Inside Privacy

JANUARY 4, 2024

In late December 2023, the Federal Communications Commission (“FCC”) published a Report and Order (“Order”) expanding the scope of the data breach notification rules (“Rules”) applicable to telecommunications carriers and interconnected VoIP (“iVoIP”) providers. state data breach notification laws, which have a similar good faith exceptions.

Data protection 79

Data protection Federal law State law Law 79

Legal IT Group

JANUARY 22, 2024

With this regard, it is essential to know about the privacy legislation of this country since, nowadays, most internet businesses process the personal data of their clients, and they should do it in compliance with data protection laws. ” Thus, the Australian Privacy Act also aims to have a GDPR level of data protection.

Data protection 52

Data protection Compliance Litigator Litigation 52

Inside Privacy

JUNE 15, 2023

It would define consumer health data as “any personal data that a controller uses to identify a consumer’s physical or mental health condition or diagnosis, and includes, but is not limited to, gender-affirming health data and reproductive or sexual health data.” Consumer Health Data Requirements.

Data protection 119

Data protection 119

Inside Privacy

NOVEMBER 8, 2023

On October 12, 2023 the Italian Data Protection Authority (“Garante”) published guidance on the use of AI in healthcare services (“Guidance”). Accountability, definition of roles and privacy by design and by default The Garante stresses the importance of the principles of privacy by design and by default, connected with accountability.

Data protection 65

Data protection Case law Law Law 65

Legal IT Group

SEPTEMBER 29, 2023

Brazil’s Lei Geral de Proteção de Dados Pessoais (or LGPD), similar to GDPR, CCPA and PIPEDA, regulates personal data protection. If the company does not process personal data in Brazil but still processes data to offer or supply goods or services to Brazil, the LGPD also applies in this case. Apparently not.

Data protection 52

Data protection Compliance Court Law 52

Inside Privacy

JUNE 1, 2023

It has been well-publicized that the Irish Data Protection Commission (“DPC”) has imposed a record €1.2 billion fine and corrective measures under the GDPR against Meta Ireland (“Meta”) in a long-running dispute relating to cross-border data transfers and the EU standard contractual clauses (“SCCs”).

Data protection 69

Data protection Court Compliance Hearing 69

Inside Privacy

APRIL 18, 2023

5 limits its definition of “profiling” to “solely automated processing.” Sensitive Data: Controllers must obtain consent before processing a consumer’s sensitive data. Notably, S.B. identifies a consumer within a radius of 1,750 ft.). Controller & Processor Contracts: S.B. 5 uses the terms “controller” and “processor.”

Data protection 74

Data protection Attorney Law Law 74

Wisblawg

JANUARY 2, 2024

Microsoft recently announced that Copilot with commercial data protection will be available to all faculty and higher education students ages 18 and above. This looks especially intriguing for productivity improvement but at $30 per month is definitely not free.

Data protection 40

Data protection 40

Inside Privacy

NOVEMBER 20, 2023

On November 16, 2023, the European Data Protection Board (“EDPB”) issued draft Guidelines 2/2023 on Technical Scope of Art. 5(3) of ePrivacy Directive (“Guidelines”). Article 5(3) is the provision that requires consent before storing or accessing information on an end user’s device.

Time-tracking 57

Time-tracking Data protection Software Law 57

Debevoise Data Blog

NOVEMBER 22, 2022

The EU’s General Data Protection Regulation 2016 (the “GDPR”) changed the global privacy landscape, and has been called the “gold standard” for data protection regulation. When Are Data Protection Assessments Required? Recently, a number of U.S. Recently, a number of U.S.

Data protection 52

Data protection Law Law Compliance 52

Debevoise Data Blog

OCTOBER 31, 2023

Seven Takeaways from the Response Paper The definition of AI is a key gating question. The definition of “artificial intelligence” has been a contentious point in multiple AI legislative processes – including the draft EU AI Act – and it appears that the UK Financial Authorities could face similar challenges.

Compliance 52

Compliance Due diligence Machine learning Data protection 52

Debevoise Data Blog

MARCH 26, 2023

As multi-jurisdiction data protection concerns expand and opportunities to rely on a lead supervisory authority may narrow , the EDPB is emphasising consistency of decisions between national supervisory authorities through, among other measures, the development of approval procedures that require a cooperation phase and the creation of task forces.

Data protection 52

Data protection Compliance Court Law 52

Lawyerist

MARCH 2, 2023

This year, sites spanned Data Protection, Mergers & Acquisitions, Family Law, and Personal Injury, and more. Cybernetic Law Designer: G Digital Cybernetic Law definitely has its ideal client in mind with the design. The Best Law Firm Websites Contest of 2023 saw entrants from all over the world and practice areas.

