Consumer Protection Privacy General Business

Read Consumer Protection updates, news, and legal commentary from leading lawyers and law firms:
News & Analysis as of

EU-US Privacy Shield: What You Need to Know for Transatlantic Data Transfers

The flow of data across international borders is crucial to commerce in today’s global economy. After last year’s invalidation of the Safe Harbor framework, which enabled companies to transfer personal data from the EU to...more

The New York State Department of Financial Services Proposes Robust Cybersecurity Rules

On September 13, 2016, the New York State Department of Financial Services (DFS) proposed new rules that would require certain “Covered Entities” to establish and implement cybersecurity programs designed to protect nonpublic...more

Small Companies and Those Not Certified Under the Safe Harbor Face Hidden Costs in the EU/US Privacy Shield Certification Process

The Privacy Shield in a nutshell. The Privacy Shield permits U.S. businesses to process and control the personal data of individuals, aka data subjects, located in the European Union (EU). Without the Privacy Shield,...more

In the age of Big Data, the EDPS issues an Opinion on enforcement and upholding fundamental rights

The European Data Protection Supervisor (“EDPS”) issued an Opinion on coherent enforcement of fundamental rights in the age of big data”. This is an update to the EDPS’ Preliminary Opinion in 2014 on “Privacy and...more

UK ICO issues largest ever fine for a data breach

The UK Information Commissioner's Office (the "ICO") has issued a record fine of £400,000 to a UK telecoms company, in connection with a data breach that took place in October 2015. The fine, and the related adverse...more

First Privacy Shield Guidelines for Companies published by German DPA

On September 12, 2016, the Data Protection Authority of the German Federal State of North Rhine-Westphalia (“DPA NRW”) became one of the first EU data protection authorities to issue guidance on the implementation of the...more

Consumer Agreement Audits: Reduce Risk Posed by Financial Aggregators and Cyber Attacks

Has your banking organization conducted its annual review of its electronic banking agreements? If you haven’t, your organization may want to consider whether revisions are required to your bank’s deposit agreements, online...more

[Event] Transatlantic data: What U.S. companies need to know about the GDPR and EU data privacy laws - September 29th, Chicago,...

The clock is ticking for the international business community to ensure compliance with the European General Data Protection Regulation, which was adopted this year and comes into full effect in May 2018....more

Summer Round-Up: Four States Bolster Data Breach Notification Laws and More Changes on the Way

As has become typical in the data security space, there was quite a bit of activity in state legislatures over the previous year concerning data breach notification statutes. Lawmakers are keenly aware of the high profile...more

Which U.S. Businesses Must Comply with EU Data Protection Laws?

What the recent Amazon decision tells us - On 28 July 2016, the European Court of Justice rendered a decision in a dispute between an Austrian Consumer Protection organization known as VKI (Verein für...more

Privacy Tip #50 – FTC Issues Brochure on 10 Ways to Avoid Fraud

With more and more information online, it is easy to accumulate a lot of information about individuals just by using a search engine. Scammers use online information to build profiles of victims and then use different scams...more

The Privacy Shield: September 30, 2016, Deadline for Early Self-Certification Offers Compliance Opportunity and Risk

The European Commission recently determined that the Privacy Shield Framework is adequate to legitimize data transfers under EU law, providing a replacement for the Safe Harbor program. The Privacy Shield is designed to...more

[Event] Data Breaches - What To Do When Your Client Falls Victim - September 28th, Mountain View, CA

The number of data breaches has risen significantly in the past few years. More and more companies, both large and small, are having their computer networks compromised and are looking for guidance on how to respond. This...more

Yelp Seeks Dismissal of Consumer Privacy Lawsuit

Last Tuesday, the federal district court for the Northern District of California held oral arguments on a motion for summary judgment filed by Yelp in a consumer privacy lawsuit involving other prominent technology companies,...more

Does Pokémon GO Lure You in With A Dangerous Privacy Policy and Terms of Use?

For years, we have been lamenting that our young people spend too much time indoors playing computer games and not enough time outside or connecting with others. Yet, those same critics now condemn young Pokémon Go players...more

ICO Reminds Organisations of EU-U.S. Personal Data Transfer Obligations

The Interim Deputy Commissioner at the Information Commissioner’s Office (“ICO”), Steve Wood, has published a blog reminding organisations of their obligations when transferring personal data to the United States, pursuant to...more

Eddie Bauer Latest Victim of POS Malware Attack

Last week the clothing retailer Eddie Bauer LLC issued a press release to announce that its point of sale (“POS”) system at retail stores was compromised by malware for more than six months earlier this year. The...more

Well-Drafted Privacy Policy Saves the Day for GameStop

This Tuesday, the Eight Circuit Court of Appeals affirmed a Minnesota federal district court’s dismissal of a website user’s lawsuit and prospective class action involving the privacy policy and information sharing practices...more

The EU’s Data Transfer “Privacy Shield”—Full Body Armor or a Candle in the Wind?

With the August 1st start of the Privacy Shield, the European Commission’s new and long-awaited transatlantic data transfer agreement with the U.S., businesses that had previously relied on the invalidated Safe Harbor scheme...more

High Court Permits University’s Contravention of Its Own Privacy Policy

The High Court in Bangura v Loughborough University [2016] EWHC 1503 (QB) ruled 19 May that Loughborough University acted lawfully under the Data Protection Act 1998 (“DPA”) in supplying Leicestershire Police with the...more

EU-US Privacy Shield: How to Certify

Following formal approval of the EU-US Privacy Shield, US organizations will now be considering how to apply for Privacy Shield certification. On July 12, 2016, the European Commission formally approved and adopted the...more

White House Releases Policy Directive On Cyber Incident Coordination

On July 26, 2016, the White House approved a Presidential Policy Directive (“PPD”) on coordinating responses to cyber incidents that occur in the United States. The PPD seeks to clarify who in the federal government is...more

Unlocking the EU General Data Protection Regulation: A practical handbook on the EU's new data protection law: Chapter 20:...

ad hoc clauses means a set of clauses for Cross-Border Data Transfers, which require prior approval by a DPA (see Chapter 13)....more

An Overview of the New General Data Protection Regulation

The European Parliament has approved the reformed General Data Protection Regulation (the “GDPR”). Given this is a Regulation (rather than a Directive), this legislation will apply automatically in every Member State (without...more

“Privacy Shield” Open For Business – Fees?

The certification forms for the new US-EU Privacy Shield Framework are now available online. What is not easily discernible in the workflow is the fee structure. One needs to refer back to the Federal Register’s...more

1,142 Results
View per page
Page: of 46

Follow Consumer Protection Updates on:

JD Supra Readers' Choice 2016 Awards

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:

Sign up to create your digest using LinkedIn*

*By using the service, you signify your acceptance of JD Supra's Privacy Policy.

Already signed up? Log in here

*With LinkedIn, you don't need to create a separate login to manage your free JD Supra account, and we can make suggestions based on your needs and interests. We will not post anything on LinkedIn in your name. Or, sign up using your email address.