The European Data Protection Board (EDPB) adopted a letter concerning the European Commission's draft guidance on apps supporting the fight against the COVID-19 pandemic.
Key Takeaways-
•The EDPB welcomes the Commission’s...more
In a new guidance for employers, Hungary's Nemzeti Adatvédelmi és Információszabadság Hatóság Data Protection Authority provides a helpful to-do list to help companies comply with the EU's General Data Protection Regulation...more
The Executive Committee of the Global Privacy Assembly (GPA) weighs in on data privacy and the coronavirus pandemic.
•The universal data protection principles in all our laws will enable the use of data in the public...more
Ireland’s Data Protection Commission weighs in on the issue of COVID-19 and data access requests:
“The Data Protection Commission acknowledges the significant impact of the Covid-19 health crisis which may affect...more
Coronavirus and Data Protection: New York Department of Financial Services had extended the deadline for compliance with its cybersecurity requirements.
•The Superintendent of Financial Services of the State of New York...more
The European Data Protection Supervisor weighs the impact of the COVID-19 on future data protection strategy and fundamental rights.
“Covid-19 is a game changer. Thinking about the EDPS’ strategy for the next five years, we...more
Coronavirus and Data Protection guidance from the Catalan Data Protection Authority:
•Under Articles 6.1.(e) and 9.2.(i) GDPR, health authorities may share health data when this is needed for reasons of public interest in...more
The Czech Republic’s Data Protection Authority, Urad pro Ochranu Osobnich Udaju, provides its guidance on GDPR and COVID-19:
•Public health authorities are authorized to process personal data to the extent and for the...more
After many data protection authorities (in the European Union and beyond) provided guidance and FAQ's on the relationship between COVID-19 (Coronavirus) and data protection laws (e.g. GDPR), the European Data Protection Board...more
Coronavirus and GDPR – the Belgian authority weighs in:
•Public health is paramount and prevention and the right to privacy are not incompatible.
•Follow the instructions of the competent authorities so that all measures...more
Coronavirus and GDPR , the Spanish AEPD weighs in:
•Data protection should not be used to hinder or limit the effectiveness of the measures taken by authorities in the fight against the pandemic.
•Consent may not be...more
The California Attorney General has published a third draft of the California Consumer Privacy Act regulations-
Key takeaways:
Removes example indicating IP addresses may not be personal information in certain...more
France’s Data Processing Authority CNIL weighs in on Coronavirus and GDPR.
Employers should NOT:
•Collect in a systematic and generalized manner, or through individual inquiries and requests, information relating to the...more
Tell me, don’t sell me, the GDPR version.
The Dutch Data Protection Authority (AP) has imposed a fine of 525,000 euros on tennis association KNLTB for selling personal data without proper consent....more
The European Data Protection Board has published draft guidelines for public comment on the data protection aspects of connected vehicles.
Key takeaways:
The Relevant Players-
Non exhaustive list of stakeholders: vehicle...more
2/12/2020
/ Connected Cars ,
Cybersecurity ,
Data Controller ,
Data Protection ,
Draft Guidance ,
Driverless Cars ,
EU ,
European Data Protection Board (EDPB) ,
General Data Protection Regulation (GDPR) ,
Personal Data ,
Popular
The California Office of the Attorney General has published proposed amendments to the California Consumer Privacy Act (CCPA) draft regulations. The amendments are open for public comment until 5 pm PT on Feb. 24, 2020....more
2/11/2020
/ Attorney General ,
California Consumer Privacy Act (CCPA) ,
Consumer Privacy Rights ,
Cybersecurity ,
Data Collection ,
Data Privacy ,
Data Protection ,
Data Security ,
Opt-Outs ,
Personal Information ,
Privacy Laws ,
Right to Delete
Speak to me in algorithms.
The European Data Protection Board (EDPB) has issued a letter on the appropriateness of the GDPR as a legal framework to protect citizens from unfair algorithms....more
1.Yes, CCPA can apply to you even if you have no physical presence in California.
2.Yes, if you have done some GDPR compliance you are in better shape for CCPA.
3.No, your GDPR compliance work is NOT sufficient for CCPA...more
The California Consumer Privacy Act has significant implications for Chief Marketing Officers. Here are some important principles CMOs should keep in mind when planning compliance efforts, included in my recent presentation...more
Here are some key points for employers to keep in mind related to the California Consumer Privacy Act (CCPA), which were included in my presentation to a recent meeting of Fox Rothschild’s Labor & Employment Practice...more
“In California we are rebalancing the power dynamic by putting power back in the hands of consumers. I encourage all Californians to take a moment to understand their new rights and exercise these rights to take control of...more
On the sixth day of CCPA the California Senate Health Committee gave to me … a HIPAA carve-out.
AB 713, reported favorably by the California Senate Health Committee, would expand the exemption related to HIPAA and medical...more
The Digital Advertising Alliance (DAA) announced that its web- and app-based tools are expected to go live on Jan. 1, 2020, as the California Consumer Privacy Act (CCPA) takes effect.
The web-based tool will enable...more
The United Kingdom's Information Commissioner's Office has issued, for public consultation, draft guidance on the right of access under the General Data Protection Regulation (GDPR).
Key takeaways:
To Prepare for a Data...more
“Perhaps the more urgent need is to share ideas, instead of rushing to share people’s data,” writes European Data Protection Supervisor Wojciech Wiewiórowski.
“More than ever, there is a need to illuminate new paths for...more