As we move toward a more open data sharing future, businesses must prepare now to tackle the future legislation and data privacy laws that will inevitably be placed upon them and ensure all data moving through its systems is accurate and trusted.
Data Protection
Certain types of personal data are very valuable to criminals, and can be very damaging to an individual or business if it falls into the wrong hands. As the world becomes more digital and more connected, more of this sort of data is generated and passed between various sources on a regular basis.
Government regulations and supervisory authorities aren’t just about keeping irresponsible parties in line. They also provide vital security guidance to every type of organization that handles sensitive personal, business or government information.
Data protection regulations also ensure that the end user has a transparent view of and a say in the processing of personal data. These safeguards play a significant role in everything from the preservation of civil rights to ensuring that democratic institutions function properly.
Some types of personal data are clear candidates for regulation: medical records, banking information, national ID numbers and so on. But some of these regulations also cover items that might seem relatively innocuous at first glance: home addresses, email addresses, website profile information and so on. For example, the European Union General Data Protection Regulation (GDPR) has stipulations about anything that is unique to an individual to include phone numbers and social media accounts. People have varying levels of privacy preference with these items, but they are often protected by regulation because they can be used for targeted scams and attempts at identity theft.
Given that regulations often take the size and customer count of businesses into consideration in terms of penalties and the scope of protection of personal data, compliance is particularly important for enterprise-scale organizations. You do not necessarily have to have an active business presence in a country or region; simply storing data on or moving it through servers there may subject you to their data protection rules.
CCPA has brought Europe’s GDPR push for better transparency, user control, and accountability into U.S. What are the key similarities and differences between these two laws?
An effective privacy training program can help businesses get through CCPA compliance efficiently and prepare them in managing the rapidly changing and complex regulatory landscape.
Personal data protection is a fundamental EU right and is not negotiable in trade deals, The European Commission has provided four conditions for international data flows to comply with the GDPR. Yet, there is a “get out of jail free card,” allowing restrictions to be reviewed and accorded "sympathetic" consideration.
Canada Post has been scanning address data from the outside of envelopes it delivers and selling it to third-party mail marketing lists. The Office of the Privacy Commissioner of Canada (OPCC) found that this violates a Privacy Act requirement to obtain authorization from individuals before collecting information in this way.
Google is facing a €325 million fine from French data regulator CNIL for its placement of cookies that may not have been noticed by those signing up for new accounts and its use of ads in Gmail.
A new consumer privacy act has been signed into law in Utah and takes effect as 2023 ends, the fourth state bill of this nature to be passed. It is the most business-friendly of the bunch.
A new report from ad evaluation firm Adalytics finds that some of YouTube’s targeted ads are still slipping through the cracks, and potentially violating federal child privacy law. The revelation has prompted two US Senators to write a letter to the FTC.
With the CCPA fully in force as of July 1, it is now more important than ever for small businesses to ensure that they are fully aware of their responsibilities and the steps they need to stay to stay compliant.
The exit of the United Kingdom from the EU has caused turmoil in world markets and has far reaching consequences for those companies in the European Union doing business with the country – and vice versa. There has also been some uncertainty about how the authorities based in London will be treating data security and privacy issues. The consensus seems to be that companies doing business with the second largest economy in Europe (after Germany) should be adopting a ‘business as usual’ approach. However, will this necessarily be the case in the future? Will global companies with a British connection (including those in Asia) be forced to revisit how they treat data security and privacy issues when dealing with the United Kingdom – and will British companies move away from the rules that have been set in place by Brussels? We take a closer look.










