Remove tag consent
article thumbnail

$10,000,000 civil penalty for disclosing personal data without consent

Data Protection Report

The claims related to the company’s sharing personal data without consumer consent and making it very difficult for consumers to cancel their subscriptions to this telehealth service. The order also requires that the company destroy personal data for which it had not received consent and to create a document retention and destruction policy.

article thumbnail

API Security 101 for Developers: How to Easily Secure Your APIs

ForAllSecure

However, as with any software component, APIs are also prone to security vulnerabilities that can be exploited by attackers. API security is an ongoing process that demands continual attention and effort from everyone on the development team. API Basics: What Is an API and How Do APIs Work?

article thumbnail

US: The CCPA ‘Moving Target’ One Month Before Privacy Enforcement Begins

DLA Piper Privacy Matters

Second, focus your available resources on finishing compliance with CCPA statutory privacy requirements, and equally important, on ensuring that you have adequately remediated CCPA “reasonable security” class action risk. Doing any of these things avoids the obligation even to notify of the breach, and so avoids even potential claims.

Privacy 84