This site uses cookies to improve your experience. To help us insure we adhere to various privacy regulations, please select your country/region of residence. If you do not select a country, we will assume you are from the United States. Select your Cookie Settings or view our Privacy Policy and Terms of Use.
Cookie Settings
Cookies and similar technologies are used on this website for proper function of the website, for tracking performance analytics and for marketing purposes. We and some of our third-party providers may use cookie data for various purposes. Please review the cookie settings below and choose your preference.
Used for the proper function of the website
Used for monitoring website traffic and interactions
Cookie Settings
Cookies and similar technologies are used on this website for proper function of the website, for tracking performance analytics and for marketing purposes. We and some of our third-party providers may use cookie data for various purposes. Please review the cookie settings below and choose your preference.
Strictly Necessary: Used for the proper function of the website
Performance/Analytics: Used for monitoring website traffic and interactions
Our top-eleven European dataprotection developments for the end of 2024 are: EU Cyber Resilience Act: The Council of the European Union approved the Cyber Resilience Act , introducing cybersecurity requirements for digital products sold in the EU. The UK Upper Tribunal did not consider the provisions under the UK GDPR.
state to mandate that attorneys take continuing legal education courses in cybersecurity, privacy and dataprotection. New York has become the first U.S. The order creates two types of cybersecurity training, one focused on ethics and the other on practice.
On 29 December 2022, the CNIL fined TikTok UK and Ireland as joint controllers €5 million for failing to: offer users the ability to refuse cookies as easily as accepting them (several clicks were required to refuse all cookies, as opposed to just one to accept them); and inform users in a sufficiently precise manner about cookie purposes.
Our top-five European dataprotection developments from August are: Uber fined for personal data transfer: The Dutch DataProtection Authority fined Uber €290 million for the unlawful transfer of European drivers’ personal data to the U.S., without sufficient safeguards. ICO proposes £6.09
UK DPA launches data transfer consultation What happened : The ICO launched a consultation covering its international data transfer guidance, draft transfer risk assessment tool (“TRA”) and draft international data transfer agreement (“ IDTA ”). These developments, and more, covered below.
Digital Operation Resilience Act is imminent What happened : On 28 November 2022, the European Union finalised the EU Digital Operational Resilience Act (“DORA”). The UK Government followed on 30 November 2022 with an announcement about its own expanded measures, which focus in particular on critical digital infrastructure.
As we covered here , last October, the CNIL fined Clearview AI €20 million for various dataprotection violations, including “intrusive and massive” data processing without consent or a valid legitimate interest. 82 (see our May 2021 , August 2021 , and October 2022 blog posts for previous developments).
Key takeaways this April include: UK children’s dataprotection focus continues: Businesses may wish to review policies and procedures for dealing with children’s data in light of recent UK ICO fines and guidance, especially to ensure that terms of use are adequately enforced. 22, as set out by the court.
Our summary of the Digital Personal DataProtection Bill, 2023 The Digital Personal DataProtection Bill, 2023 ( 2023 Bill ) was tabled in Parliament on 3 August 2023. It is the fifth – and likely final – iteration of India’s efforts to formulate a personal dataprotection law.
GDPR one-stop-shop: Businesses wishing to take advantage of the GDPR one-stop-shop system should take note of a new digest, published by the European DataProtection Board, which analyses the decisions made by so-called Lead Supervisory Authorities in this context.
In March 2023, Meta Platforms lost a class action lawsuit against the Dutch Data Privacy Stichting in an Amsterdam court, acting in conjunction with the Consumentenbond, the Dutch Consumers’ Association. Thus, investigating the issue of processing sensitive data for advertising purposes, the court determined in paragraph 13.14
With this regard, it is essential to know about the privacy legislation of this country since, nowadays, most internet businesses process the personal data of their clients, and they should do it in compliance with dataprotection laws. ” Thus, the Australian Privacy Act also aims to have a GDPR level of dataprotection.
I don’t normally start my blog posts with a meme, but this one tells you everything you need to know: * * * This blog post concerns the California Age-Appropriate Design Code (AADC), passed by the California legislature in 2022. Unsurprisingly, on remand, the district court declared the rest unconstitutional.
