Remove tag disclosure
article thumbnail

$10,000,000 civil penalty for disclosing personal data without consent

Data Protection Report

The order also requires that the company destroy personal data for which it had not received consent and to create a document retention and destruction policy. Its privacy policy stated that the company would treat the data confidentially, and the company would not share data without user consent.

article thumbnail

US: The CCPA ‘Moving Target’ One Month Before Privacy Enforcement Begins

DLA Piper Privacy Matters

With the California Consumer Privacy Act (CCPA) enforcement deadline only a month away, Chief Privacy Officers still must grapple with significant uncertainties about what exactly the law requires. Third, it is now clear that Congress will not rush in to preempt the CCPA with a federal privacy law this year. By Jim Halpert.

Privacy 84
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Guest Post -- New Global Data  and Privacy Regulations in 2018 and the GDPR

AIIM

Data privacy breaches have been in the news again and again this year, eliciting increased concern from regulators and legislative bodies. We can be sure that issues like the Equifax breach and Yahoo’s recent disclosure of the scope of the 2013 breach will remain topics of discussion and litigation for some time to come.

GDPR 86
article thumbnail

California proposes rules for automated decision-making

Data Protection Report

On November 27, 2023, the California Privacy Protection Agency (“CPPA”) released a first draft of rules for automated decision-making technologies under California’s privacy law. The proposed rules revolve around providing notice of the technology’s use, opting out, and consumer access to business information.

Access 64
article thumbnail

SEC Proposes New Cybersecurity Rules for Investment Managers

Hunton Privacy

On February 9, 2022, the SEC proposed new cybersecurity compliance and disclosure rules for the investment management industry in a three to one vote. Disclosure of Cybersecurity Risks and Incidents to Clients and Investors. The proposed rules would also enhance required disclosure around cybersecurity risks and incidents.

article thumbnail

Historic Charges: First Enforcement Action Filed by New York Department of Financial Services Under Cybersecurity Regulation

Data Matters

2 Because First American’s violations included the exposure of millions of documents containing nonpublic information (NPI), the total penalty potentially could be substantial. Public access to these documents was caused by an application software vulnerability that was initially introduced in May 2014. e) and 500.01(g),

article thumbnail

2019 eDiscovery Case Law Year in Review, Part 2

eDiscovery Daily

Today, let’s take a look back at cases related to cooperation, form of production, privilege and confidentiality disputes, social media related disputes and a key case regarding biometric security. BIOMETRIC SECURITY. Oh, and a photo on social media can be discoverable simply because you’re “tagged” in it. COOPERATION.