Remove tag disclosure
article thumbnail

$10,000,000 civil penalty for disclosing personal data without consent

Data Protection Report

Its privacy policy stated that the company would treat the data confidentially, and the company would not share data without user consent. In December 2020, the company revised its privacy policy (increasing its size to 15 pages) and added a statement that it used Facebook Pixel, a web analytics and advertising service by Facebook, Inc.

article thumbnail

US: The CCPA ‘Moving Target’ One Month Before Privacy Enforcement Begins

DLA Piper Privacy Matters

With the California Consumer Privacy Act (CCPA) enforcement deadline only a month away, Chief Privacy Officers still must grapple with significant uncertainties about what exactly the law requires. Third, it is now clear that Congress will not rush in to preempt the CCPA with a federal privacy law this year. By Jim Halpert.

Privacy 84
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

SEC Proposes Cybersecurity Rules for Public Companies

Hunton Privacy

On March 9, 2022, the Securities and Exchange Commission (“SEC”) held an open meeting and proposed new cybersecurity disclosure rules for public companies by a 3-1 vote. In proposing the rules, the SEC hopes to improve the consistency and comparability of cybersecurity disclosures among public companies.

article thumbnail

California proposes rules for automated decision-making

Data Protection Report

On November 27, 2023, the California Privacy Protection Agency (“CPPA”) released a first draft of rules for automated decision-making technologies under California’s privacy law. The CPPA will discuss the proposal at its December 8 th board meeting, and the formal rulemaking process is expected to begin in 2024.

Access 64
article thumbnail

California Consumer Privacy Act: GDPR-like definition of personal information

Data Protection Report

The California Consumer Privacy Act (“CCPA” or the “Act”) sets a new precedent with its sweeping definition of Personal Information (“PI”). Look out for our next blog article which will address the CCPA’s disclosure requirements. This blog focuses on the CCPA’s broad definition of Personal Information.

GDPR 40
article thumbnail

2019 eDiscovery Case Law Year in Review, Part 2

eDiscovery Daily

Today, let’s take a look back at cases related to cooperation, form of production, privilege and confidentiality disputes, social media related disputes and a key case regarding biometric security. BIOMETRIC SECURITY. Oh, and a photo on social media can be discoverable simply because you’re “tagged” in it. COOPERATION.

article thumbnail

Historic Charges: First Enforcement Action Filed by New York Department of Financial Services Under Cybersecurity Regulation

Data Matters

4 The Regulation sets minimum standards for compliance related to the assessment of cybersecurity risks, the prevention and detection of security events, and post-breach management. The NYDFS alleges in April 2018, FAST contained 753 million documents, 65 million of which had been tagged by First American’s employees as containing NPI.