Businesses may want to consider how the courts reasoning may apply to other circumstances when dealing with disclosure requests. For example, the Garante notes the need to incorporate dataprotection by design and by default principles within any AI systems used in the healthcare space. UK and U.S.
Nevertheless, when considering the appropriateness of protective measures, the obligation rests on the data controller to prove that they met the required standard. The rulings arose at the request of both the German and Lithuanian courts, following local administrative fines. The Court ruled that: “Scoring” (i.e.,
The dataprotection issues in each situation with video technologies may differ, as well as the legal analysis when using a particular technology. That is, the maximum possible storage period of the video recording, in this case, is three months, except when it is evidence in court proceedings.
Entities transferring personal data outside the European Economic Area on the basis of standard contractual clauses that are no longer in force (where the transfer began before 27 September 2021) should conclude agreements based on new clauses by 27 December 2022.
. : Business may want to revisit their cross-border data transfer arrangements following the new adequacy decision for the EU-U.S. Data Privacy Framework, assess whether they are eligible to self-certify and, if they are, whether it makes sense to. Data Privacy Framework (the “DPF”). Data Privacy Framework (the “DPF”).
2022 was another busy year in privacy and dataprotection. Regulations surrounding privacy and data continue to develop at a rapid pace. Emerging technologies have changed the manner in which personal data is collected and used. As a result, 2023 could be an exciting and a busy year for privacy and data.
The article entitled “Facebook Opposes Irish Data Watchdog’s 265-Million-Euro Fine” ( [link] ) included these comments about Facebook challenge in Irish Court: A High Court justice granted Facebook permission to pursue litigation over the fine from the Irish DataProtection Commission, reported The Irish Times on Monday.
There is more clarity on the views of the UK dataprotection authority on whether a “Reject All” option in the first layer of a cookie consent management solution is required. This is more likely be compliant with dataprotection law, as firms will be better placed to demonstrate that the user has a genuine free choice.“
The method of dispute resolution – court or arbitration – and jurisdiction. In March 2022, they release a second version. Already, the oneNDA organization has developed a oneNDA module specific to M&A matters, and it has also launched oneDPA for standardizing dataprotection agreements. The purpose of the NDA.
The DSA will require much agency and court interpretation to give legal certainty to intermediaries and the recipients of their services. .] * * * The European Union’s Digital Services Act (“DSA”), a significant legislative act of 93 articles and 156 recitals, will become fully effective from this Saturday, February 17, 2024.
The EU Representative Actions Directive (“RAD”) was meant to have been transposed by all EU member states by December 25, 2022. Since the RAD takes the form of a directive, all EU member states had a period of 2 years ― until December 25, 2022 ― to transpose it into their national legislation. Information about collective actions.
This interest was generated among other sources by numerous complaints filed by NOYB—European Center for Digital Rights in the last year with dataprotection authorities, and has resulted in guidance and several decisions issued by regulators in recent months (e.g. in Austria, Belgium and France).
This post explores if Generative AI tools such as ChatGPT can collect our data from the Internet without our consent on the ground that the data is in the public domain. It also explores if ChatGPT’s recent ban in Italy over dataprotection norms has any lessons for India. One that’s similar to the EU approach.
In the wake of the Court of Justice of the European Union’s decision in Schrems II (covered here and here ) and Brexit, the EU and UK respectively updated and issued new cross-border transfer clauses. The SCCs and IDTA will be the transfer tool of choice for most companies sending or receiving data from the EEA or UK. What happened?
The Tribunal found that, although the data processing activities carried out by Clearview constituted the monitoring of the behaviour of UK data subjects (and therefore fell within the territorial scope of Article 2 UK General DataProtection Regulation (UK GDPR).),
“ Should we fire up this bad boy ”- Television’s Homi Bhabha to Television’s Vikram Sarabhai at India’s first ever rocket launch ( Rocket Boys, 2022 ) Back in the 60s, Dr. Vikram Sarabhai – the pioneer of India’s space program, argued against Indians staying out of space. This case will be heard next on 08 June.
