article thumbnail

$10,000,000 civil penalty for disclosing personal data without consent

Data Protection Report

The order also, in Section IX, set forth data destruction requirements and a data retention policy. The company has 60 days to delete all personal data collected without appropriate consent unless it obtains affirmative express consent. pushing back on indefinite retention of information.

article thumbnail

Driving Conversations Around Careers In Telematics

Information Governance Perspectives

Wireless telematics devices and “black box” technologies collect and transmit data on vehicle use, maintenance requirements, and automotive servicing. John Danenberger, CPCU, is Corporate Counsel at State Farm Insurance and specializes in addressing emerging issues around telematics. What’s it like to work in this field?

article thumbnail

California Governor Signs into Law Bills Updating the CPRA and Bills Addressing the Privacy and Security of Genetic and Medical Data, Among Others

Hunton Privacy

During the week of October 4, 2021, California Governor Gavin Newsom signed into law bills amending the California Privacy Rights Act of 2020 (“CPRA”), California’s data breach notification law and California’s data security law. The bill uses the same definition of “genetic data” as provided for in AB-825.

Privacy 98