Data Protection News, Insights and Resources

The features that make blockchain so attractive to enterprises are also the very features that could lead to headaches like “blockchain privacy poisoning", which Gartner has named as one of the biggest risks facing organizations over the next few years.

Singapore has recently introduced a discussion paper on data portability to will not only improve options and outcomes for consumers, but will also improve transparency in data collection. Will the ease of proliferation of this personal data among more companies lead to a simple statistical increased likelihood of data and identity theft?

While proposed amendments to narrow the scope of the CCPA might tempt financial services organizations to put CCPA compliance on the backburner, that instinct might prove to be flawed for quite a few reasons.

The Ohio law represented a novel approach to data protection by providing safe harbor if the entity’s cyber security program conforms to industry recognized cybersecurity frameworks or federal regulations cited in the Act.

Big tech companies are pushing for watered-down privacy regulations that would largely permit them to continue doing business as usual. There is reason to suspect that these tech companies now view federal privacy regulations as a way to construct barriers and moats around their core business.

The €50 million fine against Google is a sign that GDPR grade transparency is here to stay. Legalistic privacy policies will always be with us of course, but the privacy world is currently primed to embrace a new “layered notice” paradigm for delivering privacy information to users on their terms.

Germany set a new precedent with an antitrust ruling against Facebook, forcing the company to make major changes to their data collection practices – German users are to be given a greater degree of notice and choice in how their data is used.

The Google GDR fine has demonstrated that most historical data, analytics & AI, and decentralized processing is illegal under the GDPR. Companies must focus on more than consent to legally process analytics and AI when those processes cannot be described with the required specificity and voluntariness at the time of data collection.

Google received €50 million in GDPR fines from French regulator CNIL for failing to adequately inform users about their data collection practices, and not giving users enough control over how their information is used. What are the lessons learnt?

Citing a potential violation of the GDPR, privacy activist Max Schrems and his digital rights nonprofit organization noyb have filed GDPR complaints against eight major streaming companies, including YouTube, Netflix, Spotify, Apple and Amazon.