Read Lokke Moerel’s article on the NYU Blog Compliance & Enforcement on the impact of the decision of the French data protection against Google refusing to apply the GDPR’s “one-stop-shop” enforcement mechanism. Find out more here. …›
With privacy and data security issues dominating headlines over the past year, the Federal Trade Commission – the Nation’s top privacy watchdog – has had its hands full. The FTC’s recently released 2018 “Privacy and Data Security Update” reflects this flurry of activity. The …›
If you thought California’s privacy laws couldn’t get any tougher, think again. The California Legislature has proposed amendments to the California Consumer Privacy Act and additional privacy bills that could expand businesses’ privacy and data security obligations and heighten liability for noncompliance. These …›
The cost for violating the Children’s Online Privacy Protection Act (COPPA), intended to ensure parents are informed about, and can control, the online collection of personal information (PI) from their children under age thirteen, has been steadily rising, and companies subject to the law …›
One of the next big items in Europe will be the expansion of “ePrivacy,” (which, among other things, regulates the use of cookies on websites). While the ePrivacy reform is still being worked on by EU lawmakers, one of the items the ePrivacy Regulation …›
A recent decision indicates that failure to comply with the Illinois biometric privacy law may expose businesses to significant liability, even where there has been no actual harm to the plaintiffs. Can a user of a cloud-based photo-sharing and storage service sue the provider of …›
The EU regulators’ recent report on the second annual review of the EU-US Privacy Shield provides some valuable compliance reminders for organizations that have certified or intend to certify to the Privacy Shield program. The report, which mainly focuses on the EU regulators’ ongoing …›
The Commission nationale de l’informatique et des libertés (CNIL), France’s data protection authority (DPA), has levied a €50 million fine against Google for allegedly violating the GDPR’s transparency, information, and consent requirements in deploying targeted advertisements. The fine—the largest fine under GDPR to date …›
Despite increasing political tensions and evolving trade policies, the U.S. M&A market in 2018 enjoyed its second-best total deal value ever, according to Mergermarket. Activity through the first three quarters appeared poised for a new record, before slowing in the final quarter as stock …›
In a new stunning example of the scale and sophistication of online cybercrime, just before the holidays, DOJ charged two hackers with stealing hundreds of gigabytes of data—including sensitive intellectual property, confidential business data, and personal information from companies and government agencies around the …›