German Court Rules Apple’s Privacy Policy Violates German Law

On April 30, 2013, the regional court of Berlin enjoined Apple Sales International, which is based in Ireland, (“Apple”) from relying on eight of its existing standard data protection clauses in contracts with customers based in Germany. The court also prohibited Apple’s future use of such clauses.

Continue reading…

Tags: Advertisement, Anonymization, Apple Inc., Behavioral Advertising, Cross-Border Data Flow, Data Protection Act, Enforcement, European Union, Geolocation, Germany, International, Marketing, Opt-In Consent, Privacy Policy, Service Provider

Article 29 Working Party Clarifies Purpose Limitation Principle; Opines on Big and Open Data

On April 2, 2013, the Article 29 Working Party (the “Working Party”) adopted an Opinion (the “Opinion”) that elaborates on the purpose limitation principle set out in Article 6(1)(b) of the current EU Data Protection Directive 95/46/EC (the “Data Protection Directive”). The Opinion analyzes the scope of this principle under the Data Protection Directive, clarifies its limits and makes recommendations to strengthen it in the proposed General Data Protection Regulation (the “Proposed Regulation”). It also focuses on how to apply this principle in the context of big data and open data.

Continue reading…

Tags: Advertisement, Article 29 Working Party, Behavioral Advertising, CCTV, Data Transfer, EU Data Protection Directive, EU Regulation, European Union, Geolocation, Health Privacy, International, Online Privacy, Opt-In Consent, Smart Metering

Sotto Discusses Top Privacy Trends for 2013

In an interview with Tom Field of BankInfoSecurity, Lisa J. Sotto, partner and head of the Global Privacy and Data Security practice at Hunton & Williams LLP, discussed the top privacy trends and threats for 2013. Lisa predicts that security vulnerabilities will remain the biggest threat to privacy, particularly with the move toward mobile computing. She also talked about key issues to watch in 2013, such as online behavioral advertising, big data and evolving privacy legislation and regulation, especially in the EU and other countries around the globe.

Listen to Lisa’s interview.

Tags: Behavioral Advertising, COPPA, EU Data Protection Directive, European Union, HIPAA, Information Security, Legislation, Lisa Sotto, Mobile Device, Multimedia Resources, Security Breach

A User’s Guide to Online Behavioral Advertising

Internet users have expressed increasing concern about efforts to track their online activities. As the online tracking methods used to target advertisements have expanded in both scope and complexity, regulators have taken notice and have begun to act in the online behavioral tracking and advertising space. In an article published in the November/December 2012 issue of IP Litigator, Lisa J. Sotto, partner and head of the Global Privacy and Data Security practice at Hunton & Williams LLP, and Melinda L. McLellan, a senior associate on the firm’s Privacy and Data Security team, discuss how legislators, regulators and industry stakeholders have been shaping the legal landscape concerning online behavioral advertising.

Download a PDF copy of the article.

Tags: Advertisement, Behavioral Advertising, COPPA, Do Not Track, Enforcement, European Union, Federal Trade Commission, International, Internet, Lisa Sotto, Melinda McLellan, Online Privacy

FTC Requests Information About Data Brokerage Companies’ Collection and Use of Personal Data

On December 18, 2012, the Federal Trade Commission issued Orders to File Special Report (the “Orders”) to nine data brokerage companies, seeking information about how these companies collect and use personal data about consumers. In the Orders, the FTC requests detailed information about the data brokers’ privacy practices, including:

  • the data brokerage companies’ online and offline products and services that use personal data;
  • the sources and types of personal data the data brokerage companies collect;
  • whether, and how, the companies acquire consumer consent before obtaining, collecting, generating, deriving, disseminating or storing the personal data;
  • whether, and how, the personal data is aggregated, anonymized or de-identified;
  • how the companies monitor, audit or evaluate the accuracy of the personal data they obtain;
  • if, and how, consumers are able to access, correct, delete or opt out of the collection, use or sharing of the personal data the data brokerage companies maintain about the consumers;
  • how the data brokerage companies provide notice to consumers about their data privacy practices;
  • the advertisements or promotional materials the companies use to describe their products and services; and
  • information about any complaints or disputes, or governmental or regulatory inquiries or actions, related to the companies’ data privacy practices.

Continue reading…

Tags: Advertisement, Anonymization, Behavioral Advertising, Congress, Consent, Consumer Protection, FCRA, Federal Trade Commission, Financial Privacy, Information Security, Marketing, Online Privacy, U.S. Federal Law

UK ICO Releases Cookies Enforcement Report

On December 18, 2012, the Information Commissioner’s Office (“ICO”) released an enforcement report (the “Report”) on the extent of compliance with recent changes to UK law governing the use of cookies (The Privacy and Electronic Communications (EC Directive) (Amendment) Regulations 2011). The ICO previously issued an interim report on organizations’ attempts to achieve compliance, in which it concluded that organizations “must try harder” with their cookie compliance efforts.

Continue reading…

Tags: Behavioral Advertising, Consumer Protection, Cookies, European Union, Information Commissioners Office, International, Online Privacy, Opt-In Consent, Text Message, United Kingdom

FTC Settles Charges of “History Sniffing”

On December 5, 2012, the Federal Trade Commission announced that the online advertising company Epic Marketplace, Inc. (“Epic”) agreed to settle charges that it engaged in “history sniffing” to secretly and illegally collect information about consumers’ interest in sensitive medical and financial issues. History sniffing is the practice of determining whether a consumer has previously visited a webpage by checking how a browser displays a hyperlink. The consent order requires Epic to destroy all data collected from history sniffing and bars Epic from engaging in history sniffing in the future.

Continue reading…

Tags: Advertisement, Behavioral Advertising, Consent Order, Consumer Protection, Cookies, Enforcement, Federal Trade Commission, Marketing, Online Privacy, Privacy Policy

New UK Online Behavioral Advertising Code Released

On November 21, 2012, the UK Committee of Advertising Practice (“CAP”) released new rules on online behavioral advertising (“OBA”). CAP is the UK body which writes and maintains the UK advertising codes, which are administered and enforced by the UK Advertising Standards Authority (“ASA”).

Continue reading…

Tags: Behavioral Advertising, Consumer Protection, Cookies, E-Privacy Directive, EU Member States, European Union, Information Commissioners Office, International, Online Privacy, Opt-In Consent, United Kingdom

ICC UK Releases Updated Cookie Guidance

On November 27, 2012, the International Chamber of Commerce of the United Kingdom (“ICC UK”) released the second edition of its cookie guidance (the “Guidance”). The ICC UK released the first edition of the Guidance in April of this year, and has produced this latest version to take into account updated guidance released by the UK Information Commissioner’s Office (“ICO”), the Article 29 Working Party Opinion 04/2012 on cookie consent exemption and new UK advertising rules on online behavioral advertising.

Continue reading…

Tags: Advertisement, Article 29 Working Party, Behavioral Advertising, Consent, Consumer Protection, Cookies, European Union, Information Commissioners Office, International, Online Privacy, Opt-In Consent, Privacy Policy, United Kingdom

German Advertisers Launch Self-Regulation Initiative for Online Behavioral Advertising

On November 19, 2012, 40 German advertising associations launched the “German Data Protection Council for Online Advertising,” a new initiative to coordinate and enforce self-regulation in the German online behavioral advertising (“OBA”) sector. The initiative is linked to the European Interactive Digital Advertising Alliance (“EDAA”), which manages the self-regulation efforts of the European online advertising industry.

Continue reading…

Tags: Advertisement, Behavioral Advertising, Cookies, European Union, Germany, International, Marketing, Online Privacy