The Digital Markets Act or DMA ( Regulation (EU) 2022/1925 of the European Parliament and of the Council of 14 September 2022 on contestable and fair markets in the digital sector ), which entered into force on 1 November 2022, creates many new obligations for businesses operating in the digital sector, particularly so-called “gatekeepers.”
Fast forward to the last month, the Delhi High Court used the long arm of the PMLA to classify PayPal as a ‘reporting entity’ under the PMLA. The Court rejected this premise. Main Course : Deep dive stories on card network portability, and impact of the dataprotection bill on fintechs. The data law is nearly here!
Instead of a separate regulator, the government is contemplating a body similar to the dataprotection board suggested under the latest version of the data bill. Meanwhile, courts continue to interpret. , emerging tech (read: we got to do something about AI), digital competition (whose pie is this issue anyway?),
Companies will only be able to enter into new agreements containing the old SCCs until 26 September 2021, and all contracts using the old SCCs concluded before then will need the new SCCs incorporated by 27 December 2022. Companies therefore need to decide when, and how, they will roll out the new SCCs. What do you need to do?
I think we can all agree that data privacy is a fundamental and sacred, right. We live in a country where a court of law recently ruled that the All Writs Act couldn’t compel Apple to unlock an iPhone belonging to an accused terrorists. Aba survey said that they’d experienced a data breach up 2% from the previous year.
The method of dispute resolution – court or arbitration – and jurisdiction. In March 2022, they release a second version. Already, the oneNDA organization has developed a oneNDA module specific to M&A matters, and it has also launched oneDPA for standardizing dataprotection agreements. The purpose of the NDA.
Baltimore’s ordinance sunsets on December 31, 2022, unless the City Council finds that the prohibitions remain in the public interest, in which case the ordinance may be extended for five more years. The TDPA provides for a private right of action for violation of the prohibition to sell, lease, or disclose data. See Vance v.
Connecticut’s Governor signed the state’s comprehensive privacy law into effect on May 10, 2022, adding yet another category of state privacy law. state privacy laws in California, Virginia, Colorado, and Utah to draft “An Act Concerning Protection of Consumer Data Privacy and Online Monitoring” (the “Connecticut Privacy Act” or “CTPA”).
I think we can all agree that data privacy is a fundamental and sacred, right. We live in a country where a court of law recently ruled that the All Writs Act couldn’t compel Apple to unlock an iPhone belonging to an accused terrorists. Aba survey said that they’d experienced a data breach up 2% from the previous year.
Notably, the post that captured the most eyes was about New York becoming the first state to mandate CLE in cybersecurity, privacy and dataprotection. The second most popular post was a test of the BriefCatch legal editing software using the leaked draft of the Supreme Court’s opinion in Dobbs v.
Currently serving as the Director for the Center for Law, Technology & Innovation at Michigan State University College of Law, he’s a passionate educator, teaching courses like AI and the Law, New Technologies and the Law, and Cybersecurity and DataProtection.
Currently serving as the Director for the Center for Law, Technology & Innovation at Michigan State University College of Law, he’s a passionate educator, teaching courses like AI and the Law, New Technologies and the Law, and Cybersecurity and DataProtection.
Blockbuster with the North Carolina Supreme Court decision in Canteen v. That left the majority’s discussion on the constitutionality of content moderation, which provides a modern Supreme Court take regarding the tsunami of censorship laws heading for the Supreme Court. I posted the 2022 version. The Harris v.
Background At the end of 2022, the European Commission published its draft adequacy decision on EU-US transfers of personal data. The DPF would allow free and safe data transfers between the EU and the US for US companies self-certified under DPF, bringing many commercial benefits to businesses on both sides. What’s next?
In this Data Blog post, we discuss recent enforcement actions and regulatory requirements for getting rid of old data and offer six tips for complying with these developing obligations. In February 2022, the FTC filed a complaint against WW International Inc., This obligation becomes effective on December 9, 2022.
We organize all of the trending information in your field so you don't have to. Join 5,000+ users and stay up to date on the latest articles your peers are reading.
You know about us, now we want to get to know you!
Let's personalize your content
Let's get even more personalized
We recognize your account from another site in our network, please click 'Send Email' below to continue with verifying your account and setting a password.
Let's personalize your content