Hunton Privacy

SEPTEMBER 1, 2021

On September 1, 2021, the South Korean Personal Information Protection Commission (“PIPC”) issued fines against Netflix and Facebook for violations of the Korean Personal Information Protection Act (“PIPA”). The PIPC issued a fine to Facebook of approximately $5.6 The PIPC issued a fine to Facebook of approximately $5.6

Personal data 106

Personal data Privacy Security IT 106

Hunton Privacy

MAY 17, 2023

On May 4, 2023, the Florida Senate and House of Representatives voted in favor of sending the Florida Digital Bill of Rights (“FDBR”) and other amendments related to government moderation of social media and protection of children in online spaces ( S.B. 262 ) to Governor Ron DeSantis for signature.

Privacy 83

Privacy Personal data Sales Government 83

Data Protection Report

JANUARY 4, 2024

1. As of December 18, 2023, unless the U.S. The exception applied to the workers’ data because the exception applies to all health care workers’ biometric data. We have set out some updates in the form of questions, with links in the answers where you can find more information. (For Answers are below.

Privacy 109

Privacy Cybersecurity Artificial Intelligence e-Discovery 109

Data Protection Report

MARCH 28, 2023

In a recent decision (the Decision ), [1] the Personal Data Protection Commission ( PDPC ) considered for the first time a company’s reliance on the Legitimate Interests Exception (as defined below) under the Personal Data Protection Act 2012 ( PDPA ) when the consent procured is invalid.

Personal data 98

Personal data Risk Access IT 98

Hunton Privacy

JUNE 8, 2023

On June 1, 2023, the SC became an effective mechanism for transferring personal data outside of China. It is not clear from the Guideline whether a data handler subject to the Personal Information Protection Law (“PIPL”) by virtue of extraterritorial jurisdiction may execute the SC for cross-border transfer of personal information.

Personal data 98

Personal data IT Access Cybersecurity 98

Hunton Privacy

JULY 13, 2022

On July 11, 2022, the Federal Trade Commission’s Bureau of Consumer Protection issued a business alert on businesses’ handling of sensitive data, with a particular focus on location and health data. According to the alert, the combination of location and health data “creates a new frontier of potential harms to consumers.”.

Marketing 124

Marketing Privacy Data collection Analytics 124

Hunton Privacy

NOVEMBER 14, 2022

On November 1, 2022, the Federal Trade Commission hosted their annual PrivacyCon 2022, which was available to the public via webcast. The FTC held seven different panels highlighting the latest research and trends in consumer privacy and data security. The recordings of PrivacyCon 2022 are available on the FTC website.

Privacy 103

Privacy Data collection Data Privacy Risk 103

Data Protection Report

MARCH 25, 2024

On 1 March 2024, Singapore’s Personal Data Protection Commission ( PDPC ) issued the Advisory Guidelines on the Use of Personal Data in AI Recommendation and Decision Systems ( AI Advisory Guidelines ). It does not discuss the use of personal data in the context of generative AI ( GenAI ) solutions.

Personal data 44

Personal data B2C B2B Data collection 44

Hunton Privacy

APRIL 18, 2023

SB 5’s protections would apply to residents of Indiana who act for a personal, family or household purpose, with express exemption for individuals acting in a commercial or employment context.

Privacy 132

Privacy Personal data Sales Insurance 132

eSecurity Planet

APRIL 12, 2024

Data loss prevention (DLP) best practices are principles that help prevent intentional or unintentional data erasure. By following these guidelines, organizations can reduce the detrimental impact of data loss and quickly resume operations after an incident. Proofpoint’s 2024 data loss landscape report reveals 84.7%

Encryption 118

Encryption Risk Data breaches Access 118

Hunton Privacy

JUNE 27, 2023

On June 2 and June 5, 2023, the Connecticut and Nevada state legislatures, respectively, voted in favor of sending legislation to their governors for signature that would impose restrictions, among others, on the processing of consumer health data, including geofencing provisions. Nevada S.B. Connecticut’s S.B. In particular, S.B.

Data Privacy 69

Data Privacy Personal data Privacy Insurance 69

The Last Watchdog

OCTOBER 13, 2021

Shoppers love the convenience of personalized experiences that their data powers, but then horror stories such as the Cambridge Analytica scandal make people skeptical about how much information companies should be collecting and sharing. First it is important to understand the different degrees of data privacy.

