On September 1, 2021, the South Korean Personal Information Protection Commission (“PIPC”) issued fines against Netflix and Facebook for violations of the Korean Personal Information Protection Act (“PIPA”).
Continue Reading South Korean Privacy Regulator Fines Netflix and Facebook
Consent
China Passes Personal Information Protection Law
Posted on
On August 20, 2021, China passed the Personal Information Protection Law (the “PIPL”). The PIPL will become effective on November 1, 2021.…
Continue Reading China Passes Personal Information Protection Law
Google to Prevent App Developers from Using Advertising ID for Any Purpose Following User Opt-Out
Posted on
Posted in Behavioral Advertising, Online Privacy
On June 3, 2021, Google informed app developers that beginning in late 2021, when Android 12 OS users opt out of personalized ads, the advertising ID provided by Google Play services will not be made available to app developers for any purpose.…
Continue Reading Google to Prevent App Developers from Using Advertising ID for Any Purpose Following User Opt-Out
New York City Council Passes Tenant Data Privacy Act
Posted on
Posted in Information Security, U.S. State Law
On April 29, 2021, the New York City Council passed the Tenant Data Privacy Act, which would regulate the collection, use, safeguarding and retention of tenant data by owners of “smart access” buildings. The TDPA has now been sent to the New York City Mayor’s desk for signature.…
Continue Reading New York City Council Passes Tenant Data Privacy Act
Senate Bill Would Expand Federal Children’s Privacy Protections
Posted on
On May 11, 2021, Senators Edward Markey (D-MA) and Bill Cassidy (R-LA) introduced the Children and Teens’ Online Privacy Protection Act. The Bill, which would amend the existing Children’s Online Privacy Protection Act, would prohibit companies from collecting personal information from children ages 13 to 15 without their consent.…
Continue Reading Senate Bill Would Expand Federal Children’s Privacy Protections
Norwegian DPA Issues 2.5M EUR Preliminary Fine for U.S. Company Utilizing Web-Tracking IDs
Posted on
On May 2, 2021, the Norwegian data protection authority, Datatilsynet, notified a U.S. company of its intention to issue a fine of 25 million Norwegian Krone (approximately 2.5 million Euros). The preliminary fine was issued for failure to comply with the General Data Protection Regulation’s accountability, lawfulness and transparency requirements, primarily due to the company’s tracking of website visitors.…
Continue Reading Norwegian DPA Issues 2.5M EUR Preliminary Fine for U.S. Company Utilizing Web-Tracking IDs
China Issues Second Version of the Draft Personal Information Protection Law for Public Comments
Posted on
On April 29, 2021, China issued a second version of the draft Personal Information Protection Law. The draft will be open for public comments until May 28, 2021. …
Continue Reading China Issues Second Version of the Draft Personal Information Protection Law for Public Comments
China Publishes Draft Security Standard on Facial Recognition
Posted on
Posted in Information Security, International
The National Information Security Standardization Technical Committee of China has published a draft standard on Security Requirements of Facial Recognition Data. The Standard, which is non-mandatory, details requirements for collecting, processing, sharing and transferring data used for facial recognition.…
Continue Reading China Publishes Draft Security Standard on Facial Recognition
Apple’s ATT Framework to Go Into Effect April 26, 2021
Posted on
Posted in Behavioral Advertising, Information Security
Apple has announced that its AppTracking Transparency Framework will go into effect starting April 26, 2021, along with the upcoming public release of iOS 14.5, iPadOS 14.5 and tvOS 14.5.…
Continue Reading Apple’s ATT Framework to Go Into Effect April 26, 2021
California Supreme Court Requires All-Party Consent to Record Phone Calls
Posted on
Posted in Information Security, U.S. State Law
On April 1, 2021, California’s Supreme Court ruled unanimously that the state’s prohibition on recording calls without consent applies to parties on the call and not just third-party eavesdroppers. Writing for the Court, Chief Justice Tani G. Cantil-Sakauye wrote that California’s penal code “prohibits parties as well as nonparties from intentionally recording a communication transmitted between a cellular or cordless phone and another device without the consent of all parties to the communication.”…
Continue Reading California Supreme Court Requires All-Party Consent to Record Phone Calls