Recently, the CAC released the final Measures for the Administration of Compliance Audits on Personal Information Protection...

AI agreements pose many legal risks, including in the areas of data privacy, intellectual property, liability, and bias. Counsel can...

On January 8, 2025, the DOJ issued a new final rule to prohibit or restrict transfers of bulk sensitive personal data and certain U.S....

On August 27, the European Union and China launched a new Cross-Border Data Flow Communication Mechanism to address problems regarding...

On August 9, 2024, the Guangzhou Internet Court published an opinion in the first cross-border data transfer case in China. The case ...

On September 24, China’s State Council released finalized Regulations on Network Data Security Management, which took effect on January...

On March 19, 2024, China issued the Regulation on the Implementation of the Law of the PRC on the Protection of Consumer Rights and...

Generative AI poses both opportunities and risks for organizations. Higher education institutions should strongly consider drafting AI...

On September 6, 2023, the Cyberspace Administration of China (CAC) imposed a fine of RMB 50 million (approximately $7 million USD) on the...

On September 28, 2023, Chinese regulatory authorities published Draft Measures on regulating and facilitating cross-border transfers; the...

This publication was posted on 7/28/2023 (Updated 10/25/2023).

In late May 2023, cybercriminals gained unauthorized access to the personal information of IHEs’ students, employees, and other community...

By now, nearly everyone has heard of “blockchains” and “NFTs,” and some universities are even using them to issue and validate...

Several U.S. universities’ access to China’s largest academic database has been suspended as of April 1 due to data privacy and data...

On February 24, 2023, the Cyberspace Administration of China (CAC) released the final Standard Contractual Clauses (SCCs) for the Chinese...

The PRC issued Cross-Border Personal Information Handling Security Certification Specifications—one of three ways institutions of higher...

The European Commission recently published its draft EU-US Data Privacy Framework adequacy decision. If approved, the adequacy decision...

As we head into the fifth year of EEA General Data Protection Regulation (GDPR) enforcement, XL Law & Consulting has tracked a total of...

While it has been little over a year since China’s Personal Information Protection Regulation (“PIPL”) has taken effect, Chinese...

Cross-border transfer restrictions and obligations imposed by China’s Personal Information Protection Law (PIPL) and its supporting...