Compliance

France: the CNIL has released its annual dawn raid Program for 2023: four national priorities and one priority coming from the EDPB!

20 March 2023 20 March 2023 / Annual Program, CNIL, Compliance, Cybersecurity, DPO, French data protection law, General Data Protection, Health data, mobile app, Smart camera

Authors: Denise Lebeau-Marianna, Divya Shanmugathas and Lucie Dubecq-Princeteau On 15 March 2023, the French Supervisory Authority (the “CNIL”) unveiled in a post its four key priorities regarding its upcoming investigations for 2023 targeting specific sectors (I), to which it added another topic related to DPO in line with the coordinated enforcement framework of the European …

France: the CNIL has released its annual dawn raid Program for 2023: four national priorities and one priority coming from the EDPB! Read More »

FRANCE: THE FIRST CNIL STANDARD REGULATION FOR BIOMETRIC SYSTEMS IN THE WORKPLACE

11 April 2019 11 April 2019 / Biometric data, CNIL, Compliance, France

By Denise Lebeau-Marianna (Partner) & Alexandre Balducci (Associate) Why did the CNIL adopt a specific regulation for the use of biometric data processing in the workplace? In accordance with Article 9 (4) of the General Data Protection Regulation (GDPR) which provides that “Member States may maintain or introduce further conditions, including limitations, with regard to …

FRANCE: THE FIRST CNIL STANDARD REGULATION FOR BIOMETRIC SYSTEMS IN THE WORKPLACE Read More »

FTC Updates COPPA Guidance: Six-Step Compliance Plan for Your Business

22 June 2017 30 January 2019 / Compliance, Cybersecurity, Data Security

Written by Michelle Anderson and Samantha Glazer In a June 21, 2017 blog post, the FTC announced updates to its Six-Step Compliance Plan for Your Business under the Children’s Online Privacy Protection Act (COPPA). The revisions make clear that the FTC considers new business models (e.g., voice-activated devices) and products (e.g., connected toys) to be covered under COPPA. …

FTC Updates COPPA Guidance: Six-Step Compliance Plan for Your Business Read More »

EUROPE: ECJ – Dynamic IP addresses may constitute personal data

20 October 2016 26 January 2018 / Compliance, Data Protection, Enforcement, EU Regulations, GDPR, Privacy

By Jan Pohle and Jan Spittka In its landmark decision in the case Breyer v. Federal Republic of Germany (decision dated 19 October 2016, case number C-582/14), the European Court of Justice (ECJ) not only ended the long and tricky debate whether dynamic IP addresses constitute personal data even if the data controller processing the …

EUROPE: ECJ – Dynamic IP addresses may constitute personal data Read More »

Russia: Important changes to Russian data protection rules

5 March 2015 30 January 2019 / Compliance, Data Protection

By Michael Malloy and Pavel Arievich On July 20, 2014 a new law amending the law on data protection and law on information was signed off by the Russian president and thus was officialy adopted. The law, as further clarified, will come into force on September 1, 2015. The law requires all personal data operators …

Russia: Important changes to Russian data protection rules Read More »

Congress makes compliance with the confusing Video Privacy Protection Act Easier

9 January 2013 5 February 2019 / Compliance, Privacy

By Jim Halpert Congress has amended the Video Privacy Protection Act (VPPA) to make it easier for businesses to obtain consent to share personally identifying information regarding consumers’ video viewing choices. The VPPA is a 1988 law passed in response to the disclosure of video rental records of the Supreme Court nominee Judge Robert H. Bork …

Congress makes compliance with the confusing Video Privacy Protection Act Easier Read More »

Mobile Apps and Privacy — A Global Issue: Are you in Compliance with Australian Privacy Law?

27 November 2012 5 February 2019 / Australia, Compliance, Privacy

By Alec Christie At the end of October, we talked about the California Attorney General’s enforcement of its privacy laws against mobile app providers, noting that the California AG sent letters to numerous mobile app providers alleging that they were in violation of California law by failing to maintain a privacy policy for the app. We emphasized that app providers should …

Mobile Apps and Privacy — A Global Issue: Are you in Compliance with Australian Privacy Law? Read More »

FTC Publishes Guidelines Designed to Assist Mobile App Providers with Privacy Compliance

18 September 2012 5 February 2019 / Compliance, Privacy

By Jennifer Kashatus Earlier this month, the FTC published guidelines designed to assist mobile app providers in complying with privacy and truth-in-advertising principles. In the guidelines, the FTC walks through certain privacy principles, which it set forth in its Privacy Report issued last March. Specifically, the FTC encourages mobile app providers: to incorporate privacy principles into the design …

FTC Publishes Guidelines Designed to Assist Mobile App Providers with Privacy Compliance Read More »

March 1 Is Deadline to Update Vendor Agreements in Compliance with Massachusetts Data Security Regs

19 February 2012 5 February 2019 / Compliance, Data Security, Privacy

By Jennifer Kashatus Businesses that own or license any personal data regarding Massachusetts residents have until March 1, 2012, to update vendor agreements to include requirements that vendors implement and maintain a data security program that complies with 201 Code of Mass. Reg. 17.00. In 2008,Massachusetts enacted the Regulations – a set of comprehensive and detailed data …

March 1 Is Deadline to Update Vendor Agreements in Compliance with Massachusetts Data Security Regs Read More »

Privacy Matters

DLA Piper's Global Privacy and Data Protection Resource