As security risks continue to be at the forefront of legislators’ agendas across the country, New York has joined the growing roster of states pressing businesses to develop more robust breach procedures. Originally proposed...more
10/16/2019
/ Biometric Information ,
Cybersecurity ,
Data Breach ,
Data Protection ,
Data Security ,
New Legislation ,
Personal Data ,
Personal Information ,
Security and Privacy Controls ,
SHIELD Act ,
State Data Breach Notification Statutes
Inside the Privacy Shield Annual Review -
Dozens of senior US and EU government officials were joined by officials from data protection authorities in Austria, Bulgaria, France, Germany and Hungary to discuss whether the...more
10/9/2019
/ Audio Recording ,
California Consumer Privacy Act (CCPA) ,
Credit Cards ,
Data Breach ,
Data Collection ,
Data Protection Authority ,
Email ,
Enforcement Actions ,
Equifax ,
EU ,
EU-US Privacy Shield ,
Federal Trade Commission (FTC) ,
Hackers ,
Identity Theft ,
Personal Information ,
Popular ,
Schrems I & Schrems II ,
Settlement ,
Software ,
Spam ,
Technology Sector ,
UK ,
UK Employment Appeal Tribunal ,
Unfair Dismissal
While the California Consumer Privacy Act has impacted businesses in all sectors, one industry that has been steadily barreling toward compliance is the automotive industry. Simply put: The new “oil” in the automotive sector...more
10/7/2019
/ Automotive Industry ,
California Consumer Privacy Act (CCPA) ,
Car Dealerships ,
Connected Cars ,
Consumer Privacy Rights ,
Data Collection ,
Disclosure Requirements ,
Manufacturers ,
Motor Vehicles ,
Notice Requirements ,
Opt-Outs ,
Personal Information ,
Right to Delete ,
Third-Party Service Provider
The US Federal Trade Commission is considering changes to the rules governing negative option offers, including automatic renewals. A “negative option” is an offer for goods or services in which a consumer’s inaction...more
The Gap, Inc. recently settled a class action lawsuit alleging that the retailer employed a misleading pricing scheme in The Gap and Banana Republic outlets and factory stores. The plaintiffs claimed that the company, which...more
Delta Sues Software Provider Over Data Breach -
Delta Airlines sued its customer service chat provider, [24]7.ai Inc., in New York federal court accusing it of lax digital security practices that allowed a hacker to steal...more
9/12/2019
/ California Consumer Privacy Act (CCPA) ,
Canada ,
Consent Order ,
Data Breach ,
Delta Airlines ,
Email ,
Federal Trade Commission (FTC) ,
General Data Protection Regulation (GDPR) ,
Popular ,
Settlement ,
Software ,
Statutory Violations ,
Swiss Privacy Shield ,
Third-Party Service Provider ,
UK Employment Appeal Tribunal ,
Video Recordings ,
WISP
Equifax to Pay up to $700 Million as Part of Settlement for 2017 Data Breach -
Equifax has agreed to pay at least $575 million, and potentially up to $700 million, as part of a global settlement with the FTC, the CFPB, and...more
8/13/2019
/ Amended Regulation ,
Brazil ,
California Consumer Privacy Act (CCPA) ,
Canada ,
Capital One ,
Comment Period ,
Consumer Financial Protection Bureau (CFPB) ,
Consumer Privacy Rights ,
COPPA ,
Data Breach ,
Equifax ,
EU ,
Federal Trade Commission (FTC) ,
Personally Identifiable Information ,
Popular ,
Privacy Laws ,
Proposed Amendments ,
Public Hearing ,
Security and Privacy Controls ,
Settlement ,
Websites
We’ve all seen the funny faces appearing across the internet as friends and family use the FaceApp to see what they may look like in 30 to 50 years. The resulting images are wrinkled and gray, but the trade made—instead of...more
8/1/2019
/ Artificial Intelligence ,
Biometric Information Privacy Act ,
Consent ,
Data Collection ,
Facial Recognition Technology ,
Geolocation ,
IP License ,
Mobile Apps ,
National Security ,
Personal Data ,
Personal Information ,
Privacy Concerns ,
Privacy Policy ,
Terms of Use
Operators of a negative option scam recently settled FTC charges for offering “risk-free” trials and then charging full price for the trial product and enrolling consumers in a continuous subscription without obtaining...more
The FTC recently brought action against two companies for including non-disparagement provisions that bar or impose financial penalties on consumers for writing negative reviews in their form contracts, without a meaningful...more
7/23/2019
/ Apartments ,
Consumer Review Fairness Act (CRFA) ,
Contract Terms ,
Enforcement Actions ,
Federal Trade Commission (FTC) ,
Non-Disparagement Provisions ,
Online Reviews ,
Penalties ,
Rental Property ,
Standard Form Contracts ,
Vacation Rentals ,
Void and Unenforceable
Data protection authorities in the UK and France have released updated guidance for website operators that use cookies on their websites. This new guidance may mandate changes to existing cookie banners and provides further...more
7/22/2019
/ CNIL ,
Cookies ,
Data Protection Authority ,
e-Privacy Directive ,
EU ,
France ,
General Data Protection Regulation (GDPR) ,
Guidance Update ,
Implied Consent ,
Prior Express Consent ,
Privacy Laws ,
UK ,
UK ICO ,
Website Owner Liability ,
Websites
While the US data privacy landscape is rapidly changing, there appears to be some helpful news for the automotive industry. Notably, the auto industry may receive the benefit of being exempt from the impact of two of the more...more
Federal US News -
FTC Takes Action Against Companies Falsely Claiming Compliance With International Privacy Agreements -
The FTC reached a settlement with a background screening company over allegations it falsely claimed...more
7/16/2019
/ Accreditation ,
Advertising ,
Annual Reports ,
Asia Pacific ,
Automotive Industry ,
California Consumer Privacy Act (CCPA) ,
Code of Conduct ,
Consumer Information ,
Consumer Privacy Rights ,
Cookies ,
Cross-Border Transactions ,
Cybersecurity ,
Data Breach ,
Data Security ,
Enforcement Actions ,
EU ,
EU-US Privacy Shield ,
European Data Protection Board (EDPB) ,
False Statements ,
Federal Trade Commission (FTC) ,
General Data Protection Regulation (GDPR) ,
International Data Transfers ,
Internet Service Providers (ISPs) ,
Legal Representatives ,
New Rules ,
NIST ,
Popular ,
Prior Express Consent ,
Privacy Laws ,
Private Right of Action ,
Proposed Legislation ,
Right of Access ,
Right to Be Forgotten ,
Right to Control ,
Settlement ,
State Legislatures ,
Targeted Digital Advertising ,
Third-Party Service Provider ,
UK ,
UK ICO
The Federal Trade Commission (FTC) recently released updated data security guidance in connection with a proposed settlement with LightYear Dealer Technologies, LLC (dba DealerBuilt), a service provider for the auto dealer...more
6/26/2019
/ Automotive Industry ,
Car Dealerships ,
Data Breach ,
Data Security ,
Data Storage ,
Electronically Stored Information ,
Encryption ,
Enforcement Actions ,
Federal Trade Commission (FTC) ,
Gramm-Leach-Blilely Act ,
Personally Identifiable Information ,
Settlement ,
Third-Party Service Provider ,
Unfair or Deceptive Trade Practices