The North Carolina Journey of Law and Technology

NOVEMBER 18, 2023

Just over a month ago, TikTok received a $370 million fine from the Irish Data Protection Commission (DPC) for violating children’s data privacy law under the General Data Protection Regulation (GDPR).

Data protection 52

Data protection Law Law 52

Debevoise Data Blog

MARCH 11, 2021

The recent publication of the SEC’s 2021 Division of Examination Priorities (the “2021 Priorities”) presents an opportunity to look back at the cybersecurity work of the SEC in 2020 and speculate about the SEC’s examination and enforcement priorities for data protection in the coming year for RIAs.

Compliance 52

Compliance Data protection Attorney 52

Inside Privacy

FEBRUARY 27, 2023

Background The RAD came into force on December 24, 2020 with the objective of introducing a common framework and approach to collective actions across the EU. Covington’s Data Privacy and Cybersecurity Team will continue to monitor the transposition of the EU Representative Actions Directives in EU member states.

Data protection 52

Data protection Court Litigator Litigation 52

LawSites

DECEMBER 1, 2021

Among its key findings: Data protection is a clear and rising threat for 46% of GC, while more than a third are concerned about increased regulation and antitrust enforcement. ” While GC in 2020 felt relatively well prepared (4.02 ” While GC in 2020 felt relatively well prepared (4.02 in 2020 to 2.9

e-discovery 52

e-discovery Compliance e-filing Data protection 52

Legal IT Group

NOVEMBER 10, 2023

First of all, the data can be transferred based on the adequacy decision or subject to appropriate safeguards. Among these safeguards, in particular, are binding corporate rules, standard data protection clauses, code of conduct, and certification mechanism. After Brexit in 2020, the UK continued to use them.

Data protection 52

Data protection Compliance Law Law 52

Berkley Technology Law Journal

JANUARY 24, 2025

They are responsible for overseeing an organizations data protection measures, risk management strategies, overall security infrastructure, among other critical responsibilities. Tasked with overseeing a firms cybersecurity posture, CISOs stand on the front lines of a corporations digital defense.

Failure-to-appear 52

Failure-to-appear Court Judge Data protection 52

CaseFox

DECEMBER 1, 2023

During the first quarter of 2023, more than six million data records were exposed worldwide through data breaches. Since the first quarter of 2020, the highest number of exposed data records was detected in the fourth quarter of 2020, nearly 125 million data sets.

Law firm 52

Law firm Law Law Intellectual Property 52

Debevoise Data Blog

SEPTEMBER 19, 2022

Governor Newsom stated that he is “thankful to Assemblymembers Wicks and Cunningham and the tech industry for pushing these protections and putting the wellbeing of our kids first.” Notable affirmative obligations include: Data Protection Impact Assessments (“DPIAs”). How does the California Design Code compare to other laws?

Data protection 52

Data protection Compliance Time-tracking Attorney 52

Ikigai Law

AUGUST 7, 2023

Main Course : Deep dive stories on card network portability, and impact of the data protection bill on fintechs. Main Course Fintech and the Data Protection Bill No piece of legislation has taken more punches than our elusive data protection law. The data law is nearly here! No, not so fast.

Data protection 52

Data protection Law Law e-records 52

Debevoise Data Blog

APRIL 19, 2021

519-FZ on Amendments to the Federal Law on Personal Data dated 30 December 2020 (the “Law”) came into force. This is additional to general data processing consent, which is still required under pre-existing data protection law. On 1 March 2021, Federal Law No. Special Consent.

Due diligence 52

Due diligence Data protection Federal law Court 52

Technology Law Dispatch

OCTOBER 12, 2023

The DRCF was formed in 2020, and, as mentioned above, is governed by the ICO, Ofcom, the CMA and the FCA. As such, the launch of the DRCF AI and Digital Hub will likely be welcome news for businesses across the UK, providing companies and innovators with the tools to navigate a challenging and multi-layered regulatory environment.

Data protection 52

Data protection 52

Debevoise Data Blog

OCTOBER 4, 2021

Different Role and Different Risks for Banks In October 2020, the U.S. But, in terms of compliance and diligence, financial institutions that facilitate ransomware payments on behalf of their clients are in a very different position than the victims of the attacks.