Law firm 98

Law firm Law Law Data protection 98

Debevoise Data Blog

NOVEMBER 21, 2023

Data protection & AI: In particular: (i) the French CNIL published its first set of guidance on GDPR compliance when developing AI tools; and (ii) the UK ICO issued a preliminary enforcement notice against Snap over its AI chatbot, alleging that Snap had not adequately assessed the privacy risks posed to child users of the tool.

Data protection 52

Data protection Compliance Failure-to-appear e-records 52

Inside Privacy

APRIL 12, 2023

These requirements cover a wide range of issues that are frequently debated in relation to the governance of generative AI globally, such as data protection, non-discrimination, bias and the quality of training data. This blog post identifies a few highlights of the draft Measures.

Intellectual Property 138

Intellectual Property Data protection Law Law 138

Debevoise Data Blog

DECEMBER 22, 2023

For example, the Garante notes the need to incorporate data protection by design and by default principles within any AI systems used in the healthcare space. In particular, the paper recommends the use of internal data access controls, regular auditing of data security measures, and the use of data protection impact assessments.

Data protection 52

Data protection Time-tracking Compliance Machine learning 52

Inside Privacy

APRIL 24, 2023

For example, in October 2022, the Bank of England and Financial Conduct Authority (“FCA”) jointly released a Discussion Paper on Artificial Intelligence and Machine Learning considering how AI in financial services should be regulated and, in March 2023, the ICO updated its Guidance on AI and Data Protection.

Intellectual Property 69

Intellectual Property Data protection Machine learning Compliance 69

Debevoise Data Blog

FEBRUARY 6, 2023

Under ColoPA, “publicly available” information is excluded from its definition of personal data. We recently noted this provision echoes similar consent requirements in the General Data Protection Regulation (“GDPR”). Additionally, consumers must be able to withdraw consent at any given time. Dark Patterns Forbidden.

Data protection 52

Data protection Hearing Law Law 52

Legal Tech Monitor

MAY 3, 2023

To truly safeguard our digital assets, we need to employ multiple layers of data protection But [having strong passwords] is not enough. Hackers are becoming more sophisticated in their tactics, and relying solely on passwords for protection is like leaving your front door unlocked in a high-crime area.

Lawyer 59

Lawyer Data protection Time-tracking 59

TechLaw Crossroads

MAY 3, 2023

To truly safeguard our digital assets, we need to employ multiple layers of data protection But [having strong passwords] is not enough. Hackers are becoming more sophisticated in their tactics, and relying solely on passwords for protection is like leaving your front door unlocked in a high-crime area. It’s just an illusion.

Lawyer 59

Lawyer Data protection Time-tracking 59

Inside Privacy

MAY 15, 2023

3) Does the definition of “processing” provided in Article 4(2) GDPR cover a situation where personal data are used during the test phase of a mobile application? The definition of “processing” covers using personal data to test a mobile application.

Court 52

Court Data protection 52

Debevoise Data Blog

SEPTEMBER 19, 2022

Governor Newsom stated that he is “thankful to Assemblymembers Wicks and Cunningham and the tech industry for pushing these protections and putting the wellbeing of our kids first.” Notable affirmative obligations include: Data Protection Impact Assessments (“DPIAs”). Definition of “Child” Under age 18. Under age 18.

Data protection 52

Data protection Compliance Time-tracking Attorney 52

Debevoise Data Blog

APRIL 29, 2022

In prior posts, we have written about the evolving state privacy law landscape, including how to prepare for state privacy laws coming into effect in 2023 here ; various aspects of the CCPA and CPRA, including here and here ; and the Virginia Consumer Data Protection Act (“VCDPA”) here. UCPA § 13-61-103(31)(b)(iii).

Law 52

Law Law Data protection Attorney 52

Debevoise Data Blog

MARCH 4, 2021

state with a comprehensive privacy law, with Governor Ralph Northam’s signing of the Virginia Consumer Data Protection Act (“VCDPA”) on March 2, 2021. law in the direction of its overseas cousin, the European Union’s General Data Protection Regulation (“GDPR”). What data is covered by VCDPA? It also pulls U.S.

Data protection 52

Data protection Law Law Compliance 52

Inside Privacy

JULY 14, 2023

These topics range from AI governance, training data, tagging and labeling to data protection and user rights. As the first comprehensive AI regulation in China, the Measures cover a wide range of topics touching upon how Generative AI Services are developed and how such services can be offered.

