Remove tag privacy-policy
article thumbnail

$10,000,000 civil penalty for disclosing personal data without consent

Data Protection Report

On April 15, 2024, the U.S. The order also requires that the company destroy personal data for which it had not received consent and to create a document retention and destruction policy. Its privacy policy stated that the company would treat the data confidentially, and the company would not share data without user consent.