California Seeks to Strengthen Tough Privacy Laws
Welcome to the MoFo Tech Blog
MoFo Tech brings together legal insights and in-depth analyses on trends and complex issues shaping the global technology industry, covering fields such as blockchain and distributed ledger, cloud and SaaS technologies, driverless cars, drones, FinTech, computer hardware and software, the IoT, semiconductors, and telecommunications.
- If you thought California’s privacy laws couldn’t get any tougher, think again. The California Legislature has proposed amendments to the California Consumer Privacy Act and additional privacy bills that could expand businesses’ privacy and data security obligations and heighten liability for noncompliance. These proposals confirm... ›
Thank You, Next Enforcement: Music Video App Violates COPPA, Will Pay $5.7 Million
By: Julie O'Neill
The cost for violating the Children’s Online Privacy Protection Act (COPPA), intended to ensure parents are informed about, and can control, the online collection of personal information (PI) from their children under age thirteen, has been steadily rising, and companies subject to the law... ›The Cookie Wall Must Go Up. Or Not?
By: Alex van der Wolk, Mercedes Samavi and Philip Radlanski
One of the next big items in Europe will be the expansion of “ePrivacy,” (which, among other things, regulates the use of cookies on websites). While the ePrivacy reform is still being worked on by EU lawmakers, one of the items the ePrivacy Regulation... ›Federal Government Expansion and Application of Artificial Intelligence Technologies
By: Tina D. Reynolds
By all accounts 2019 will bring significant expansion in the use and development of artificial intelligence (AI) by the U.S. federal government. Notwithstanding some well-publicized rejections by industry of the use of their AI technologies for offensive military and surveillance applications, the federal government... ›A Complete About-Face: Courts Disagree on Harm Requirement Under Biometric Privacy Law
By: Julie O'Neill
A recent decision indicates that failure to comply with the Illinois biometric privacy law may expose businesses to significant liability, even where there has been no actual harm to the plaintiffs. Can a user of a cloud-based photo-sharing and storage service sue the provider... ›Tokenization + the SEC – Part 1
Dario de Martino discusses the real possibilities and opportunities around security tokens, from a business standpoint, the legal perspective, and from a retail investor point of view. Topics include: What are the advantages of tokenizing securities? How do Securities laws work generally in the... ›Privacy Shield-Certified Organizations: Key Takeaways from the Privacy Shield Annual Review
By: Cynthia J. Rich
The EU regulators’ recent report on the second annual review of the EU-US Privacy Shield provides some valuable compliance reminders for organizations that have certified or intend to certify to the Privacy Shield program. The report, which mainly focuses on the EU regulators’ ongoing... ›Transforming the U.S. Healthcare Industry with Blockchain Technology
By: Spencer D. Klein, Julie O'Neill and Mary Race
Patients accumulate vast quantities of healthcare data over the course of their lives. Those data are generally housed in centralized servers operated by various unrelated industry participants, including government regulators and payors, insurance carriers, hospitals, doctors, pharmacies and pharmaceutical companies. Unfortunately, those repositories rely... ›Time to Hit Pause: Copyright Infringement on User Generated Platforms – When Is the Platform Provider Liable for Damages?
By: Kristina Ehle and Stephan Kreß
Content uploaded on to the Internet by users (e.g., music, videos, literature, photos, streaming of live events such as gaming and concerts – so-called “user-generated content”) has spawned a series of legal cases in Europe. In 2019, decisions of the European Court of Justice (CJEU)... ›C’est It Ain’t So: French DPA Issues Google Largest GDPR Fine to Date
By: Alex van der Wolk
The Commission nationale de l’informatique et des libertés (CNIL), France’s data protection authority (DPA), has levied a €50 million fine against Google for allegedly violating the GDPR’s transparency, information, and consent requirements in deploying targeted advertisements. The fine—the largest fine under GDPR to date and... ›