$10,000,000 civil penalty for disclosing personal data without consent
Data Protection Report
APRIL 30, 2024
The order also, in Section IX, set forth data destruction requirements and a data retention policy. The company has 60 days to delete all personal data collected without appropriate consent unless it obtains affirmative express consent. pushing back on indefinite retention of information.
Let's personalize your content