Privacy

The central German state of Hesse’s local Data Protection Authority (DPA) has banned the use of Microsoft 365 in its schools, citing concerns over privacy violations. According to the authority, the program’s settings gather data from within the users’ programs. This clearly violates the EU’s General Data Protection Regulation (GDPR)…

The fundamental components of effective corporate compliance programs have not changed significantly in recent years.1 However, United States enforcement authorities are trying to reinvigorate companies’ attention to those programs. U.S. Department of Justice leaders expressed particular concern this year about whether companies have appropriately integrated their compliance departments. In March 2022,…

A new test of how Apple gathers usage data from iPhones has found that the company collects personally identifiable information while explicitly promising not to. The privacy policy governing Apple’s device analytics says the “none of the collected information identifies you personally.” But an analysis of the data sent to Apple shows it includes a permanent, unchangeable ID number called a Directory Services…

Gen Z’s complex relationship with data privacy differentiates the group from their older counterparts. Certain policies are table stakes for Gen Zers, and they are also more jaded about companies’ mishandling of data, creating a strategic outline for brands looking to plan for the next generation of consumers. Gen Z…

Bill C-27, the Digital Charter Implementation Act, 2022, was raised for debate at second reading in the House of Commons on Friday, November 4. The bill would enact the Consumer Privacy Protection Act (CPPA), the Personal Information and Data Protection Tribunal Act (PIDPTA), and the Artificial Intelligence and Data Act (AIDA). Read our complete summary of the most significant…

This podcast series, intended for private sector companies doing business in Québec, dives into the requirements of Act 25 coming into force on September 22, 2022. Candice Hévin and Marie-Eve Jean, from our Privacy & Data Protection Group, lead the discussions on the changes to the private sector regime, namely the amendments to the…

This podcast series, intended for private sector companies doing business in Québec, dives into the requirements of Act 25 coming into force on September 22, 2022. Candice Hévin and Marie-Eve Jean, from our Privacy & Data Protection Group, lead the discussions on the changes to the private sector regime, namely the amendments to the…

This podcast series, intended for private sector companies doing business in Québec, dives into the requirements of Act 25 coming into force on September 22, 2022. Candice Hévin and Marie-Eve Jean, from our Privacy & Data Protection Group, lead the discussions on the changes to the private sector regime, namely the amendments to the…

On September 22, 2022, the first set of amendments from Bill 64, specifically to Quebec’s Act respecting the protection of personal information in the private sector (Quebec Privacy Act) will come into force. Although most amendments will come into force in September 2023, we wanted to highlight some key new…

In early 2012, the New York Times Magazine put out a cover story about Andrew Pole, a statistician working for Target who was tasked with inventing a way to identify potentially pregnant shoppers, even if those shoppers didn’t want the company to know. The rationale, Pole said, was that moms-to-be are a multi-million…