With the Personal Information Protection Act 2016 (PIPA) now in full effect (from 1 January 2025), individuals have new rights, including the right to access personal information held by organisations about them. Requests can...more
On May 11, 2023, the Tennessee Information Protection Act (“TIPA”) was signed into law effective on July 1, 2025. In doing so, Tennessee has joined the patchwork of U.S. consumer privacy laws following the enactment of the...more
On April 21, Tennessee lawmakers approved and sent to Governor Bill Lee for signature, the Tennessee Information Protection Act (TIPA), one of nine different state consumer privacy laws that are generally considered to be...more
On August 20, 2021, China passed its first general data protection law, called the Personal Information Protection Law (“PIPL”). The law is set to take effect on November 1, 2021 (two months away), and it applies to both (1)...more
The Republic of Korea (South Korea or ROK) had been tracking the spread of the novel coronavirus in a manner sensitive to the privacy of its citizens, but the government has now admitted that personally identifiable data is...more
The OIPC has issued recent guidance for private sector organizations operating in British Columbia, which include provincially or federally incorporated companies that conduct business in the province and are subject to the...more
On November 2018, the South Korean National Assembly considered a bill to amend the Personal Information Protection Act (“PIPA”) to give the Personal Information Protection Commission (“PIPC”) enforcement powers of its own....more
Continuing a trend in the last few years, in 2017, eight states amended their security breach notification laws to expand definitions of “personal information”, specify the timeframe in which notification must be provided,...more
On January 1, 2017, Illinois ushered in a broader and stronger personal information and data breach regime. The Illinois Personal Information Act (PIPA), 815 ILCS § 530, applies any entity that “handles, collects,...more
Sophisticated phishing scams and muscular hacking efforts continue to compromise personal and sensitive information held by insurers, hospital systems, and businesses large and small. In response, many states have...more