On October 12, 2022, New York Attorney General Letitia James fined Zoetop Business Company, Ltd. (“Zoetop”), the owner of fast-fashion brands SHEIN and ROMWE, $1.9 million for mishandling a 2018 data breach and lying to the...more
On November 18, 2021, the European Data Protection Board (“EDPB”) issued guidelines on the interplay between provisions in the General Data Protection Regulation (“GDPR”) governing scope and applicability and those governing...more
Update: The VCDPA was signed into law by Governor Ralph Northam without amendment on March 2, 2021. The VCDPA will become operative on January 1, 2023, and businesses should remain mindful of pending legislation in states...more
3/9/2021
/ California Consumer Privacy Act (CCPA) ,
California Privacy Rights Act (CPRA) ,
Compliance ,
Consumer Privacy Rights ,
Cybersecurity ,
Data Collection ,
Data Privacy ,
Data Processors ,
Data Protection ,
Data Security ,
Fair Information Practice Principles ,
General Data Protection Regulation (GDPR) ,
Governor Northam ,
Gramm-Leach-Blilely Act ,
Personal Data ,
Right To Appeal ,
State Attorneys General ,
State Data Privacy Laws ,
Virginia
Virginia is set to become the second U.S. state to pass comprehensive data privacy legislation. Senate Bill 1392, called the Consumer Data Protection Act (“VCDPA” or the “Act”), passed the Virginia Senate by a vote of 39-0 on...more
On December 24, 2020, the European Commission and the United Kingdom reached an agreement in principle on the long-awaited Trade and Cooperation Agreement (the “Trade Agreement”). For now, transfers of personal data from the...more
On October 6, 2020, the Court of Justice of the European Union (the “Court”) ruled that principles of EU law prevent Member States from requiring a provider of electronic communications services to indiscriminately retain...more
On July 16, 2020, the Court of Justice of the European Union (“CJEU”) announced their decision in case C-311/18, better known as Schrems II. Late last year, the Advocate General issued a nonbinding opinion declaring the use...more
7/17/2020
/ Court of Justice of the European Union (CJEU) ,
Data Protection ,
EU ,
EU-US Privacy Shield ,
European Commission ,
European Economic Area (EEA) ,
General Data Protection Regulation (GDPR) ,
Safe Harbors ,
SCC ,
Schrems I & Schrems II ,
UK