Cross-Border Data Forum – The Cross-Border Data Forum (CBDF) is a 501(c)(4) non-profit group that addresses international data transfer policy issues.

Posted on December 19, 2025

Kenneth Propp

LAWFARE – The European Union Changes Course on Digital Legislation

In this commentary for Lawfare, Mark MacCarthy and Kenneth Propp analyze the European Commission's Digital Omnibus proposal. Although the actual changes proposed to the General Data Protection Directive and the AI Act are modest, it does represent a dramatic course correction away from the protective digital regime the European Union has constructed over the past decade.

Posted on December 10, 2025

Alice Portnoy

WEBINAR: THE FUTURE OF THE EU-U.S. DPF: IMPLICATIONS OF THE LATOMBE DECISION BY THE EU GENERAL COURT

In this webinar, DeBrae Kennedy-Mayo and the panelists examine the EU General Court’s September ruling in the Latombe case and discuss what to expect from the Court of Justice of the European Union (CJEU) on Mr. Latombe’s appeal.

Posted on December 10, 2025

Alice Portnoy

WEBINAR: PERSONAL DATA AS A DUAL-USE TECHNOLOGY: CRITICALLY ASSESSING THE NEW ALLIANCE OF PRIVACY AND NATIONAL SECURITY

This panel hosted by the Cross Border Data Forum (CBDF) on 5 November 2025 brought together four experts to discuss a new law review article, “Personal Data as a Dual-Use Technology: Critically Assessing the New Alliance of Privacy and National Security,” by Peter Swire. The article introduces the concept of personal data as a dual-use technology and explores the potential for a new alliance between privacy and national security. Swire and Sacks welcome Alex Joel (Senior Project Director and Resident Adjunct and Professor at the American University of Washington College of Law) and Anupam Chander (Scott K. Ginsburg Professor of Law and Technology at the Georgetown University Law Center), who share their observations and comments on the analysis and foster a discussion on the interplay between privacy and national security.

Posted on December 8, 2025

Peter Swire

IAPP – Personal data as a dual-use technology: Privacy professionals face new export controls

Privacy professionals in the U.S. increasingly have to account for the national security implications of how their companies handle personal data.

Posted on November 24, 2025

Theodore Christakis

LAWFARE – When Governments Pull the Plug

While Europe worried about the United States flipping a “kill switch” on digital services, they accidentally triggered their own.

Posted on September 30, 2025

Theodore Christakis

From Transfers to Takedowns: Can Article 16 DSA Police GDPR Violations?

Berlin’s DPA asked Apple and Google —via DSA Article 16—to delist the DeepSeek app over alleged GDPR-breaching data transfers to China. This article explains why that route is shaky, why Chapter V doesn’t apply, and proposes a two-track framework for proportionate enforcement.