California’s Attorney General won’t delay enforcement of key provisions of the California Consumer Privacy Act, but will use prosecutorial discretion in enforcing them, according to its Final Statement of Reasons for the...more
California Attorney General Xavier Becerra has submitted a final California Consumer Privacy Act (CCPA) regulations package. The final version is essentially identical to version three of the regulations released in early...more
The IAPP – International Association of Privacy Professionals provides a helpful infographic on questions to ask concerning data collected when performing COVID-19 testing.....more
Following on the heels of the COVID–19 Consumer Data Protection Act of 2020, a bill recently filed by Republican Senators, Democratic Sens. Richard Blumenthal and Mark Warner introduced the "Public Health Emergency Privacy...more
A group of Republican U.S. senators plan to introduce legislation to protect user privacy in relation to contact-tracing apps used to combat the spread of COVID-19.
“While the severity of the COVID-19 health crisis cannot...more
Canada’s Office of the Privacy Commissioner weighs in on data processing under COVID-19:
“There are some circumstances under which organizations may collect, use or disclose personal information without consent,...more
The California Attorney General has published a third draft of the California Consumer Privacy Act regulations-
Key takeaways:
Removes example indicating IP addresses may not be personal information in certain...more
France’s Data Processing Authority CNIL weighs in on Coronavirus and GDPR.
Employers should NOT:
•Collect in a systematic and generalized manner, or through individual inquiries and requests, information relating to the...more
Italy, which is currently dealing with the most serious COVID-19 outbreak in Europe, weighs in on health data and GDPR .
Employers should NOT:
•systematically collect (e.g. through specific requests to employees or...more
If it’s not broker(ed) why fix it?
A new data broker bill has been submitted to the Washington State House of Representatives, following in the footsteps of Vermont and California....more
The California Office of the Attorney General has published proposed amendments to the California Consumer Privacy Act (CCPA) draft regulations. The amendments are open for public comment until 5 pm PT on Feb. 24, 2020....more
2/11/2020
/ Attorney General ,
California Consumer Privacy Act (CCPA) ,
Consumer Privacy Rights ,
Cybersecurity ,
Data Collection ,
Data Privacy ,
Data Protection ,
Data Security ,
Opt-Outs ,
Personal Information ,
Privacy Laws ,
Right to Delete
1.Yes, CCPA can apply to you even if you have no physical presence in California.
2.Yes, if you have done some GDPR compliance you are in better shape for CCPA.
3.No, your GDPR compliance work is NOT sufficient for CCPA...more
The California Consumer Privacy Act has significant implications for Chief Marketing Officers. Here are some important principles CMOs should keep in mind when planning compliance efforts, included in my recent presentation...more
Here are some key points for employers to keep in mind related to the California Consumer Privacy Act (CCPA), which were included in my presentation to a recent meeting of Fox Rothschild’s Labor & Employment Practice...more
“In California we are rebalancing the power dynamic by putting power back in the hands of consumers. I encourage all Californians to take a moment to understand their new rights and exercise these rights to take control of...more
California Attorney General Xavier Becerra released the title and summary for the CCPA 2.0 ballot initiative, the California Privacy Rights Act....more
Alastair Mactaggart, the proponent of the "CCPA 2.0" ballot initiative in California, has submitted to the Office of the Attorney General a revised version of the proposed "California Privacy Rights Act" (CPRA) that he hopes...more
12/11/2019
/ California Consumer Privacy Act (CCPA) ,
Consumer Privacy Rights ,
Corporate Counsel ,
Cybersecurity ,
Data Collection ,
Data Privacy ,
Data Protection ,
Data Security ,
Opt-Outs ,
Personal Information ,
Popular ,
Privacy Laws
The Digital Advertising Alliance has published guidance on the use of a tool for opt out requests under CCPA under its (voluntary) self-regulatory principles....more
Data minimization is coming to the United States.
The Federal Trade Commission cited failure to delete information which is no longer needed as a failure to implement reasonable protection....more
The European Data Protection Supervisor (EDPS) has issued guidance on the concepts of data controller and processor for European Union organizations. Though it covers EU institutions, the guidance contains many concepts that...more
11/14/2019
/ California Consumer Privacy Act (CCPA) ,
Corporate Counsel ,
Cybersecurity ,
Data Collection ,
Data Controller ,
Data Privacy ,
Data Processors ,
Data Protection ,
Data Security ,
EU ,
General Data Protection Regulation (GDPR) ,
Personal Data ,
Popular
“Regulators ordered China’s app developers and third-party service providers to halt illegal collection and use of personal data in a sweep targeting some of the country’s largest apps,” reports TechNode.com....more
A survey of 777 registered voters in California showed 88 percent would support The California Privacy Rights Enforcement Act (CPREA), a 2020 ballot measure related to expansion of protections for personal information....more
Sen. Ed Markey , D-Mass., has introduced a bill (S. 2577) imposing considerable obligations on data brokers regarding their handling of personal information....more
For a less conservative take, here are the Ten Commandments of California Consumer Privacy Act Compliance:
• Thou shalt make for yourself a person overseeing privacy compliance in thine corporation....more
On Thursday, October 10, the California Attorney General issued draft regulations for the California Consumer Privacy Act. The regulations are open for public comment until December 6, 2019. Much has been written about the...more
10/14/2019
/ California Consumer Privacy Act (CCPA) ,
Consumer Privacy Rights ,
Cybersecurity ,
Data Collection ,
Data Privacy ,
Data Protection ,
Data Security ,
Opt-Outs ,
Personal Information ,
Privacy Laws ,
Right to Delete