Privacy 113

Privacy Analytics e-Discovery Data collection 113

Hunton Privacy

APRIL 28, 2022

On April 19, 2022, the California state legislature and an industry self-regulatory group each separately took steps to enhance online privacy protections for children who are not covered by the Children’s Online Privacy Protection Act (“COPPA”), which applies only to personal information collected online from children under the age of 13.

Privacy 102

Privacy Risk Access Security 102

Hunton Privacy

MARCH 1, 2024

On March 1, 2024, the UK Information Commissioner’s Office (“ICO”) announced that it had issued an enforcement notice and a warning to the UK Home Office for failing to sufficiently assess the privacy risks posed by the electronic monitoring of people arriving in the UK via unauthorized means.

Privacy 61

Privacy Data collection Risk Access 61

Hunton Privacy

APRIL 20, 2023

On April 17, 2023, the Washington State House concurred to the Washington State Senate’s amendments to Washington State House Bill 1155 , the My Health My Data Act (the “Act”), clearing the Act’s way to Governor Jay Inslee for a final signature. The Act’s proposed effective date is March 31, 2024.

Privacy 80

Privacy Access 80

Schneier on Security

APRIL 24, 2024

I argue that privacy consent should confer less legitimacy and power and that it be backstopped by a set of duties on organizations that process personal data based on consent. As to privacy, consent authorizes and legitimizes a wide range of data collection and processing. Both approaches fail. Express consent cannot scale.

Privacy 91

Privacy Personal data GDPR Data collection 91

Data Protection Report

FEBRUARY 23, 2023

AVs currently under development make sense of their surroundings and control vehicle operation through data gathered about the outside world. Like other connected vehicles, AVs can also collect and use specific personal information about a driver (e.g., Additionally, since AVs can collect data from multiple sources (e.g.,

Privacy 85

Privacy Manufacturing Artificial Intelligence Data collection 85

IT Governance

APRIL 4, 2024

To minimise data skewing, we’ve accounted for this by providing two Data Breach Dashboards this month: one including and one excluding the above events. This blog provides further analysis of the data we’ve collected. Top 10 biggest breaches Note 1: Where ‘around’, ‘about’, etc. Data breached: 124,605,664 records.

Data breaches 104

Data breaches Passwords Security Cloud 104

Hunton Privacy

OCTOBER 25, 2022

On September 23, 2022, New York State Senator Andrew Gounardes introduced S9563 , also known as the “New York Child Data Privacy and Protection Act.” Notably, the bill would not exclude pseudonymized data from its requirements.

Data Privacy 118

Data Privacy Privacy Personal data Sales 118

Data Matters

SEPTEMBER 6, 2022

The exemptions will now expire at the end of 2022 and require businesses to extend CCPA rights to all California residents whose personal information they collect, without regard to their employment status. Data protection impact assessments would also be required, including for products in existence when the law would come into effect.

Privacy 197

Privacy B2B Sales Compliance 197

Information Governance Perspectives

MAY 1, 2021

This collection of in-depth profiles featuring Smart City CIOs, Data Protection Officers, Blockchain CEO’s, Informatics Doctors and other diverse, skilled professionals gives readers first-hand insight into what tomorrow’s jobs look like today.

Blockchain 111

Blockchain 111

DLA Piper Privacy Matters

APRIL 11, 2022

From 1 October 2022, companies that breach the PDPA may face fines of up to: SGD 1 million; or. Given these higher financial penalties, organisations collecting, using or disclosing personal data in Singapore are recommended to carefully review their existing data protection programmes and processes to ensure compliance with the PDPA.

Personal data 97

Personal data Compliance Cybersecurity Government 97

Hunton Privacy

JULY 13, 2022

On July 8, 2022, President Biden issued an Executive Order titled, “Protecting Access to Reproductive Health Care Services ,” in response to the Supreme Court’s decision in Dobbs v. Jackson Women’s Health Organization that overturned Roe v.

Privacy 112

Privacy Sales Education Compliance 112

Hunton Privacy

MAY 10, 2022

On May 10, 2022, Connecticut Governor Ned Lamont signed An Act Concerning Personal Data Privacy and Online Monitoring , after the law was previously passed by the Connecticut General Assembly in April. Connecticut is now the fifth state to enact a consumer privacy law.

Privacy 118

Privacy Personal data Sales B2B 118

Data Matters

JUNE 11, 2021

Most notably, SB260’s addition of “data broker” to the existing statutory framework, in addition to the updated definition of “sale”, provides consumers with a broader opt-out right and likely brings more entities under the scope of the law. SB260 imposes requirements on “data brokers” in addition to continuing requirements for operators.

