Data Protection

Garrigues

ELIGE TU PAÍS / ESCOLHA O SEU PAÍS / CHOOSE YOUR COUNTRY / WYBIERZ SWÓJ KRAJ / 选择您的国家

  • Data Economy, Privacy and Cybersecurity Newsletter - April 2026

    In this newsletter, we offer the latest updates on everything related to the data economy, privacy, and cybersecurity. We cover the most recent rulings from relevant authorities and agencies, key court decisions, and the most important news in this field.
  • The Supreme Court sets the scope of the concept of "processing" and requires compliance with the principles of the GDPR from the request for personal data

    The Supreme Court issues a landmark ruling laying down case law in relation to the GDPR: a mere request for personal data constitutes data ‘processing’ for the purposes of the GDPR. The judgment stems from a cassation appeal brought by the AEPD, with Garrigues acting as legal counsel.
  • Evolution of person data rules in Peru: Implementation of the new regulations, administrative action and legislation forecasts

    Data protection rules have evolved at a particularly vigorous pace over recent years in Peru, fueled by a strengthened regulatory framework (driven by the entry into force of the new Regulations for the Data Protection Law) and increasingly active and technical oversight by the Peruvian data protection authority. 
  • g-digital, Garrigues’ digital business division, rounds off 2025 with new digital trust products and increases its eIDAS offering

    With solutions designed to be integrated into all types of real-world client processes (evidence, signature, storage and certified notifications), it is gearing up for a 2026 marked by the entry into force of the European Digital Identity (EUDI) Wallet and the new compliance challenges faced by businesses 
  • Colombia: Main recurring corporate, tax and labor obligations - First semester 2026

    In Colombia, companies must comply with certain corporate, tax and labour obligations during the year. In this document we highlight the main obligations to be taken into account in the first half of 2026. 
  • EU pushes for a profound reshaping of the digital economy in 2026 with proposed changes to legislation governing AI, data and platforms

    2026 brings a raft of reforms that will redefine AI, privacy and digital markets in the EU. The regulatory agenda is shifting towards greater transparency, greater oversight and new obligations for platforms, technology providers and companies that process data or rely on digital services. It will be a pivotal year in terms of anticipating risks, adapting processes and strengthening corporate digital strategies.
  • Data Economy, Privacy and Cybersecurity Newsletter - February 2026

    In this newsletter, we offer the latest updates on everything related to the data economy, privacy, and cybersecurity. We cover the most recent rulings from relevant authorities and agencies, key court decisions, and the most important news in this field.
  • New guidance on vehicle data and the Data Act: challenges and opportunities

    The European Commission has published the first guidelines clarifying how the obligations of the Data Act apply to connected vehicles. The document provides guidance for manufacturers, providers and users on access to, and use and transmission of, the data generated by vehicles, paving the way to a new stage in automotive data governance and the structure of future business models based on digital mobility.
  • Data Economy, Privacy and Cybersecurity Newsletter - November 2025

    In this newsletter, we offer the latest updates on everything related to the data economy, privacy, and cybersecurity. We cover the most recent rulings from relevant authorities and agencies, key court decisions, and the most important news in this field.
  • Is pseudonymized data personal data? Key points following the European Court of Justice's judgment in the EDPS v SRB case

    The judgment delivered by the European Court of Justice (CJEU) on September 4, 2025 in the EDPS v SRB case (case C 413/23 P) is an important landmark in the field of data protection, because it deals with the concept of “personal data” which is at the heart of the practice.