Blog - Page 66
Legal articles in easy to understand language.
Maryland's PIPA - Personal Information Protection Act
Maryland's Personal Information Protection Act ("PIPA") is a privacy law that became effective on January 1, 2008. It's also known as Maryland's Data Breach Notification Law. Since 2008, a series of amendments were passed that revised and enhanced the definitions of private information to include biometric data. State legislators wrote PIPA...
FAQ: Handling Trademark Violations in the U.S.
Many business owners entirely overlook a step that's genuinely beneficial when first starting out. This step is registering a trademark, which puts all of your competitors on notice that you're staking a claim to a corporate image. Many business owners don't stop to consider just how important registering a trademark can...
Washington Biometric Privacy Law (H.B. 1493)
In this article, we'll be taking a look specifically at the Washington Biometric Privacy Law (H.B. 1493), Washington state's effort at protecting the biometric data of its residents and what you need to do to comply. What is Biometric Data? Biometric data is data related to personal, unique information such as your...
CCPA (CPRA): Does a Privacy Policy Satisfy the "Notice at Collection" Requirement?
A big part of compliance with the California Consumer Privacy Act (CCPA), as amended by the CPRA, is providing notice to consumers. The CCPA/CPRA's "notice at collection" requirement means that before you collect personal information from consumers, you must tell them what categories of personal information you are collecting and your...
Using Biometric Information in New York
The New York Stop Hacks and Improve Electronic Data Security Act (SHIELD Act) was amended in 2019 to include reference to biometric information. The SHIELD Act imposes an extensive set of requirements on businesses that own or license the biometric information of New York residents. Obligations under the SHIELD Act include...
Transfer Impact Assessment (TIA)
The EU General Data Protection Regulation (GDPR) imposes strict rules on transferring personal data out of the European Economic Area (EEA). Before you make an international data transfer by sharing personal data with another organization outside the EEA, you must ensure that the organization can protect the data to EU-equivalent standards. A...