Meta Fined for GDPR Violation Meta, the parent company of Facebook, has incurred another fine for its mishandling of personal information. The most recent $275 million fine, levied by the Irish Data Protection Authority, brings Meta’s total GDPR fines in…
Quebec Updates Data Privacy Law Starting in September 2022, Quebec’s Act respecting the protection of personal information in the private sector (Act) will take effect. Recent updates have been passed to the Act regarding biometric privacy. A summary of the…
One of the most important ways to demonstrate your company’s compliance with the EU’s General Data Protection Regulation (GDPR) is to prepare a Data Protection Impact Assessment (DPIA) for any high-risk data processing activities. The GDPR requires a DPIA for…
On March 14, the European Data Protection Board (EDPB) published draft guidelines on “dark patterns.” The guidelines are intended to provide UX designers and consumers with the means to identify dark patterns—deceptive marketing and UX designs that violate the General…
Connecticut Legislators Pass Data Privacy Bill The Connecticut Data Privacy Act (“CTDPA”) was approved by the Connecticut House of Representatives last week, and awaits the Governor’s signature before becoming law. The CTDPA, like data privacy laws in Virginia, Utah, and…
When the European Union (EU) enacted the General Data Protection Regulation (GDPR) on May 2, 2018, the world was introduced to the concept of data minimization. According to Article 5 of the GDPR, data minimization means “personal data shall be…
