General Data Protection Regulation (GDPR)

Providers in the mobility space take note.

The Estonian Data Protection Inspectorate, Andmekaitse Inspektsioon, conducted a short term vehicle rental sweep that could be important in light of a declared

Continue Reading What Can Estonia’s Short Term Vehicle Rental Sweep Teach Us About California?

Ireland’s Data Protection Commission has fined Meta €1.2 billion.

What, however, did the commission say in the case about using Art 49 derogations for transfers to the U.S.?

An overview:

Continue Reading Ireland’s Data Protection Commission, Meta and Art 49 Derogations: An Overview

Why is the new noyb action against websites and data brokers regarding cookie-based authentication important for compliance with the new U.S. privacy laws?

Because they set out to equivocally confirm

Continue Reading To Best Comply With US Privacy Laws, It Can Be Helpful to Look to Europe

If you are a GDPR-compliant company, does that mean you can start doing business in the United States with no additional thoughts about privacy?

As Simon Cowell says: “It’s a

Continue Reading What Does the EU-US “Draftequacy” Decision Mean for Companies Right Now?

The European Data Protection Supervisor (EDPS) has submitted comments to FTC Rulemaking on commercial surveillance.

Here are some key takeaways.

IOT devices:

  • It is important that data from the Internet
Continue Reading What Did the EDPS Have to Say About FTC Rulemaking on Commercial Surveillance?

You need a data retention plan. No really.

And not just in the European Union. In California too.

Commission Nationale de l’Informatique et des Libertés (CNIL) has fined messaging platform

Continue Reading Make Sure You Have a Good Data Retention Plan. You Need It.

For deidentification under the traditional laws like HIPAA, removal of identifiers qualifies.

That was a key facet of what I discussed last week on an anonymization panel during the IAPP

Continue Reading Deidentification vs Anonymization: What Is Enough?