Due diligence 52

Due diligence Compliance Data protection Law 52

Debevoise Data Blog

MARCH 17, 2023

In addition, Section 4 of the California Privacy Rights Act of 2020 (the “CPRA”) prohibits businesses from retaining a consumer’s personal information, or sensitive personal information, for longer than is reasonably necessary, and similar data minimization requirements exist in the NYDFS cybersecurity rules, the Virginia and Colorado state privacy (..)

e-discovery 52

e-discovery Compliance Litigator Litigation 52

Debevoise Data Blog

OCTOBER 18, 2021

2020) (denying motions to dismiss and to strike class allegations against manufacturer of biometric timeclocks where plaintiff-employees did not receive notice or give consent to manufacturer). 1:20-CV-1084-JES-JEH, 2020 WL 5118035 (C.D. 19 CV 04722, 2020 WL 2513099 (N.D. May 15, 2020). See, e.g., Figueroa v. 454 F.Supp.3d

Law 52

Law Law Court Time-tracking 52

Ikigai Law

FEBRUARY 9, 2023

For instance, in 2020, Newslaundry listed several social media posts and news articles that PIB’s fact-checking unit had ‘debunked’ without any valid basis. Other bills that might be discussed include the draft Digital Personal Data Protection Bill and the Telecommunication Bill.

Due diligence 52

Due diligence Data protection Hearing Compliance 52

Debevoise Data Blog

OCTOBER 26, 2021

Among other proposed federal legislation, the National Biometric Information Privacy Act of 2020 died in Congress last year. Federal and State Legislation There is currently no federal law that specifically regulates biometric privacy.

Compliance 52

Compliance Federal law Data protection Machine learning 52

Lawmatics

APRIL 25, 2023

Initially, the platform gained popularity during the pandemic and lockdown as a way to entertain and connect people, but it persisted beyond 2020 and has exceeded one billion users. Surely, by now, you’ve heard about TikTok, the video-based social media app that is all the rage. states have even moved to ban the app.

Law firm 52

Law firm Time-tracking Law Law 52

Debevoise Data Blog

OCTOBER 12, 2021

million fine against Austrian Post for channelling electronic data protection-related inquiries to a web form and not offering an additional email address, irrespective of the data subject option to also use non-electronic postal mail or customer service.

Data protection 52

Data protection Failure-to-appear Compliance e-records 52

Inside Privacy

APRIL 28, 2023

On 29 March 2023, the UK Information Commissioner’s Office (“ICO”) published updated Guidance on AI and data protection (the “Guidance”) following “requests from UK industry to clarify requirements for fairness in AI”. Additionally, the ICO have added a new annex on data protection fairness considerations across the AI lifecycle.

Data protection 74

Data protection Compliance Law Law 74

Debevoise Data Blog

DECEMBER 10, 2020

The big news this November was the European Data Protection Board (the “EDPB”) issuing its highly anticipated post- Schrems II data transfer guidance, followed just a day later by the European Commission’s draft updated Standard Contractual Clauses (“SCCs”) (see our blog post here ).

Data protection 52

Data protection Dispute resolution Court Compliance 52

Debevoise Data Blog

MAY 28, 2024

EDPB “Consent or pay” models: Businesses operating large online platforms should consider the European Data Protection Board’s recent opinion indicating that “consent or pay” models are unlikely to be GDPR-compliant.

Data protection 52

Data protection Compliance Law Law 52

Inside Privacy

NOVEMBER 28, 2023

They raise various questions under regulatory and data protection and data security laws. The DiGA Regulation imposes specific data protection and data security requirements on health apps (in addition to safety, functionality, quality and interoperability requirements). 26 of the GDPR.

Data protection 57

Data protection Time-tracking Software Law 57

Debevoise Data Blog

FEBRUARY 10, 2021

As covered in our Annual Review , 2020 was a blockbuster year for European data protection. This was bolstered by the ICO’s announcement that it is resuming investigations into real time bidding and the adtech industry that were paused in May 2020 due to COVID-19. EDPB publishes new data breach notification guidance.

Data protection 52

Data protection Time-tracking Defendant Court 52

Debevoise Data Blog

JANUARY 17, 2025

Our top-eleven European data protection developments for the end of 2024 are: EU Cyber Resilience Act: The Council of the European Union approved the Cyber Resilience Act , introducing cybersecurity requirements for digital products sold in the EU. The UK Upper Tribunal did not consider the provisions under the UK GDPR.

Data protection 52

Data protection Compliance Court State law 52

Debevoise Data Blog

JANUARY 21, 2021

In this post, we look back at the 2020 European data protection landscape and five trends that help companies understand not only where we are, but where data protection enforcement, litigation, and practice may be headed. Second , enforcement goes far beyond data breaches and the GDPR.

