On August 14, 2020, the California Attorney General announced that the California Office of Administrative Law approved the final regulations issued under the California Consumer Privacy Act of 2018 and filed them with the California Secretary of State.
Continue Reading CCPA Regulations Approved by California Office of Administrative Law
Information Security
Multiple Retailers Sued Under CCPA for Sharing Data Used to Identify Fraudulent Returns
Posted on
Posted in Information Security, U.S. State Law
Earlier this year, The Retail Equation and Sephora were hit with a class action lawsuit in which the plaintiff claimed Sephora improperly shared consumer data with The Retail Equation without consumers’ knowledge or consent. On August 3, 2020, the plaintiff, now joined by others, amended her complaint to cast an even wider net. …
Continue Reading Multiple Retailers Sued Under CCPA for Sharing Data Used to Identify Fraudulent Returns
U.S. Government Takes Aim at TikTok and WeChat Citing Privacy and Security Concerns
Posted on
Posted in Information Security, U.S. Federal Law
On August 6, 2020, President Trump signed executive orders imposing new economic sanctions under the International Emergency Economic Powers Act and the National Emergencies Act against TikTok and WeChat. The orders potentially affect tens of millions of U.S. users of these applications and billions of users worldwide.…
Continue Reading U.S. Government Takes Aim at TikTok and WeChat Citing Privacy and Security Concerns
CNIL Adopts Its First Sanction as Lead Supervisory Authority, Fining French Online Shoe Retailer
Posted on
On August 5, 2020, the French Data Protection Authority announced that it has levied a fine of €250,000 on a French online shoe retailer for various infringements of the GDPR. This is the first penalty under the GDPR enforced by the CNIL as the lead supervisory authority in cooperation with other EU supervisory authorities.…
Continue Reading CNIL Adopts Its First Sanction as Lead Supervisory Authority, Fining French Online Shoe Retailer
European Commission and U.S. Department of Commerce to Discuss Enhanced EU-U.S. Privacy Shield Framework
Posted on
On August 10, 2020, European Commissioner for Justice Didier Reynders and U.S. Secretary of Commerce Wilbur Ross released a joint press statement following the ruling of the Court of Justice of the European Union in the Schrems II case.…
Continue Reading European Commission and U.S. Department of Commerce to Discuss Enhanced EU-U.S. Privacy Shield Framework
Senate Bill Limits Corporate Use of Facial Recognition
Posted on
Posted in Information Security
On August 4, 2020, Senators Jeff Merkley and Bernie Sanders introduced the National Biometric Information Privacy Act of 2020.…
Continue Reading Senate Bill Limits Corporate Use of Facial Recognition
Department of Commerce Publishes FAQs Regarding Impact of Schrems II Decision
Posted on
The U.S. Department of Commerce has issued two new sets of FAQs in light of the CJEU’s recent decision to invalidate the EU-U.S. Privacy Shield in Schrems II. …
Continue Reading Department of Commerce Publishes FAQs Regarding Impact of Schrems II Decision
UK ICO Publishes First Two Reports from its Data Protection Sandbox Pilot
Posted on
Posted in Information Security, International
On July 23, 2020, the UK Information Commissioner’s Office published the first two reports from its Data Protection Regulatory Sandbox Beta phase, which launched in September 2019 as a pilot and involves the assessment of ten products and services that use personal data in innovative ways.…
Continue Reading UK ICO Publishes First Two Reports from its Data Protection Sandbox Pilot
Regulators Issue Reactions to Invalidation of EU-U.S. Privacy Shield Framework
Posted on
In the aftermath of the CJEU’s unexpected ruling, organizations in the EU and U.S. that rely on Privacy Shield certification for transfers of EU personal data are awaiting guidance from EU data protection regulators. …
Continue Reading Regulators Issue Reactions to Invalidation of EU-U.S. Privacy Shield Framework
BREAKING: Unexpected Outcome of Schrems II Case: CJEU Invalidates EU-U.S. Privacy Shield Framework but Standard Contractual Clauses Remain Valid
Posted on
On July 16, 2020, the Court of Justice of the European Union issued its landmark judgment in the Schrems II case, concluding that the Standard Contractual Clauses issued by the European Commission for the transfer of personal data to data processors established outside of the EU are valid. Unexpectedly, the Court invalidated the EU-U.S. Privacy Shield framework.…
Continue Reading BREAKING: Unexpected Outcome of Schrems II Case: CJEU Invalidates EU-U.S. Privacy Shield Framework but Standard Contractual Clauses Remain Valid