https://62401.hs-sites.com/hs-fs/hubfs/Outside_GC_May_2015/Logos/logo-small.png?width=90&name=logo-small.png "logo-small.png") Attorney advertising. Copyright @ 2026 Outside GC LLC. All rights reserved. ![](https://dc.ads.linkedin.com/collect/?pid=215705&fmt=gif)