Hunton Privacy

JANUARY 22, 2020

On January 21, 2020, the UK Information Commissioner’s Office (“ICO”) published the final version of its Age Appropriate Design Code (“the code”), which sets out the standards that online services need to meet in order to protect children’s privacy. The code will now be laid before Parliament for approval.

IT 54

IT Personal data Compliance Privacy 54

DLA Piper Privacy Matters

SEPTEMBER 6, 2021

The DPC issued two draft decisions in May 2020, which were subject to challenge and scrutiny by Concerned Supervisory Authorities in the months which followed, resulting in the GDPR dispute resolution procedure being initiated. The DPC also considered how WhatsApp discharged its obligations under Articles 12 and 13 of the GDPR to its users.

GDPR 105

GDPR Personal data e-Delivery Communications 105

Hunton Privacy

MARCH 26, 2020

On March 12, 2020, the Centre for Information Policy Leadership (“CIPL”) at Hunton Andrews Kurth LLP submitted formal comments to the Office of the Privacy Commissioner of Canada (“OPC”) in response to its proposals for ensuring appropriate regulation of artificial intelligence (“AI”).

Privacy 68

Privacy Artificial Intelligence Risk Compliance 68

DLA Piper Privacy Matters

MAY 11, 2020

On May 4, the Californians for Consumer Privacy, led by founder Alastair Mactaggart, announced its submission to qualify the California Privacy Rights Act for the November 2020 ballot. Create an operationally significant limited exception to deletion and access rights for many types of unstructured data.

Privacy 52

Privacy Unstructured data Access Data collection 52

Unwritten Record

MARCH 25, 2021

You may have heard that the National Archives is partnering with the University of Maryland Cinema and Media Studies Program to present Films of State , an online conference on government-produced moving images (if not, check out my last blog post for more background). In addition, “access” meant something completely different at the time.

Archiving 49

Archiving Government Military Agriculture 49

Data Protection Report

SEPTEMBER 17, 2019

Executive Summary : The wait is over: Only five CCPA amendments with limited scope get passed by the California legislature, leaving the CCPA largely intact to go into effect on January 1, 2020. This will be the version that will go into effect on January 1, 2020. Summary of CCPA Amendments. – § 1798.100.

B2B 40

B2B Privacy Communications Encryption 40

Data Protection Report

AUGUST 12, 2019

On August 12, the California legislature returns after its summer recess. The California Senate Appropriations Committee is holding a hearing on August 12 regarding the following seven CCPA proposed amendments. Here is a summary of each that were scheduled to be on the calendar as of August 12. .

Manufacturing 40

Manufacturing Sales Privacy Data Privacy 40

Privacy and Cybersecurity Law

NOVEMBER 8, 2018

The CCPA goes into effect January 1, 2020. Below is a history of the CCPA, a summary of its key elements as adopted, including recently adopted technical amendments, and practical takeaways for covered entities as the law moves from passage to 2020 enforcement. The CCPA’s definition of “consumer” is equally broad. 17-0039).

Privacy 58

Privacy Sales Compliance Cybersecurity 58

Privacy and Cybersecurity Law

NOVEMBER 9, 2018

The CCPA goes into effect January 1, 2020. Below is a history of the CCPA, a summary of its key elements as adopted, including recently adopted technical amendments, and practical takeaways for covered entities as the law moves from passage to 2020 enforcement. The CCPA’s definition of “consumer” is equally broad. 17-0039).

Privacy 58

Privacy Sales Education Compliance 58

HL Chronicle of Data Protection

OCTOBER 26, 2018

Others advocate for the act to apply to employee data and view the CCPA’s broad definitions as a purposeful maneuver to have the act apply to all personal data and not just data associated with business-to-customer interactions. However, given the broad definition of “sale” under the act (i.e., without sharing personal information.”.

Privacy 40

Privacy Sales Compliance Personal data 40

Hunton Privacy

JUNE 29, 2018

The Act will take effect January 1, 2020. Definition of Personal Information. This definition of personal information aligns more closely with the EU General Data Protection Regulation’s definition of personal data. The disclosure must cover the 12-month period preceding the business’s receipt of the verifiable request.

Privacy 55

Privacy Sales Personal data Communications 55

HL Chronicle of Data Protection

MAY 26, 2020

The California Privacy Rights Act (CPRA) is progressing through California’s elections process for inclusion on the November 2020 ballot. Transparency and Data Governance. Businesses may want to begin considering how their data privacy obligations in California may change if voters enact CPRA. Pre-collection Notice (modification).

Privacy 66

Privacy Compliance Sales Data Privacy 66

HL Chronicle of Data Protection

DECEMBER 7, 2018

In such situations, a financial institution must comply with a wide array of CCPA obligations, including requirements to make certain disclosures to consumers and to provide certain rights to consumers, such as the right to stop “sales” of their personal information and the right to access data that a business has collected about them.

Privacy 40

Privacy Financial Services Compliance Data breaches 40

Data Protection Report

JUNE 29, 2018

The new law is set to take effect on January 1, 2020 which means the California legislature may still consider changes to the new law in the coming months and years. It also requires a description of consumers’ rights and the categories of personal information the business has sold in the preceding 12 months.

Privacy 40

Privacy GDPR Personal data Risk 40

Data Protection Report

JUNE 29, 2018

The new law is set to take effect on January 1, 2020 which means the California legislature may still consider changes to the new law in the coming months and years. It also requires a description of consumers’ rights and the categories of personal information the business has sold in the preceding 12 months.

Privacy 40

Privacy GDPR Personal data Risk 40

Data Protection Report

JUNE 6, 2019

Businesses already preparing for CCPA should be able to incorporate the Nevada requirements, but note the Nevada law will be effective on October 1, 2019, whereas CCPA goes into effect on January 1, 2020. Unlike CCPA, the new law has no provisions relating to access or deletion or a private right of action relating to breaches.