Data protection 52

Data protection Litigator Litigation Failure-to-appear 52

3 Geeks and a Law Blog

JANUARY 23, 2023

This week’s episode covers agency labor advisors, data rights, minimum wage for contractors and the strengthening VA Cybersecurity Act of 2020. AI-Ethan 10:28 Bonds gonna Ken King Latest Episode on Countdown to data privacy day 2023.

Hearing 130

Hearing Time-tracking Judge e-filing 130

Debevoise Data Blog

APRIL 8, 2021

million for vendor oversight failings, unlawful cross-border transfers What happened : The AEPD, the Spanish data protection authority (“DPA”), fined Vodafone Spain €8.15 4 million was for allegedly deficient oversight of Vodafone’s data processors. In December 2020, the Regional Court of Bonn held that, when reducing a €9.6

Data protection 52

Data protection Compliance Court Law 52

Debevoise Data Blog

NOVEMBER 22, 2022

The EU’s General Data Protection Regulation 2016 (the “GDPR”) changed the global privacy landscape, and has been called the “gold standard” for data protection regulation. When Are Data Protection Assessments Required? Recently, a number of U.S. Recently, a number of U.S.

Data protection 52

Data protection Law Law Compliance 52

Debevoise Data Blog

NOVEMBER 10, 2020

ICO targets the data broking industry : On 27 October, the ICO demanded that Experian make sweeping changes to data protection practices within its direct marketing business within three months or face further enforcement action. We will continue to report on developments as Experian’s appeal progresses.

Data protection 52

Data protection Intellectual Property e-records Machine learning 52

Clio

JANUARY 30, 2024

GDPR : To help address global needs for enhanced data security, in 2018, Europe introduced a unified data protection law, the General Data Protection Regulations (GDPR). CCPA : In 2018, the state of California enacted the California Consumer Privacy Act (CCPA) , which came into effect in 2020.

Law firm 98

Law firm Law Law Due diligence 98

Debevoise Data Blog

MAY 12, 2023

Key takeaways this April include: UK children’s data protection focus continues: Businesses may wish to review policies and procedures for dealing with children’s data in light of recent UK ICO fines and guidance, especially to ensure that terms of use are adequately enforced. UK ICO fines TikTok £12.7

Data protection 52

Data protection Software design Machine learning Software 52

Inside Privacy

DECEMBER 15, 2023

This interplay between privacy and competition law isn’t new – the UK’s privacy and competition regulators have been cooperating through their Digital Regulation Cooperation Forum since 2020 – but the joint paper serves as a timely reminder that these issues require cross-disciplinary expertise and should be considered together.

Data protection 65

Data protection Law Law 65

Debevoise Data Blog

MARCH 26, 2023

UK tribunal limits ICO enforcement order but partially upholds lawful basis objection What happened : A tribunal rejected certain aspects of the UK ICO’s October 2020 enforcement notice against Experian, a credit reference agency that holds and processes data relating to essentially the whole of the UK’s adult population.

Data protection 52

Data protection Compliance Court Law 52

Debevoise Data Blog

JULY 20, 2021

Here are our highlights: European Commission adopts new Standard Contractual Clauses What happened : As reported in our blog post , the European Commission adopted its new Standard Contractual Clauses (“SCCs”) for the cross-border transfer of personal data from the EEA to “third countries”.

Data protection 52

Data protection e-filing Compliance e-records 52

LawSites

DECEMBER 27, 2022

Notably, the post that captured the most eyes was about New York becoming the first state to mandate CLE in cybersecurity, privacy and data protection. New York Becomes First State to Mandate CLE in Cybersecurity, Privacy and Data Protection. Jackson Women’s Health Organization. Here’s What Happened.

Data protection 94

Data protection Analytics Legal tech Legal tech 94

Berkley Technology Law Journal

NOVEMBER 27, 2024

Candidate, 2027 In 2026, the United States-Mexico-Canada Agreement (USMCA), which succeeded the North American Free Trade Agreement (NAFTA) in 2020, will undergo a joint review to assess its effectiveness, consider a 16-year extension, and evaluate potential adjustments to better align with current economic and technological trends.

Intellectual Property 52

Intellectual Property Dispute resolution Data protection Machine learning 52

Legal IT Group

SEPTEMBER 29, 2023

Brazil’s Lei Geral de Proteção de Dados Pessoais (or LGPD), similar to GDPR, CCPA and PIPEDA, regulates personal data protection. If the company does not process personal data in Brazil but still processes data to offer or supply goods or services to Brazil, the LGPD also applies in this case. Apparently not.

Data protection 52

Data protection Compliance Court Law 52