Blog - Page 81
Legal articles in easy to understand language.
NY SHIELD Data Breach Notices
The Stop Hacks and Improve Electronic Data Security Act (SHIELD Act) requires all covered entities to provide a Data Breach Notice to New York residents in the event of a data breach that exposes their private information. The SHIELD Act contains specific rules about what to include in your Data Breach...
The Complete Guide to CCPA (CPRA) Service Providers
Service providers are an important part of the CCPA, as amended by the CPRA. Under the right conditions, businesses can share personal information with service providers in a way that does not count as a "sale." However, the CCPA (CPRA) provides a very narrow definition of "service provider" and sets...
CCPA (CPRA) Toll-Free Number Requirement
The California Consumer Privacy Act (CCPA) (as amended by the CPRA) brings consumers some powerful user rights over their personal information. It also requires businesses to set up a toll-free number for consumers wishing to exercise some of those rights. Like many parts of the CCPA (CPRA), the toll-free number requirement...
CCPA (CPRA) Notices
The California Consumer Privacy Act (CCPA/CPRA) requires businesses under its scope to provide a number of notices addressing a variety of issues. In this article, we're going to look at what the CCPA (CPRA) specifically requires, how businesses are providing CCPA-compliant notice and how you can create your own notices to...
"Do Not Sell My Personal Information" Page
One of the most important aspects of the California Consumer Privacy Act (CCPA/CPRA) is consumers' "right to opt out" of the sale of their personal information. To help consumers exercise the right to opt out, the CCPA (CPRA) requires businesses to create a "Do Not Sell My Personal Information" page. If...
How the GDPR Affects Consent Under Canadian Privacy Laws
The European Union's General Data Protection Regulation (GDPR) has indirectly led to tighter rules in Canada for getting "meaningful consent." Federal and provincial regulators issued more explicit guidelines on making sure individuals really do understand the permission they give. Despite the GDPR connection, these guidelines involve domestic laws that Canadian...