American Data Privacy and Protection Act (ADPPA)

US Privacy Laws and Legislation: What You Need to KnowData Protection Professionals Like it Hot: 7 Hot Topics and Trends in Data Privacy TodayU.S. Chamber Opposes FTC Rulemaking on Data Privacy

Artificial Intelligence

Effective Human Oversight of Automated Decision-Making Systems12 Myths About Automated Decision-Making Systems, per the EDPSWhat California Employers Need to Know About the Use of High-Risk Automated Decision Systems

California Consumer Privacy Act

CPPA Issues $1.35 Million Fine: What You Need to KnowWhat the CPPA Has to Say About the Delete Act and the DROPWhat California Employers Need to Know About the Use of High-Risk Automated Decision Systems

California Invasion of Privacy Act

What is Sufficient Consent?Privacy 'Testers' Don't Have Standing to Sue, Court RulesWhat Can We Learn From Recent Wiretapping Lawsuits?

California Privacy Rights Act

CPPA Executive Director: Increased Enforcement Is ComingCPPA and Data Brokers: What You Need to KnowCookies and Online Merchants: What Can We Learn From California Lawsuits

Children's Online Privacy Protection Act (COPPA)

FTC Fines Kids' App Developer for COPPA ViolationsNY Attorney General Drops Zoom Probe After Agreement on Enhanced Data Security and Privacy Safeguards.FTC Provides Guidance on COPPA Compliance in Relation to Remote Learning

Data Protection Law Compliance

7 Things Nordic Companies Should Think About When Doing Business in the USData Protection Professionals Like it Hot: 7 Hot Topics and Trends in Data Privacy TodayCalifornia Attorney General Rob Bonta Is Coming After Your Algorithmic Biases

Data Security Breach Response

Pain and Suffering for a Data Breach? German Court Issues First Decision of Its Kind in Europe.Datatilsynet's $7.1 Million Fine Against Grindr: Key TakeawaysOffice of the Privacy Commissioner for Bermuda Issues Data Breach Guide

Data Theft

Enforcement Increasing Under EU US Privacy Shield FrameworkLaw360 Article: Why Today’s Law Firm Needs a Chief Privacy OfficerAlert: Answers About the Most Recent Worldwide Ransomware Attack

Electronic Data Security

The Impact of Recession on Cybersecurity Programs: Beware of the Trap GameData Protection Professionals Like it Hot: 7 Hot Topics and Trends in Data Privacy TodayMi Pseudonym Es Su Pseudonym: ICO Issues Guidance on Pseudonymisation

European Union

12 Myths About Automated Decision-Making Systems, per the EDPSWeb Filtering: What Employers Need to KnowSession Replay Enforcement, but in French

Fair and Accurate Credit Transactions (FACT) Act

FACT Act Does Not Violate Due Process Or Equal Protection

General Data Protection Regulation (GDPR)

On April 14, 2016, the European Union Parliament passed the General Data Protection Regulation (GDPR), a complex set of new data privacy rules with major implications for businesses. GDPR addresses the collection and processing of EU citizens' personal data outside of the EU.

 

Even if a business does not collect personal data from EU citizens, the GDPR requirements apply to that business if it provides services to another business that must comply with GDPR.

Failure to comply with the regulations can result in fines of up to €20 million or 4 percent of global annual revenue in the prior year.

Web Filtering: What Employers Need to KnowSession Replay Enforcement, but in FrenchWhat Is an AI System? The EU Offers a Formula

General Privacy & Data Security News & Developments

Italy's €400,000 Credit Scoring Fine: What U.S. Companies Should Know About the Next Phase of DSAR EnforcementCookie Wiretapping Lawsuits: Delaware Court Highlights Class Certification and Ascertainability HurdlesPennsylvania AG’s Lawsuit Against Snap Highlights Growing Risks for Companies with Child and Teen Audiences

Gramm-Leach-Bliley

FTC Issues GLBA Safeguard Rule FAQs: What Motor Vehicle Dealers Need to KnowFTC, Car Dealership Management Software Company Reach Settlement Over Storage of Personal Information in CleartextFTC Seeking Comment on Changes to the Safeguards and Privacy Rules Under Gramm-Leach-Bliley Act

Health Insurance Portability and Accountability Act (HIPAA)

Washington's My Health, My Data Law: What You Need to KnowA Class Action Lawsuit Claims a Health System Uses Meta Pixel on Its Website. What You Need to Know.HIPAA Covers a Lot Less Than People Think. But Beware of Other US Privacy Laws.

