Blog - Page 68
Legal articles in easy to understand language.
CCPA (CPRA): Does a Privacy Policy Satisfy the "Notice at Collection" Requirement?
A big part of compliance with the California Consumer Privacy Act (CCPA), as amended by the CPRA, is providing notice to consumers. The CCPA/CPRA's "notice at collection" requirement means that before you collect personal information from consumers, you must tell them what categories of personal information you are collecting and your...
Using Biometric Information in New York
The New York Stop Hacks and Improve Electronic Data Security Act (SHIELD Act) was amended in 2019 to include reference to biometric information. The SHIELD Act imposes an extensive set of requirements on businesses that own or license the biometric information of New York residents. Obligations under the SHIELD Act include...
Transfer Impact Assessment (TIA)
The EU General Data Protection Regulation (GDPR) imposes strict rules on transferring personal data out of the European Economic Area (EEA). Before you make an international data transfer by sharing personal data with another organization outside the EEA, you must ensure that the organization can protect the data to EU-equivalent standards. A...
GDPR: Don't Use Pre-Ticked Boxes for Cookies
When the General Data Protection Regulation (GDPR) passed in 2016, websites started putting up cookie banners in preparation for its 2018 enforcement date. But many of these cookie banners didn't actually comply with the new consent thresholds imposed by the GDPR. Nearly five years have passed, and most cookie consent solutions...
Why Your Privacy Policy Needs to Mirror Your Privacy Practices
Laws such as the General Data Protection Regulation (GDPR) in Europe and the California Consumer Privacy Act (CCPA/CPRA) in the U.S. require your business to have a Privacy Policy. A Privacy Policy explains how you deal with the personal data of customers. The Federal Trade Commission (FTC) issued a warning to...
Google's "Data Disclosure" Policy
In January 2021, Google will be providing additional information to Chrome users when they browse extensions and other products in the Chrome Web Store. This information will include a detailed description of how each extension collects, uses, and shares user data. Google is also cracking down on how Chrome products collect...