Dan Cooper

Dan Cooper

Daniel Cooper heads up the firm’s growing Data Privacy and Cybersecurity practice in London, and counsels clients in the information technology, pharmaceutical research, sports and financial services industries, among others, on European and UK data protection, data retention and freedom of information laws, as well as associated information technology and e-commerce laws and regulations. Mr. Cooper also regularly counsels clients with respect to Internet-related liabilities under European and US laws. Mr. Cooper sits on the advisory boards of a number of privacy NGOs, privacy think tanks, and related bodies.

Subscribe to all posts by Dan Cooper

Irish DPC publishes draft Fundamentals for a Child-Oriented Approach to Data Processing

By Dan Cooper, Sam Jungyun Choi, Shona O'Donovan and Stacy Young on Posted in Children's Privacy
On December 18, 2020, the Irish Data Protection Commission (“DPC”) published its draft Fundamentals for a Child-Oriented Approach to Data Processing (the “Fundamentals”). The Fundamentals introduce child-specific data protection principles and measures, which are designed to protect children against data processing risks when they access services, both online and off-line. The DPC notes that all … Continue Reading

Council of the EU Released a (New) Draft of the ePrivacy Regulation

By Dan Cooper and Anna Oberschelp de Meneses on Posted in Data Privacy, EU Data Protection, European Union, GDPR
On January 5, 2021, the Council of the European Union released a new, draft version of the ePrivacy Regulation, which is meant to replace the ePrivacy Directive.  The European Commission approved a first draft of the ePrivacy Regulation in January 2017.  The draft regulation has since then been under discussion in the Council. On January … Continue Reading

Brexit Deal Keeps EU-UK Data Flows Open as Parties Pursue Mutual Adequacy

By Dan Cooper and Kurt Wimmer on Posted in Cross-Border Transfers, European Union, United Kingdom
On December 24th, with a year-end deadline and the holidays fast approaching, European Commission and United Kingdom (“UK”) officials announced they reached a deal on the EU-UK Trade and Cooperation Agreement (“Agreement”).  Once formally adopted by the European Union (“EU”) institutions, the Agreement will govern the relationship between the EU and UK beginning on January … Continue Reading

Inside Privacy Audiocast: Episode 8 – The Impact of the U.S. Election on Privacy Laws in the U.S.

By Dan Cooper and Libbie Canter on Posted in U.S. Election 2020, U.S. Federal and State Legislative Initiatives, United States
On the eighth episode of our Inside Privacy Audiocast, we peer through the looking glass at the U.S. election and the future of privacy laws in the U.S. We discuss whether the November 3 election is likely to be a watershed event in the development of privacy laws in the U.S. In this episode, Dan … Continue Reading

The European Commission publishes a proposal for a Regulation on European Data Governance (the Data Governance Act)

By Dan Cooper, Lisa Peets, Mark Young, Marty Hansen, Sam Jungyun Choi and Marianna Drake on Posted in Data, European Union
On 25 November 2020, the European Commission published a proposal for a Regulation on European Data Governance (“Data Governance Act”).  The proposed Act aims to facilitate data sharing across the EU and between sectors, and is one of the deliverables included in the European Strategy for Data, adopted in February 2020.  (See our previous blog … Continue Reading

EDPB adopts recommendations on international data transfers following Schrems II decision

By Dan Cooper, Lisa Peets, Marty Hansen and Sam Jungyun Choi on Posted in Cross-Border Transfers, Data, Data Privacy, EU Data Protection, European Union
On 11 November 2020, the European Data Protection Board (“EDPB”) issued two draft recommendations relating to the rules on how organizations may lawfully transfer personal data from the EU to countries outside the EU (“third countries”).  These draft recommendations, which are non-final and open for public consultation until 30 November 2020, follow the EU Court … Continue Reading

Inside Privacy Audiocast: Episode 7 – Brexit and the Future of UK Data Privacy Law

By Dan Cooper on Posted in Brexit, Cross-Border Transfers, European Union, Privacy and Data Security, United Kingdom
Over the past 9 months, the UK has been hammering out the shape of its future trading relationship with the EU, as well as many others, and there apparently are signs of progress in the past few days as a result of intensified talks between the two sides. Some are reporting a deal will be … Continue Reading

