The amendments clarify that a plaintiff is only entitled to liquidated damages for up to one violation per person. Businesses had previously faced steep settlements or damage awards into the billions of dollars....more
Nevada’s new consumer health data law—like Washington’s My Health My Data Act—implements strict—and separate—consent requirements for the collection and sharing of an individual’s health data, with few exceptions.
March...more
Washington’s My Health My Data Act implements strict—and separate—consent requirements for the collection and sharing of an individual’s health data, with few exceptions.
As of March 31, 2024 the Washington My Health My...more
4/2/2024
/ Compliance ,
Compliance Dates ,
Consent ,
Consumer Privacy Rights ,
Genetic Testing ,
Health Care Providers ,
Mental Health ,
Notice Requirements ,
Personal Information ,
PHI ,
Privacy Laws ,
Reproductive Healthcare Issues ,
Sensitive Personal Information ,
State Privacy Laws
The amended version of the bill—which itself amends Colorado’s Privacy Act—now heads for final passage and governor signature.
The Colorado state legislature is close to final passage of the “Act Concerning Protection the...more
Global Privacy Controls, vendor management, sensitive personal information, and the use of Ad Tech; new U.S. state data protection laws introduce twists to traditional notions of American data protection law.
In the U.S.,...more
11/17/2023
/ Adtech ,
Audits ,
Consent ,
Consumer Privacy Rights ,
Cybersecurity ,
Data Collection ,
Data Privacy ,
Data Protection ,
Disclosure Requirements ,
Personal Data ,
Privacy Laws ,
Recordkeeping Requirements ,
Sensitive Personal Information ,
State Privacy Laws ,
Third-Party Service Provider
U.S. states are moving to also regulate social media as social media laws—such as Utah’s which requires prior parental consent for those under the age of 18—in addition more broadly regulating data protection and personal...more
While the reform is a long way away from a certainty, it represents a departure of the UK from the EU’s strict adherence and adoption of the General Data Protection Regulation which came into effect in 2018.
Earlier this...more
3/22/2023
/ Consent ,
Cookies ,
Data Processors ,
Data Protection ,
Data Protection Officers (DPOs) ,
EU ,
General Data Protection Regulation (GDPR) ,
International Data Transfers ,
Prior Express Consent ,
Proposed Legislation ,
UK ,
UK GDPR
Colorado Connecticut, and Virginia landed on requiring opt-in, prior consent before a business can collect sensitive personal information; while California and Utah landed on different forms of opt-out rights that allow...more
Specifically, the group is alleging that websites are commonly using deceptive cookie banners that do not adhere to the GDPR’s express consent requirements.
In early August, the European Union data protection advocacy...more
The brief FTC note indicates the agency will look to combat poor security practices, protect against the misuse of personal information, and discrimination arising from algorithmic decision-making.
Last month, the...more
1/21/2022
/ Algorithms ,
Congressional Committees ,
Consent ,
Data Security ,
Federal Trade Commission (FTC) ,
Personal Data ,
Personal Information ,
Privacy Concerns ,
Proposed Rules ,
Rulemaking Process ,
Unfair or Deceptive Trade Practices