Privacy

What’s the issue? The ePrivacy Directive (EU Directive 2002/58/EC) establishes (amongst others) specific rules on privacy for the electronic communications sector, such as limiting the use of traffic and location data and prohibiting listening to, or otherwise accessing the contents of, communications.  These rules apply to “service providers” (and more…

Minister Bains is tabling a new Bill on Monday November 16, 2020 in the House of Commons entitled “An Act to enact the Consumer Privacy Protection Act and the Personal Information and Data Protection Tribunal Act and to make consequential and related amendments to other Acts”. ISED outlined some “proposals…

Despite a day of election uncertainty, November 3, 2020 produced an important moment for privacy legislation: California voters approved Proposition 24 (the California Privacy Rights Act) (CPRA) (full text here). Garnering 56.1% of the vote so far, the initiative will almost certainly meet the majority threshold to become the new law of…

Singapore has updated its Personal Data Protection Act (PDPA) to allow local businesses to use consumer data without prior consent for some purposes, such as business improvement and research. The amendments also allow for harsher financial penalties to be meted out for data breaches, above the previous cap of SG$1…

The metaphor of the ticking clock resonates with the state of EU-U.K. Brexit negotiations. First used in 2017 by Michel Barnier, the European Commission’s chief Brexit negotiator, to describe the lack of progress being made, the ticking clock has come to symbolize the urgent need for both sides to agree on…

This translation is part of the DigiChina Project, based at the Stanford University Cyber Policy Center and a joint effort with New America. This translation is by Rogier Creemers, Mingli Shi, and Lauren Dudley, and it was edited by Graham Webster. [Chinese-language original] Personal Information Protection Law of the People’s…

In one of the first analysis to date regarding adoption of the California Consumer Privacy Act (“CCPA”), Consumer Reports has exposed what many in the industry already knew: many companies are not complying with one of the central tenets of CCPA’s requirements. These noncompliant practices can cause consumer frustration as well as…

Abstract There is a gap between people’s online sharing of personal data and their concerns about privacy. Till now, this gap is addressed by attempting to match individual privacy preferences with service providers’ options for data handling. This approach has ignored the role different contexts play in data sharing. This…

On September 9, 2020 Washington State Senator Reuven Carlyle announced on Twitter that an updated draft of the Washington Privacy Act (“WPA”) had been released for public review and feedback, suggesting that the WPA will be up for consideration in the state’s 2021 legislative session. This will be Washington’s third attempt to pass a…

The Irish High Court has granted leave for a “Judicial Review” against the Irish Data Protection Commission (DPC) today. The legal action by noyb aims to swiftly implement the European Court of Justice Decision prohibiting Facebook’s EU-US data transfers. 7 Years and 5 Judgments, but no DPC decision. In 2013 Mr Schrems…