“To be compliant with the Brazilian General Data Protection Law (LGPD) is a temporary status, which should be maintained on a day-to-day basis. In other words, there is no final line in the LGPD compliance program, since new projects and business plans should always be evaluated according to the new data protection rules and principles.”

“C’est tres complique aujourd’hui de se declarer 100% conforme”

“In reality, it’s very complicated to declare in total and perfect conformity [with GDPR], be it today, in five or ten years, because it’s a continuous process. A company never really achieves 100% compliance, it works on it every day. It seeks to have compliance champions,

A survey shows that most companies are not yet ready for the California Consumer Privacy Act (CCPA), and this includes companies that have undergone compliance processes for the EU General Data Protection Regulation (GDPR).

CCPA is not GDPR or a subset of GDPR. It’s a different law with different requirements, for which preparation will require

From 2005 through 2009, UCLA Health System Hospitals ("UCLA") received complaints that its employees had viewed celebrities’ medical records without authorization.  After an investigation, federal health regulators determined that UCLA employees reviewed patients’ electronic medical records "repeatedly and without a permissible reason."  Federal health regulators found that UCLA failed to remedy the problem and discipline or retrain

Governor Schwarzenegger vetoed the update to California´s landmark privacy protection law (AB 700), known as SB 20, which California’s State Legislature previously approved and we reported about here. SB 20 was proposed by State Senator Joe Simitian (D-Palo Alto).
Continue Reading CALIFORNIA’S PROPOSED STRENGTHENED DATA PRIVACY LAW TERMINATED