Sales 40

Sales Privacy Insurance Manufacturing 40

Data Matters

MARCH 10, 2021

On February 10, 2021, the Council of the European Union (which includes representatives of the European Union (EU) member states, hereinafter Council) reached an agreement on the ePrivacy Regulation proposal that governs the protection of privacy and confidentiality of electronic communications services (ePrivacy Regulation).

GDPR 68

GDPR Metadata Communications Privacy 68

CILIP

MARCH 12, 2020

Research support is definitely one of the developments in the second category and an area that I have been heavily involved in over the last few years, initially by training library staff and now by supporting researchers in the physical sciences. Whilst having access to research outputs is great, what?s However, in this time I?ve

Communications 52

Communications Libraries Access Education 52

Data Matters

JUNE 29, 2018

1, 2020, unless changed in the interim. AB 375 goes beyond the ballot initiative by adding requirements for businesses that collect personal information (as defined in the bill) from consumers to delete such information on request as well as to provide access to specific pieces of personal information collected.

GDPR 79

GDPR Privacy Sales Data breaches 79

Data Matters

JUNE 29, 2018

1, 2020, unless changed in the interim. AB 375 goes beyond the ballot initiative by adding requirements for businesses that collect personal information (as defined in the bill) from consumers to delete such information on request as well as to provide access to specific pieces of personal information collected.

GDPR 60

GDPR Privacy Sales Data breaches 60

Data Matters

SEPTEMBER 29, 2021

Although these proportionality factors began as an integral part of the definition of the scope of discovery, for more than two decades these limitations resided in a separate subsection of the Rule, resulting in considerable confusion and less-than-rigorous enforcement. 21 If it is not both relevant and proportional, it is not discoverable.

Privacy 97

Privacy e-Discovery Computer and Electronics e-Delivery 97

eSecurity Planet

DECEMBER 3, 2021

Normally account take overs are due to insecure passwords or recovery options, this is definitely something different. — Dave Kennedy (@HackingDave) July 15, 2020. link] pic.twitter.com/cVIyB44o6q — Eugene Kaspersky (@e_kaspersky) June 22, 2020. — Parisa Tabriz (@laparisa) January 26, 2020. Ingenious!

Cybersecurity 139

Cybersecurity e-Discovery Passwords Information Security 139

erwin

APRIL 18, 2019

1, 2020, to enact its mandates. Data governance , thankfully, provides a framework for compliance with either or both – in addition to other regulatory mandates your organization may be subject to. Publicly available personal information (federal, state and local government records). What about access requests? .

GDPR 81

GDPR Compliance Privacy Personal data 81

Data Matters

OCTOBER 23, 2019

All businesses are required to provide an “interactive webform” accessible via a “clear and conspicuous link titled ‘Do Not Sell My Personal Information,’ or ‘Do Not Sell My Info,’” as one of the methods. free vs. paid streaming), to quantify the value of consumers’ information and disclose the value and methods used to calculate it.

Sales 60

Sales Privacy Passwords Compliance 60

Data Matters

FEBRUARY 19, 2021

which addresses UK government surveillance activities). To date, 12 countries have been deemed ‘adequate’ by the EC (including, for example, Argentina, Canada (commercial organisations), Israel, Switzerland, and most recently, Japan). What transfers are restricted under the GDPR? consent of the data subject).

GDPR 68

GDPR Personal data Privacy Access 68

IT Governance

APRIL 9, 2024

Only 2 definitely haven’t had data breached. Enforcement Google agrees to delete billions of records and reduce incognito user tracking Google has agreed to settle a 2020 class action lawsuit accusing it of invading people’s privacy by collecting user data even in incognito mode. Organisation(s) Sector Location Data breached?

Data Privacy 52

Data Privacy Privacy Security Manufacturing 52

CILIP

JUNE 22, 2020

For CILIP that means the creation of a new apprenticeship scheme that will deliver an alternative route into the career alongside a new definition of professionalism. IFATE carefully controls the Standards permitted for development and the rules to govern the process. Scotland , Wales and Northern Ireland retain their own arrangements.

Archiving 52

Archiving Libraries Records Management Education 52

IT Governance

JANUARY 30, 2024

Compromised data includes victims’ names, addresses, phone numbers and Aadhaar numbers (a 12-digit government identification number). It remains unclear how the data breach occurred, but the attackers apparently suggested it was the result of “exploiting vulnerabilities within government databases of telecommunication systems”.

Data Privacy 52

Data Privacy Retail Privacy Manufacturing 52

eSecurity Planet

JUNE 17, 2022

Forrester Research developed the formal concept of zero trust more than a decade ago: Zero Trust is an information security model that denies access to applications and data by default. The National Institute of Standards and Technology (NIST) publication SP 800-207 provides a similar and consistent definition for zero trust.

Cloud 122

Cloud Authentication Access Security 122

ForAllSecure

MAY 26, 2022

In part because I use my access to cheat at radio station phones in contests and win prizes. Instead, the US government did, saying quote Stealing is stealing whether you use a computer command or crowbar and whether you take documents data or dollars. I don't, it was definitely illegal. Like Porsches and trips to Hawaii.

IT 52

IT Security Marketing Privacy 52

Data Matters

DECEMBER 27, 2018

On December 12, a group of 16 Democratic Senators released a discussion draft of the “ Data Care Act ” (S. They also agree that consumers should have the right to access their personal data, albeit to varying degrees. In anticipation of hearings and debates, members have begun proposing bills.

Privacy 68

Privacy Data Privacy Personal data Data breaches 68