With the California Consumer Privacy Act (CCPA) enforcement deadline only a month away, Chief Privacy Officers still must grapple with significant uncertainties about what exactly the law requires.

First, the final regulations issued by  the California Office of the Attorney General were just released to the public on June 2, with a request for expedited 30-business-day review by the California State Office of Administrative Law (OAL). As the California Attorney General’s Final Statement of Reasons acknowledges, the regulations contain several requirements that go beyond the text of the law (see below).[1]

Second, the California Privacy Rights Act (CPRA) initiative[2], which would significantly change the CCPA and make it very difficult to make adjustments to the legislation in the future, has been submitted to the California Secretary of State with more than 900,000 signatures. The CPRA is now subject to sampling of the validity of those signatures. The sampling is to determine by June 25 whether the initiative will appear on the November 2020 election ballot – in which case, it is widely expected to be approved. Sampling completed as of June 1 suggests that CPRA signature validity will be sufficient to put the initiative on the ballot.

Dubai’s International Financial Centre, the world class financial hub and free zone established in 2004, has an updated data protection law (“Updated Law”).  The Updated Law builds upon the DIFC’s 2007 data protection law (“Old Data Protection Law”) and now includes concepts from the EU’s GDPR, as well as other laws from around the world, […]

China’s privacy and cyber authorities have been busy in the last month enacting substantial enhancements and clarifications to data protection compliance obligations; and even more changes are expected before the end of 2020. Key highlights – and the key steps for local and international organisation to take – are as follows: 1.  New national level […]

David Cook, John Gollaglee Companies across the world have been forced to change business practices in lots of different ways in order to meet the needs of a workforce who are prevented from going to the traditional office environment. This has given rise to a cyber security risk and there has been an inevitable vulnerability […]