Inside Privacy Audiocast: Episode 6 – View from Johannesburg Part II: Top Data Policy Trends to Look Out For in Africa

By Dan Cooper and Robert Kayihura on Posted in Cross-Border Transfers, GDPR, International, POPIA, Privacy and Data Security, South Africa
Recently, there has been a significant level of attention given to data protection and privacy matters on the Continent, and in the just the past year, we have seen new laws proposed or enacted in places like Nigeria, Egypt, Kenya, and of course South Africa, although prior to that, places like Morocco, Ghana and Mali … Continue Reading

Inside Privacy Audiocast: Episode 5 – View From Johannesburg Part I: GDPR vs. POPIA – What Should Businesses Be Considering?

By Dan Cooper, Shivani Naidoo and Ahmed Mokdad on Posted in Cross-Border Transfers, GDPR, International, POPIA, Privacy and Data Security, South Africa
On June 22, 2020, the South African President announced that certain provisions of POPIA would take effect on July 1, provisions which most regard as essential to the statute, such as those imposing conditions on the lawful processing of personal information, procedures for handling complaints, and general enforcement provisions. Only days later, the South African Information … Continue Reading

EDPB Publishes Draft Guidelines on the Targeting of Social Media Users

By Dan Cooper and Shona O'Donovan on Posted in Advertising & Marketing, Data Privacy, EU Data Protection, European Union, Online, Online Targeting
On 7 September 2020, the European Data Protection Board (“EDPB”) adopted draft guidelines on the targeting of social media users (the “Guidelines”).  The Guidelines aim to clarify the roles and responsibilities of social media providers and “targeters” with regard to the processing of personal data for the purposes of targeting social media users.… Continue Reading

English High Court Awards Damages for Quasi-Defamation Data Claim

By Louise Freeman, Dan Cooper, Katharine Kinchlea and Tom Cusworth on Posted in United Kingdom
The English High Court has recently awarded damages in a data privacy case, with two features of particular interest.  First, the nature of the claim is more reminiscent of a claim in defamation than for data privacy breaches, which is a development in the use of data protection legislation.  Secondly, the damages awarded (perhaps influenced … Continue Reading

Inside Privacy Audiocast: Episode 4 – A Look into the ACLU of California’s Position on the CPRA

By Dan Cooper and Lindsey Tonsager on Posted in California Consumer Privacy Act (CCPA), Data Privacy, Data Security, United States
On our fourth episode of our Inside Privacy Audiocast, we are aiming our looking glass at the California Privacy Rights Act, and are joined by guest speaker Jacob Snow, Technology and Civil Liberties Attorney with the American Civil Liberties Union of Northern California. In September 2019, Alastair Mactaggart, Board Chair and Founder of Californians for … Continue Reading

European Commission Proposes Interim Regulation to Combat Child Sexual Abuse Online

By Dan Cooper, Marty Hansen and Sam Jungyun Choi on Posted in Children's Privacy, Data Privacy, EU Data Protection
On 10 September 2020, the European Commission proposed an interim regulation designed to enable online communications service providers to combat child sexual abuse online. Once in force, this regulation will provide a legal basis for providers to voluntarily scan communications or traffic data on their services for the limited purpose of detecting child sexual abuse … Continue Reading

EDPB Publishes Guidelines on the GDPR Concepts of “Controller”, “Joint Controller” and “Processor”

By Dan Cooper and Anna Oberschelp de Meneses on Posted in EU Data Protection
On September 2, 2020, the European Data Protection Board (“EDPB”) adopted guidelines on the concepts of “controller” and processor” under the GDPR. The Article 29 Working Party had already issued a guidance on this topic in 2010. Although the GDPR did not change the definitions of “controller” and “processor”, the EDPB’s guidelines aim to bring … Continue Reading

Swiss Federal Data Protection Authority Removes the US from its List of Adequate Countries