Identity Theft

Don’t Get Caught in ‘Phishing Season’The Seventh Circuit Sides with Plaintiffs in Data Breach LitigationThe Rise in Business Identity Theft: What You Can Do to Safely Dissolve Your Business

Pacific Rim Privacy

Data Protection on the Blockchain: Singapore’s Personal Data Protection Commission Weighs InNew Zealand Will Consider Schrems II Decision in Implementing Own Privacy ActNew Zealand Issues Helpful Cybersecurity Incident Management Guide

Payment Card Industry Issues

Best Practices: Remote Working Cybersecurity Safeguards for the Payments IndustryPayment Card Industry Security Standards Council UpdatesPayment Card Industry (PCI) Standards Council Speaks

Privacy Policies

Web Scraping: 16 Data Protection Authorities Say Controllers Need to Protect Their PropertiesCisco Study: Mature Privacy Programs Provide Higher ROIStudy of Android App Privacy Policies Finds Contradicting Language

Privacy Rights

Biometrics in Advertising: Consent Is Not EnoughConnecticut AG Announces $85,000 CTDPA FineWhat Is Happening in Privacy Law?

Proposed Law

New House Bill Threatens to Expand the TCPA to Regulate Text MessagesColorado Attorney General: State Should Not Wait for Federal Privacy LawComplying With CCPA Now May Help With Future Federal Compliance

Protected Health Information

My Health, My Data: New Bill Aims to Protect Health Data in WashingtonCA Senate Proposes Expanded CCPA Carve-Outs Related to HIPAA, Biomedical ResearchSpanish Privacy Regulator Publishes Patient Data Protection Guidelines

Ransomware

Alert: Answers About the Most Recent Worldwide Ransomware AttackAfter the "WannaCrypt / WannaCry / WCry" Malware, Microsoft Pushes Update to Current and Unsupported Versions of WindowsFortify Your Cybersecurity Strategy With Information Sharing

Red Flag Rules

FTC Delays Implementation of Red Flag Rules Until December 31, 2010FTC Extends Red Flag Rules Enforcement Until June 1, 2010ABA Scores Victory with Attorney Exemption from Red Flag Rules

Regulatory Enforcement and Litigation

What Does the Future of Data Privacy Hold? Some Predictions.Capital One Fined $80 Million for Shoddy Public Cloud SecurityNY Attorney General Drops Zoom Probe After Agreement on Enhanced Data Security and Privacy Safeguards.

Right to Privacy

California Moves Two COVID Privacy Bills ForwardItalian Data Protection Authority Levies Warning Against Company Loyalty Program PromoIs It Really Possible to De-identify High Dimensional Data?

Social Media

Is There an Expectation of Privacy for Public Social Media Profiles?FTC Issues Landmark $5 Billion Fine Against FacebookStoring Users' Passwords in Cleartext May Be a 'Knowing Violation' of GDPR

State Privacy Laws

What the CPPA Has to Say About the Delete Act and the DROPBiometrics in Advertising: Consent Is Not EnoughTo Do: Annually Review Privacy Notices or Risk CPPA Enforcement

U.S. Federal Communications Commission (FCC) Issues

Is a Federal Privacy Law Coming?New House Bill Threatens to Expand the TCPA to Regulate Text MessagesFCC: Auto-Dialed Calls, Texts on Coronavirus Health and Safety Exempt From Consent Requirements

U.S. Federal Trade Commission (FTC) Issues

The FTC Still Cares About PrivacyFTC Issues GLBA Safeguard Rule FAQs: What Motor Vehicle Dealers Need to KnowUsing Facial Recognition? Regulators Expect Detailed Risk Assessments

United States

The Sensitive Data Bulk Transfer Rule: What You Need to KnowWhat the CPPA Has to Say About the Delete Act and the DROPThe FTC Still Cares About Privacy