Intellectual Property 52

Intellectual Property Data protection Law Law 52

Richmond Journal of Law and Technology

APRIL 11, 2023

14] Concerns, interest, and public outcries over data security have been increasing. [15] 15] Increased awareness of companies profiting from lax data security systems and personal information, along with high-profile data breaches, has heightened concerns about cybersecurity in the private sector. [16] Amazon.com, Inc.,

Data protection 52

Data protection Software Defendant Law 52

Debevoise Data Blog

DECEMBER 1, 2021

Addressing the medical privacy essentials: HIPPA and the new challenges posed by the rise of telemedicine, especially during the Covid-19 pandemic, this chapter closely examines medical privacy and it contains helpful practice notes pertaining to HIPPA’s intricate definitions and requirements. practitioners: European Union, the U.K.,

Law 52

Law Law Data protection Litigator 52

3 Geeks and a Law Blog

JULY 11, 2023

And I think, really, really have to educate and continuously, you know, alert employees to this, you know, made sure there’s, you know, safe document destruction when data is done, you know, we all print out documents to read them as lawyers. So I definitely think data. I mentioned employee errors, but also insider threats.

Law firm 189

Law firm Time-tracking Due diligence Attorney 189

MatterSuite

JANUARY 9, 2024

Let’s delve into the various aspects of recurring payments, from their definitions to the advantages they bring to law firms. Topics will include encryption standards, compliance with data protection regulations, and the importance of selecting secure payment gateways.

Law firm 59

Law firm Law Law Time-tracking 59

Debevoise Data Blog

SEPTEMBER 14, 2022

Together with the California Attorney General’s prior enforcement examples , these enforcement examples shed light on how the California Attorney General views the definition of a “sale” under the CCPA, and suggest compliance steps that businesses might consider undertaking to mitigate enforcement risks.

Analytics 52

Analytics Compliance Failure-to-appear Attorney 52

MatterSuite

JANUARY 9, 2024

Let’s delve into the various aspects of recurring payments, from their definitions to the advantages they bring to law firms. Topics will include encryption standards, compliance with data protection regulations, and the importance of selecting secure payment gateways.

Law firm 52

Law firm Law Law Time-tracking 52

Clio

JANUARY 30, 2024

GDPR : To help address global needs for enhanced data security, in 2018, Europe introduced a unified data protection law, the General Data Protection Regulations (GDPR). To ensure your provider will do you more good than harm with your data, carefully vet potential vendors.

Law firm 98

Law firm Law Law Due diligence 98

Debevoise Data Blog

MAY 23, 2022

Like the CCPA/CPRA and ColoPA, the CTPA defines “sale” to include the exchange of data for monetary or other valuable consideration. This contrasts with the VCDPA’s and the UCPA’s definition of “sale,” which is limited to an exchange of personal data for only monetary consideration. CTPA § 1(26). CTPA §§ 1(27) & 6(a)(4).

Law 40

Law Law Compliance Attorney 40

Debevoise Data Blog

JULY 12, 2022

state privacy law, including updates to the California Consumer Privacy Act (“CCPA”) and the California Privacy Rights Act (“CPRA”), the Colorado Protect Personal Data Privacy Act (“ColoPA”), the Connecticut Privacy Act (“CTPA”), the Virginia Consumer Data Protection Act (“VCDPA”), and the Utah Consumer Privacy Act (“UCPA”).

State law 52

State law Federal law Compliance Data protection 52

Ron Friedmann

JULY 30, 2020

Mark on Digital Transformation for 10 Minutes “Digital transformation” is often uttered but has not definition in the legal market. How can law firms square privacy and data protection with more data analytics? But lawyers still are happy to delegate the tech. Like Uber, it would have ratings of providers.

Legal tech 130

Legal tech Legal tech Law firm Lawyer 130

Ikigai Law

FEBRUARY 9, 2023

Largely, the government is open to comments from stakeholders on the definition of ‘online games’ and other issues. Other bills that might be discussed include the draft Digital Personal Data Protection Bill and the Telecommunication Bill. A consultation, extension and a few days later – attempt to censor fact check?

Due diligence 52

Due diligence Data protection Hearing Compliance 52

Debevoise Data Blog

MAY 2, 2023

This includes the definition of “high-impact” AI and the list of AI use cases that would be banned outright. These include transparency requirements and risk-management systems that identify, assess, and mitigate the risks of harm from high-impact AI systems.

Compliance 52

Compliance Time-tracking Data protection Law 52