Remove B2B Remove Exercises Remove Personal data Remove Security
article thumbnail

Utah Becomes Fourth U.S. State to Enact Consumer Privacy Law

Hunton Privacy

As with the CPA and VCDPA, the UCPA’s protections apply only to Utah residents acting solely within their individual or household context, with an express exemption for individuals acting in an employment or commercial (B2B) context. The UCPA will prohibit controllers from discriminating against consumers for exercising their rights.

Privacy 113
article thumbnail

EU Regulatory Data Protection: A first appraisal of the European Commission’s proposal for a ‘Data Act’

DLA Piper Privacy Matters

In the proposal, “data” is broadly defined and contains both personal and non-personal data. This means that the Data Act would further regulate personal data in addition to the GDPR. The Data Act would apply to all types of enterprises, in principle, including small and micro businesses.

GDPR 97
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

California Privacy Law Overhaul – Proposition 24 Passes

Data Matters

The CPRA creates a new category of information called “sensitive personal information.” Businesses that use vendors to determine consumers’ precise geolocation and use that data to deliver advertisements to consumers may need to treat the transfer of consumers’ personal information for this purpose as a “sale.

Privacy 122
article thumbnail

European Commission Issues Cloud Service Level Agreement Standardization Guidelines

Hunton Privacy

In the context of the European Cloud Computing Strategy , launched by the European Commission in September 2012, the Guidelines focus on security and data protection in the cloud.

Cloud 40
article thumbnail

And then there were five: CCPA amendments pass legislature

Data Protection Report

The amendments change and clarify a business’ obligation to permit consumers to submit requests to exercise their CCPA rights. Note that CCPA § 1798.150 – the consumer private right of action for certain security breaches and the requirement for reasonable security – continues to apply. – § 1798.130.

B2B 40
article thumbnail

US: The CCPA ‘Moving Target’ One Month Before Privacy Enforcement Begins

DLA Piper Privacy Matters

And even after the final regulations are approved by OAL, Appendix E to the Final Statement of Reasons states: To the extent that the regulations require incremental compliance, the OAG may exercise prosecutorial discretion if warranted, depending on the particular facts at issue. Data breach class action risk for email account credentials.

Privacy 84
article thumbnail

Fixing Data Breaches Part 2: Data Ownership & Minimisation

Troy Hunt

In part 2 of the series, I want to talk about data ownership and minimisation and this is all about reducing the impact on individuals and organisations alike when things do go wrong. Who Owns Our Personal Data? The owner can request the organisation provide them with a copy of their data ("right of access").