On November 10, the European Data Protection Board (EDPB), the European Union’s top data privacy regulator, issued long-awaited guidance setting out a framework for navigating transfers of data out of the European Economic Area (EEA) in light of this July’s…
Yearly Archives: 2020
European Data Protection Board Releases Guidance on Cross-Border Data Flows in the Wake of Schrems II
Tagged with: cross-border, data flow, data mapping, EDPD, GDPR, guidance, privacy shield, SCCs, Schrems, standard contractual clauses
Posted in GDPR, Regulations, Standards
Posted in GDPR, Regulations, Standards
California Privacy Rights Act Will Revamp CCPA to Include GDPR-Type Requirements
On June 24, the eve of the July 1 enforcement date for the California Consumer Privacy Act (CCPA), the California Secretary of State certified the California Privacy Rights Act (CPRA), the latest brainchild of privacy activist (and CCPA spiritual father)…
Posted in Uncategorized
Bipartisan Bill Would Regulate Automated COVID-19 Contact Tracing Technology
A new federal COVID-19 data privacy bill with bipartisan support, the Exposure Notification Privacy Act, would have a substantially narrower scope of application than two previous partisan draft COVID-19 privacy laws. The bipartisan bill specifically regulates “automated exposure notification services,”…
Tagged with: coronavirus, COVID-19, Federal Privacy Legislation, legislation, technology
Posted in Legislation, Privacy, Regulations
Posted in Legislation, Privacy, Regulations
Democrats and Republicans Introduce Competing COVID-19 Data Privacy Bills
Responding to widespread calls for uniform rules and restrictions regarding the collection and use of individuals’ COVID-19-related health information, Congressional Republicans and Democrats have each recently introduced their own versions of federal COVID-19 data privacy bills. Although both parties’ bills…
Tagged with: coronavirus, COVID-19, Federal Privacy Legislation, legislation, privacy
Posted in Legislation, Privacy, Regulations
Posted in Legislation, Privacy, Regulations
The European Data Protection Board Issues Updated Guidelines on Consent
On May 4, 2020, the European Data Protection Board adopted updated guidelines on what does and does not constitute consent under the General Data Protection Regulation (GDPR) in certain situations. Consent is one of the lawful bases to process personal…
Posted in Privacy
The Children’s Online Privacy Protection Act and Online Learning
With schools across the nation closing their physical locations and moving to an online learning environment, it is important for school officials to understand their obligations under the Children’s Online Privacy Protection Act (COPPA). COPPA regulates the collection of personal…
Does the CCPA Apply to Financial Institutions?
Despite the global pandemic, the California Attorney General will begin enforcing the California Consumer Privacy Act on July 1 as planned, so even in this new work-from-home environment, businesses must continue to work towards compliance and resolve any open issues.…
Tagged with: attorneys general, California Consumer Privacy Act of 2018, CCPA, enforcement, GLBA, privacy, regulations
Posted in CCPA, Legislation, Privacy, Regulations
Posted in CCPA, Legislation, Privacy, Regulations
Cybersecurity Best Practices in the Remote-Working Environment
In the wake of the COVID-19 crisis, much of the workforce has shifted to working remotely, with many workers operating out of makeshift “offices” they created in their homes with little or no warning. Along with this remote work comes…
Tagged with: best practice, coronavirus, COVID-19, cybersecurity, data security, phishing, remote access
Posted in Data Security, Policies and Procedures, Privacy, Uncategorized
Posted in Data Security, Policies and Procedures, Privacy, Uncategorized
Eight Best Practices for Avoiding Data Breaches
As data breaches are on the rise, the old adage rings true: it’s not a question of if, but when. More companies are experiencing crippling breaches and the statistics are alarming: According to IBM Security’s Cost of a Data Breach…
Tagged with: attorneys general, data breach, data security, enforcement, FTC
Posted in Data Breach, Data Security, Policies and Procedures, Standards
Posted in Data Breach, Data Security, Policies and Procedures, Standards
Plaintiffs Allege Security Promises Ring False
John and Jennifer Politi, purchasers of several Ring products, have filed a putative class action lawsuit against Ring, LLC arising out of Ring’s alleged failure to implement industry standard security features into its products. The case has been consolidated with…
Posted in Internet of Things, Litigation
