article thumbnail

Face Forward Part 2: Proposed Legislation and Strategies for Compliant Use of Facial Recognition

Debevoise Data Blog

Further, in a case that we have covered previously involving a supermarket using video surveillance with facial recognition capabilities, the Spanish data protection authority (the “AEDP”) fined grocer Mercadona for violating numerous provisions of the EU’s General Data Protection Regulation.

article thumbnail

Cybersecurity in the Remote Work Era: AI, Employees and an Integrated Defense – With SessionGuardian’s Jordan Ellington and Oren Leib, and Katten’s Trisha Sircar (TGIR Ep. 211)

3 Geeks and a Law Blog

Generally however, it’s hard for global law firms right that sometimes have to compete with conflicting regimes. Not all, I believe only one or two state laws in the US require it. However, if reasonable, it’s based on a reasonableness standard based on the information security practices, so yes, there’s a cost to defend that.

Law firm 189
professionals

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Trending Sources

article thumbnail

Cybersecurity in the Remote Work Era: AI, Employees and an Integrated Defense – With SessionGuardian’s Jordan Ellington and Oren Leib, and Katten’s Trisha Sircar (TGIR Ep. 211)

Legal Tech Monitor

Generally however, it’s hard for global law firms right that sometimes have to compete with conflicting regimes. Not all, I believe only one or two state laws in the US require it. However, if reasonable, it’s based on a reasonableness standard based on the information security practices, so yes, there’s a cost to defend that.

article thumbnail

Face Forward: Strategies for Complying with Facial Recognition Laws

Debevoise Data Blog

The TDPA provides for a private right of action for violation of the prohibition to sell, lease, or disclose data. State Laws Permitting but Regulating Collection and Use of Biometric Identifiers, including Facial Data.

Law 52
article thumbnail

A New Era of FTC Privacy and Cybersecurity Oversight: Top Ten Things Companies Should Know When Assessing FTC Compliance and Exposure

Debevoise Data Blog

To establish individual liability, the FTC must show that the individual defendant participated directly in the illegal practices or had authority to control them. 27] Examples include the telemarketing sales rule, children’s online privacy protection rule, and health breach notification rule. [28]