Personal Information Archives

Why Privacy Settings Can’t be Set to “Consent” by Default

September 19, 2022
Editorial Team
Data Privacy, data privacy violations, Personal Information, South Korea
0 Comments

On September 14, South Korea’s Personal Information and Protection Commission (the “Commission”) announced it will levy more than $70 million in fines against Alphabet Inc.’s Google (Google) and Facebook’s parent Meta Platforms Inc. (Meta) over alleged privacy violations. According to…

Saudi Arabia’s Data Protection Law: The Personal Data Protection Law

March 28, 2022
Editorial Team
Business, Data Breach, Data Protection, Data Security, Personal Information, Privacy, Risk Management, Saudi Arabia
0 Comments

On March 10, the Kingdom of Saudi Arabia’s Saudi Data & Artificial Intelligence Authority (SDAIA) issued a draft version of executive regulations supplementing the nation’s first standalone comprehensive data protection law, The Personal Data Protection Law (PDPL). PDPL was implemented…

Why Organizations Need to Start Implementing Data Minimization

February 28, 2022
Jason Shoup
California, Colorado, Colorado, Consumer Privacy, Data Governance, Data Privacy, Data Protection, Federal Trade Commission (FTC), GDPR, Legislation, Personal Information, State Laws, Virginia
0 Comments

When the European Union (EU) enacted the General Data Protection Regulation (GDPR) on May 2, 2018, the world was introduced to the concept of data minimization. According to Article 5 of the GDPR, data minimization means “personal data shall be…

California Amends CPRA to Protect Biometric Data

February 28, 2022
Editorial Team
Biometric, California, CPRA, Customer, Data Governance, Digital Identity, Personal Information
0 Comments

Over the last several years, California legislators have been leading the country in creating new privacy protections for consumers. These legislative actions, including the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) have been primarily focused…

CNIL Publishes White Paper on Digital Payments and Data Privacy

November 23, 2021
Editorial Team
AML, Banks, Biometric, CNIL, Cybersecurity, Data Privacy, Data Protection, Data Security, Digital Payments, Financial Services, FinTech, GDPR, Personal Information, Privacy

The French Data Protection Authority’s white paper discusses how companies can comply with data privacy and security obligations. The use of card, contactless, and innovative digital payment solutions has significantly increased in recent years, fueled by the immediate impacts of the ongoing COVID-19 pandemic and the longer-term growth of e-commerce and open banking. In this…

Become a member to access this content.

Courts Rule on When a Data Breach of PII is Actionable

October 29, 2021
Editorial Team
Breach response, Courts, Data Breach, Penalties and Enforcement, Personal Information, Personally Identifiable Information (PII)

The Second Circuit recently joined a growing number of federal courts to decide when a data breach of personally identifiable information (“PII”) is actionable. According to the Second Circuit, plaintiffs do not have standing to bring a lawsuit when there is no allegation their PII was targeted or misused. The Second Circuit’s decision To bring…

Become a member to access this content.

China’s Personal Information Protection Law: Key Takeaways

October 27, 2021
Editorial Team
Breach Notification, China, Cross-Border Data Transfers, Data Governance, Data Privacy, GDPR, Governance, Legislation, Penalties and Enforcement, Personal Information, PIPL

On August 20, 2021, China’s first comprehensive Personal Information Protection Law (“PIPL”) was passed into law. The Cybersecurity Law, the Data Security Law, and the PIPL of China are the three pillars of China’s data protection framework, which govern cybersecurity, data security, and personal information protection respectively. The Cybersecurity Law largely governs cybersecurity requirements for…

Become a member to access this content.