Data Protection News, Insights and Resources

California’s Attorney General and legislature are currently proposing amendments to the California Consumer Privacy Act (CCPA). Their proposals, however, may do little to aid businesses in knowing how to comply with CCPA, and may instead dramatically increase liability risks for non-compliance.

Establishing a global financial data sharing standard, free to everyone to use, can empower and protect consumers, while also supporting efforts to deliver new products and services that put people in more direct control of their finances.

FEMA has acknowledged a “major privacy incident” where nearly 2.5 million U.S. disaster survivors had their personal information shared with a third-party contractor responsible for setting up temporary housing.

Facebook password leak has exposed up to 600 million user's plaintext passwords to company employees. And this appears to have been ongoing since 2012. Will this add more fuel on the antitrust fire?

Recent study shows that 72% of U.S. small businesses support improvements to privacy regulations yet 52% also believe that there will be a negative impact to their business. And only 15% believe that policy makers will pass regulations that do not adversely affect small businesses.

The features that make blockchain so attractive to enterprises are also the very features that could lead to headaches like “blockchain privacy poisoning", which Gartner has named as one of the biggest risks facing organizations over the next few years.

Singapore has recently introduced a discussion paper on data portability to will not only improve options and outcomes for consumers, but will also improve transparency in data collection. Will the ease of proliferation of this personal data among more companies lead to a simple statistical increased likelihood of data and identity theft?

While proposed amendments to narrow the scope of the CCPA might tempt financial services organizations to put CCPA compliance on the backburner, that instinct might prove to be flawed for quite a few reasons.

The Ohio law represented a novel approach to data protection by providing safe harbor if the entity’s cyber security program conforms to industry recognized cybersecurity frameworks or federal regulations cited in the Act.

Big tech companies are pushing for watered-down privacy regulations that would largely permit them to continue doing business as usual. There is reason to suspect that these tech companies now view federal privacy regulations as a way to construct barriers and moats around their core business.