By Dan Cooper and Anna Oberschelp de Meneses on Posted in Cross-Border Transfers, Data Privacy
On September 8, 2020, the Swiss Federal Supervisory Authority (“Swiss SA”) issued a position paper stating that Swiss companies can no longer rely on the Swiss-US Privacy Shield Framework to transfer data to the US. The Swiss SA did not revoke the Swiss-US Privacy Shield Framework because it does not have the power to do … Continue Reading

Life After Schrems II: Practical Recommendations In An Uncertain Time

By Dan Cooper, Kristof Van Quathem and Nicholas Shepherd on Posted in Cross-Border Transfers, Data Privacy, EU Data Protection, European Union, Privacy and Data Security
On 16 July, 2020, the Court of Justice of the EU (“CJEU”), issued its decision in the Schrems II case.  In short, the CJEU invalidated the EU-U.S. Privacy Shield and clarified that the use of standard contractual clauses (“SCCs”) requires data controllers to conduct a case-by-case assessment of the level of data protection that SCCs … Continue Reading

LGPD Effective Imminently

By Dan Cooper and Miles Lynn on Posted in Data Privacy, International
On August 26, 2020, the Brazilian Senate rejected an alteration made to Article 4 of Provisional Measure 959/20 — an alteration intended to postpone the effective date of the General Data Protection Law (“LGPD”) until December 31, 2020.  Following the removal of Article 4 — and many months of uncertainty — the LGPD’s effective date … Continue Reading

Inside Privacy Audiocast: Episode 3 – Emerging Data Privacy Issues in Brazil

By Dan Cooper on Posted in Cross-Border Transfers, Data Privacy, International
On our third episode of our Inside Privacy Audiocast, we are aiming our looking glass at Brazil’s new data protection statute, Lei Geral de Proteção de Dados (or LGPD), and are joined by Ronaldo Lemos, a partner at Rennó Penteado. In our episode recorded earlier this week, Dan Cooper and Ronaldo discuss the LGPD, which … Continue Reading

Inside Privacy Audiocast: Episode 2 – Data Protection Hot Topics in Russia

By Dan Cooper on Posted in Data Privacy, EU Data Protection, International
On the second episode of our Inside Privacy Audiocast, we are aiming our looking glass at Russia, and are joined for our discussion by Partner Maria Ostashenko and Senior Associate Anastasia Petrova of the Data Protection and Cybersecurity practice at the Alrud law firm in Moscow. The pair discuss Russia’s data protection framework, zooming in … Continue Reading

Inside Privacy Audiocast: Episode 1 – Post-Schrems II: Paving A Way Forward

By Dan Cooper and Kristof Van Quathem on Posted in Data Privacy, EU Data Protection
The Court of Justice of the European Union’s recent decision in the “Schrems II’ case was one of the most highly anticipated decisions in the world of data privacy, striking down the EU-U.S. Privacy Shield, but upholding the validity of standard contractual clauses. Tune in to the first episode of Covington’s Inside Privacy Audiocast, where … Continue Reading

European Commission Publishes 2-Year Report on the Implementation of the GDPR

By Dan Cooper, Kristof Van Quathem, Nicholas Shepherd and Anna Oberschelp de Meneses on Posted in Data Privacy, EU Data Protection, European Union, Internet of Things (IoT), Online Targeting, Privacy and Data Security
On June 24, 2020, the European Commission (“Commission”) published its much-anticipated assessment of the EU’s General Data Protection Regulation (“GDPR”) two years after it went into effect.  The assessment takes into account contributions from the European Council, the European Parliament, the European Data Protection Board (“EDPB”), individual supervisory authorities, the Multi-Stakeholder Expert Group and other … Continue Reading

French Council of State Decides that the French Supervisory Authority Cannot Prohibit Cookie Walls

By Kristof Van Quathem, Dan Cooper and Anna Oberschelp de Meneses on Posted in Data Privacy, European Union
On June 19, 2020, the French Council of State (Conseil d’État) decided that the French Supervisory Authority (“CNIL”) had gone too far in its guidance on cookies and similar technologies when it stated that conditioning a user’s access to a website upon his or her acceptance of certain cookies (commonly known as “cookie walls”) is … Continue Reading
LexBlog