Privacy Plus+ News
Stay informed with our latest insights on privacy and technology trends, along with key updates from our firm.
FTC Boldly Moves into a New Era of Data Minimization and Retention
This week, let’s look at how the Federal Trade Commission has placed its focus on data minimization and retention, and consider whether this could be an inflection point in data privacy regulation.
“Data Provenance”: Navigating Ownership, Authenticity, and Rights in the Digital Age
This week, let’s examine “Data Provenance,” a concept that involves tracing the lineage of data — its origins, transformations, and ownership. We’ll also propose a new specialized application for “Data Provenance:” regulating the privacy of personal data.
E.U. and U.S. Have Agreed to A New Data Privacy Framework - What’s Old is New Again
This week, let’s look at the new self-certification procedure in the Data Privacy Framework facilitating the transfer of personal data from the European Union to the United States.
All the Talk About Chat-GPT
This week, let’s talk about Chat-GPT as Italy’s Data Protection Authority blocks it and Elon Musk and others call for freeze amidst warnings related to privacy and the existential risk posed by too-powerful AI.
Section 702, the Supreme Court, the European Parliament, and Congress
This week, we invoke Sherlock Holmes while discussing the latest news regarding Section 702 of the National Security Act, the GDPR and cross-border data transfers.
European Data Protection Authorities Set Sites on Microsoft 365
This week, let’s consider European DPAs published privacy concerns about Microsoft 365, and related risks associated with workforce productivity suites.
Meta’s Search for a (highly profitable) Legal Basis
This week, let’s consider the implications of the EDPB's new decision in the long-running dispute with Meta its behavioral advertising business model.
Legal Issues Surrounding Customer Lists
This week, let’s examine the nine (9) or more areas of law surrounding Customer Lists, which are often among the blue-ribbon prizes in fights among competitors or between employers and their departing employees.
Predicting the Future of Privacy Law into 2023
This week, let’s look ahead toward the State of Privacy in 2023. With the New Year little more than 100 days away, what should we expect?
Free Privacy Training Re: GDPR and More
This week, let’s highlight a free resource that may be helpful to any business subject to the GDPR’s requirements.
Cross-Border Data Transfer Update – New Trans-Atlantic Data Privacy Framework and UK’s International Data Transfer Agreement
This week, let’s consider the “agreement in principle” for the new U.S.-E.U Trans-Atlantic Data Privacy Framework and the UK’s International Data Transfer Agreement.
Clearview AI is “Persona non Grata”
This week, the Italian Supervisory Authority (ISA) – a regulatory body responsible for enforcing GDPR and related privacy concerns in Italy – fined Clearview AI € 20 million for GDPR violations stemming from Clearview’s data collection and processing in Italy. Let’s consider the opinion and some lessons learned.
Europe to Meta/Facebook: “You want to leave? Fine. Leave.”
This week, let’s consider a cross-border data transfer controversy under the GDPR and how Meta/Facebook is “absolutely not threatening to leave Europe.”
A New Way to Move Data from the EU to the US
This week, let’s simplify what the issuance of the new Standard Contractual Clauses really means for American businesses doing business in Europe or doing business with Europeans.
Privacy and Security Risk Management – Contractual Requirements
This week, let’s consider the contractual requirements related to data processing required under several prominent privacy laws, including the GDPR, the CCPA and CPRA, the NY Shield Act, and the new VCDPA.
Britain Moves a Step Closer to “Adequate”
This week, let’s consider data transfers under the GDPR, alongside the United Kingdom’s latest move toward a post-Brexit adequacy decision related to the transfer of personal data from the EEA to the UK.
The Digital Privacy - Artificial Intelligence Conundrum
This week, on the eve of Ant Group’s huge IPO, let’s consider how the U.S. can balance digital privacy while maintaining an AI-friendly business environment.
The E.U.-U.S. Digital Divide
This week, as Europe’s highest court invalidates the EU-US Privacy Shield, let’s consider resolving the larger issues —the improbable existence of “privacy islands” in a digital world that doesn’t respect boundaries and what your company should do now.
Privacy Notices – Nobody Reads the Small Print. Is it Time for New Legislation?
This week, let’s consider the problem with privacy notices alongside pending U.S. privacy legislation.
Airline Faces Max Fine After Self-reporting a Data Breach
This week, we consider ICO’s issuance of a £500,000 penalty against Cathay Pacific for a data breach that was self-reported in 2018.