As anti-corruption laws in the U.S. and EU are increasingly being more aggressively enforced, multinational companies may find themselves facing disclosure requests from foreign regulators such as the SEC or U.S. Department of Justice, and by foreign courts. Respective disclosure requests do often necessitate the disclosure of large amounts of personal data, including personal data collected by EU subsidiaries. Balancing corporate ethics, compliance with a foreign regulator’s or court’s disclosure request and EU data protection regulations is highly challenging. Here, we will provide an overview of the main data protection issues to be considered when it comes to transferring personal data to a foreign regulator or court, taking the corresponding rules of the new regulation into account. What you’ll take away: · The main data protection issues to be considered when it comes to transferring personal data to a foreign regulator or court · How to justify out-of-country data transfers · How this all might change in light of the pending regulation