Privacy 141

Privacy IT Sales Compliance 141

Hunton Privacy

MARCH 8, 2022

On March 1, 2022, President Biden, in his first State of the Union address, called on Congress to strengthen privacy protections for children, including by banning online platforms from excessive data collection and targeted advertising for children and young people.

Privacy 111

Privacy Marketing Data collection 111

Hunton Privacy

NOVEMBER 22, 2022

reports that, on November 18, 2022, the Government of India (“Government”) released the long-awaited fourth draft of India’s proposed privacy law, now renamed the Digital Personal Data Protection Bill. There is no separate category of sensitive personal data. . Rights of Data Principals. Kochhar & Co.

Personal data 102

Personal data Data breaches Government Compliance 102

Hunton Privacy

AUGUST 27, 2021

Under COPPA, developers of child-directed apps are required to provide notice to parents of their data collection practices and obtain verifiable parental consent to collect personal information from children under 13. 1:21-cv-824 (Aug. The case is New Mexico v. Rovio Entertainment Corp. Read the AG’s press release.

Data collection 108

Data collection Privacy Personal data IT 108

Hunton Privacy

FEBRUARY 2, 2022

On January 28, 2022, in celebration of Data Privacy Day, the Colorado Attorney General’s Office issued prepared remarks from Colorado Attorney General Phil Weiser and published guidance on data security best practices. Lastly, it will examine the degree to which the company vets and monitors its vendors’ data security practices.

Privacy 102

Privacy Security Data breaches Ransomware 102

Hunton Privacy

MAY 30, 2023

On May 22, 2023, the Federal Trade Commission announced a proposed order against education technology provider Edmodo, LLC (“Edmodo”) for violations of the Children’s Online Privacy Protection Rule (“COPPA Rule”) and Section 5 of the FTC Act.

Education 76

Education Privacy Compliance IT 76

ARMA International

APRIL 18, 2022

It is essential that your organization’s records retention schedule is compliant with the data protection requirements in the jurisdictions where your organization operates. Introduction to Data Protection Laws. Personal data protection requirements may be issued by federal, state (provincial), or local governments.

Personal data 100

Personal data GDPR Privacy Records Management 100

Hunton Privacy

APRIL 25, 2022

Data Protection Assessments (“DPA”) – The Department wants to clarify the form, content and circumstances of data protection assessments required by the CPA, and questions if it should follow any existing model, such as the EU General Data Protection Regulation, and acknowledge interoperability of DPAs conducted for another regime.

Privacy 110

Privacy Personal data Sales Compliance 110

Data Protection Report

JANUARY 9, 2023

With the year 2022 firmly in the rear view, and as we look to start the new year in 2023, Norton Rose Fulbright’s Regulatory Compliance and Investigations team looks back and rounds up the five key cyber and data protection developments that took place in Southeast Asia in 2022. . in damages to its customer over data leak.

Cybersecurity 112

Cybersecurity Personal data Data breaches Ransomware 112

Hunton Privacy

JANUARY 20, 2022

On January 12, 2022, the French Data Protection Authority (the “CNIL”) published guidelines on the re-use of personal data by data processors for their own purposes (such as product improvement or the development of new products and services) under the EU General Data Protection Regulation (“GDPR”) (the “Guidelines”).

Personal data 135

Personal data GDPR Encryption IT 135

Data Matters

FEBRUARY 18, 2021

GCP requires, inter alia , that sponsors of clinical trials carefully collect and report data in an ethical, accurate and complete manner. When collecting and reporting such data, the sponsor should take into account ethical considerations and all applicable laws and regulations, including data protection legislation.

GDPR 121

GDPR Personal data Access Data collection 121

IT Governance

APRIL 18, 2023

Data minimisation is a key part of information security and the GDPR (General Data Protection Regulation) in particular. Its principles are at the heart of effective data protection practices, and are intended to prevent privacy breaches and minimise the damage when security incidents occur.

GDPR 132

GDPR Personal data Data breaches Marketing 132

Security Affairs

AUGUST 28, 2021

vpnMentor’s researchers reported that the Chinese mobile gaming company EskyFun suffered a data breach, over 1 million gamers impacted. . vpnMentor’s researchers discovered that the Chinese mobile gaming company EskyFun suffered a data breach, information of over 1 million gamers were exposed on an unsecured server. .

Data breaches 121

Data breaches Data collection Analytics Security 121