USA
Collect personal data unlawfully and FTC orders to destroy the algorithm
The FTC orders WW International and Kurbo to destroy the algorithms built with unlawfully collected data. WW International and Kurbo placed into the market a weight loss app addressed to children (as young as 8 years old) and collected personal data without the consent of the holder of parental responsibility.…
Read More »Web vendor CafePress fined $500,000 for giving cybersecurity a low value
CafePress is a web service that lets artists, shops, businesses, fan clubs – anyone who signs up, in fact – turn designs, corporate slogans, logos and the like into fun merchandise they can give away or sell on to others. The days when you had to put in an order for several…
Read More »“Privacy Shield 2.0”? – First Reaction by Max Schrems
Today Commission President Ursula von der Leyen and President Biden have announced an “agreement in principle” on a new EU-US data sharing system. Some facts upfront: There is only a political announcement, not a text that can be analyzed. As far as noyb is informed, such a text does not exist yet…
Read More »EU, US strike preliminary deal to unlock transatlantic data flows
Brussels and Washington have struck an agreement in principle on a revamped “Privacy Shield” data transfer agreement, European Commission President Ursula von der Leyen and U.S. President Joe Biden said Friday. Negotiators have been working on an agreement — which allows Europeans’ personal data to flow to the United States…
Read More »Georgia Considering Broad Privacy Bill
The Georgia Senate recently introduced an omnibus privacy bill modeled after (but significantly broader than) California’s Consumer Privacy Act (“CCPA”), titled the Georgia Computer Data Privacy Act (“GCDPA”). The introduction of the GCDPA is surprising in a number of ways, including its sponsorship by Republican leadership. It is also notable…
Read More »Use of Google Analytics and data transfers to the United States: the CNIL orders a website manager/operator to comply
Google Analytics provides statistics on website traffic. After receiving complaints from the NOYB association, the CNIL, in cooperation with its European counterparts, analysed the conditions under which the data collected through this service is transferred to the United States. The CNIL considers that these transfers are illegal and orders a…
Read More »2022 – a busy year for privacy legislation has already started
On the privacy front, 2022 is already shaping up to be a busy legislative year. During the first week of January, a number of state and federal privacy bills were announced or introduced for the current legislative session. While it is too soon to tell where these bills will end…
Read More »Enforcement Update on the California Consumer Privacy Act
Monday, July 19, 2021 Contact: (916) 210-6000, agpressoffice@doj.ca.gov SAN FRANCISCO – A year after enforcement of the nation’s toughest privacy law began, California Attorney General Rob Bonta today announced successful enforcement efforts and urged more Californians to take advantage of their new rights. The California Consumer Privacy Act (CCPA) provides consumers with groundbreaking…
Read More »Why Everyone Is Talking About a Rarely Invoked Rule – the FTC’s Health Breach Notification Rule
Back in September, the Federal Trade Commission (FTC) issued (by a 3-2 vote) a policy statement (the Statement) regarding the oft-forgotten Health Breach Notification Rule (the Rule). I was at the FTC when the Statement was released and have since joined BakerHostetler. Around the time I joined BakerHostetler, my new…
Read More »FTC Announces Regulatory Priorities for Both Privacy and Competition
On December 10th, the Federal Trade Commission (FTC) published a Statement of Regulatory Priorities that announced the agency’s intent to initiate rulemakings on issues such as privacy, security, algorithmic decision-making, and unfair methods of competition. The statement also addressed ongoing reviews on a myriad of topics, including the FTC’s review…
Read More »