Several initiatives signal big changes for the regulation of privacy in China in 2019 reports the International Association of Privacy Professionals (IAPP).

  • End of bundled consent: Controllers are required to provide a privacy notice in intelligible, clear and concise wording and to obtain freely given consent from data subjects. The bundled consent, or “take-it-or-leave-it”

Privacy compliance as a competitive differentiator: 97% of 3,200 companies surveyed say they are receiving auxiliary benefits today from their data privacy investments, beyond just meeting compliance requirements.

Benefits cited include:

  • greater agility and innovation
  • competitive advantage versus competition
  • operational efficiency
  • investor appeal
  • less costly data breaches
  • for companies that had undergone GDPR compliance work,

From 2005 through 2009, UCLA Health System Hospitals ("UCLA") received complaints that its employees had viewed celebrities’ medical records without authorization.  After an investigation, federal health regulators determined that UCLA employees reviewed patients’ electronic medical records "repeatedly and without a permissible reason."  Federal health regulators found that UCLA failed to remedy the problem and discipline or retrain