This week, I had the pleasure of attending the 10th International Programme of The Sedona Conference, a non-profit legal research and educational institute. The theme was cross-border data transfers and data protection - with a strong focus on the recently-implemented EU General Data Protection Regulation (GDPR).
One of the early panel discussions featured in-house and private practice lawyers and representatives from global data regulators discussing the implementation challenges seen in the first few weeks since the GDPR came into force. These include:
- Governance and accountability
- Enhanced data subject rights
- Transparency and information requirements
- Data portability and subject access requests
- Records of processing activities
- Application to non-EU organisations
- Data protection impact assessments
- Data breach notification
- Cross-border discovery
- Enforcement against non-EU entities
If you're interested in finding out more about each of these challenges, I explain them in more detail here.

![When warranty losses get passed on: Blundell and another v Davies and others [2026] EWHC 176 (Ch)](https://images.passle.net/fit-in/455x256/filters:crop(0,88,2121,1187)/Passle/59994aefb00e801a0c1447be/SearchServiceImages/2026-02-05-14-32-16-231-6984a9f0db300c6e5a22b6d1.jpg)
/Passle/59994aefb00e801a0c1447be/MediaLibrary/Images/2025-07-02-11-33-24-371-686519042730a92ea84dd440.jpg)
/Passle/59994aefb00e801a0c1447be/SearchServiceImages/2026-01-24-17-19-59-853-6974ff3f8a71e5f81a351f11.jpg)