Council of the European Union Releases Draft Compromise Text on the Proposed EU Data Protection Regulation

On May 31, 2013, the Council of the European Union’s Justice and Home Affairs released a draft compromise text in response to the European Commission’s proposed General Data Protection Regulation (the “Proposed Regulation”). This compromise text narrows the scope of the Proposed Regulation and seeks to move from a detailed, prescriptive approach toward a risk-based framework.

Continue reading…

Tags: Anonymization, Belgium, Council of the European Union, Data Controller, Data Transfers, EU Data Protection Directive, EU Member States, EU Regulation, European Commission, European Union, International, Ireland, Legislation, Lithuania, Marketing, Online Privacy, Security Breach, Social Media, United Kingdom, Viviane Reding

Estonian Data Protection Authority Issues Annual Report

On May 20, 2013, the Estonian Data Protection Inspectorate issued its Annual Report 2012 (the “Report,” summary available in English). The number of inquiries, complaints and supervision proceedings have remained the same over the last few years. The main topics of complaints include employment relations, CCTV, electronic direct marketing and social media. The Inspectorate stated that its primary goal is to stop violations of the law, not to impose sanctions. According to the Report, the Inspectorate issued orders regarding compliance in 48 cases and imposed fines in 39 cases.

Continue reading…

Tags: Advertisement, Article 29 Working Party, Data Protection Act, Estonia, European Union, International, Marketing, Online Privacy, Penalty, Social Media

FCC Clarifies Sellers’ Liability for Third Parties’ Telemarketing Violations

On May 9, 2013, the Federal Communications Commission (“FCC”) released a declaratory ruling clarifying the liability of a seller for violations of the Telemarketing Consumer Protection Act (“TCPA”) made by third-party telemarketers and others who place calls to market the seller’s products or services.

Continue reading…

Tags: Consumer Protection, Do Not Call, Enforcement, Marketing, Telephone Consumer Protection Act, U.S. Federal Law

German Court Rules Apple’s Privacy Policy Violates German Law

On April 30, 2013, the regional court of Berlin enjoined Apple Sales International, which is based in Ireland, (“Apple”) from relying on eight of its existing standard data protection clauses in contracts with customers based in Germany. The court also prohibited Apple’s future use of such clauses.

Continue reading…

Tags: Advertisement, Anonymization, Apple Inc., Behavioral Advertising, Cross-Border Data Flow, Data Protection Act, Enforcement, European Union, Geolocation, Germany, International, Marketing, Opt-In Consent, Privacy Policy, Service Provider

German Court Rejects DPA’s Appeal, Finds Irish Law Applicable to Facebook in Germany

On April 22, 2013, the higher administrative court of Schleswig issued two decisions rejecting an appeal by the data protection authority of Schleswig-Holstein (“Schleswig DPA”) that sought to challenge a lower court’s earlier rulings in Facebook’s favor.

Continue reading…

Tags: Advertisement, Data Protection Authority, EU Member States, European Union, Facebook, Germany, International, Ireland, Marketing

Chinese Ministry of Industry and Information Technology Enacts Draft Rules on Personal Information

On April 10, 2013, the Ministry of Industry and Information Technology of the People’s Republic of China (the “MIIT”) enacted two draft rules (“Provisions on the Protection of Personal Information of Telecommunications and Internet Users” and “Provisions on the Registration of Real Identity Information of Telephone Users”) to solicit public comments. The comment period is open until May 15, 2013. Both Drafts include proposals for substantial provisions on the protection of personal information and were enacted according to the Resolution of the Standing Committee of the National People’s Congress Relating to Strengthening the Protection of Information on the Internet (issued by the Standing Committee in December 2012) and some other telecommunications rules.

Continue reading…

Tags: China, Criminal Law, Enforcement, Information Security, International, Marketing, Online Privacy, Penalty, Personally Identifiable Information, Security Breach, Telecommunications

UK ICO Fines Company GBP 90,000 for Nuisance Calls

On March 20, 2012, the UK Information Commissioner’s Office announced that it has issued a monetary penalty of £90,000 against DM Design Bedrooms Ltd. (“DM Design”) for making thousands of unwanted marketing calls.

Continue reading…

Tags: Christopher Graham, Data Controller, Data Protection Act, Do Not Call, Enforcement, European Union, Information Commissioners Office, International, Marketing, Penalty, Text Message, United Kingdom

Hunton & Williams Hosts Data Protection Law and Practice Book Launch

On January 28, 2013, European Data Privacy Day, the London office of Hunton & Williams hosted the launch of senior attorney Rosemary Jay’s fourth edition book, Data Protection Law & Practice, by publisher Sweet & Maxwell.

Continue reading…

Tags: Christopher Graham, Consumer Protection, Data Protection Act, EU Data Protection Directive, EU Regulation, European Union, Events, Information Commissioners Office, International, Legislation, Marketing, Richard Thomas, Rosemary Jay, United Kingdom

Key Changes in Australian Privacy Law

Reporting from Australia, former Australian Privacy Commissioner Malcolm Crompton, Managing Director of Information Integrity Solutions Pty Ltd (“IIS”), writes:

The Australian Privacy Amendment (Enhancing Privacy Protection) Act 2012 (the “Act”) will make significant changes to the Privacy Act 1988. It’s early days for the changes and the impact for organizations will depend on their circumstances. Over the next 15 months we expect to see a range of guidance material from the Office of the Australian Information Commissioner.

Continue reading…

Tags: Australia, Credit Report, Data Transfer, International, Legislation, Malcolm Crompton, Marketing

FTC Requests Information About Data Brokerage Companies’ Collection and Use of Personal Data

On December 18, 2012, the Federal Trade Commission issued Orders to File Special Report (the “Orders”) to nine data brokerage companies, seeking information about how these companies collect and use personal data about consumers. In the Orders, the FTC requests detailed information about the data brokers’ privacy practices, including:

  • the data brokerage companies’ online and offline products and services that use personal data;
  • the sources and types of personal data the data brokerage companies collect;
  • whether, and how, the companies acquire consumer consent before obtaining, collecting, generating, deriving, disseminating or storing the personal data;
  • whether, and how, the personal data is aggregated, anonymized or de-identified;
  • how the companies monitor, audit or evaluate the accuracy of the personal data they obtain;
  • if, and how, consumers are able to access, correct, delete or opt out of the collection, use or sharing of the personal data the data brokerage companies maintain about the consumers;
  • how the data brokerage companies provide notice to consumers about their data privacy practices;
  • the advertisements or promotional materials the companies use to describe their products and services; and
  • information about any complaints or disputes, or governmental or regulatory inquiries or actions, related to the companies’ data privacy practices.

Continue reading…

Tags: Advertisement, Anonymization, Behavioral Advertising, Congress, Consent, Consumer Protection, FCRA, Federal Trade Commission, Financial Privacy, Information Security, Marketing, Online Privacy, U.S. Federal Law