Blog: Consumer Privacy
Page 5
Consent or Pay
Consent or pay is a business model where websites give users a choice between paying for a service, consenting to share personal data, or not using the service at all. The legality of this is in question, as most privacy laws require users to provide freely-given consent to sharing their...
AI Transparency and Privacy Notices: Preparing for the EU AI Act and Beyond
If your business uses AI to make decisions about people, like screening job applicants or approving loans, you must disclose this in your Privacy Policy or Privacy Notice. The EU AI Act, GDPR, and CCPA all require transparency about automated decision-making, with penalties up to €35 million for non-compliance under...
How to Handle California Consumer Data Requests (CCPA Rights Management)
To handle data requests in accordance with the California Consumer Privacy Act (CCPA), your business needs clear internal procedures, verified request channels, and documented proof that it has complied with the 45-day response deadline. The CCPA gives California residents five enforceable consumer rights, and your business must be able to receive,...
The Rise of Class Actions in Data Protection: What Companies Should Expect
Class action lawsuits are on the rise, and laws such as the European Union's (EU) Directive 2020/1828 make it easier for consumers to bring collective action against companies that breach EU privacy and data protection laws. This article explains what data protection class actions are, the role of Directive 2020/1828, common...
What to Do When You Receive a DSR via Third Party (Like Privacy Tools or Brokers)
Responding to a data subject request (DSR) has become a routine obligation under privacy laws like the GDPR and the CCPA/CPRA. But when those requests come through third parties or privacy tools, it often raises questions about how to handle verification correctly. While most privacy laws allow third parties to act...
A Privacy Officer's Guide to Building Region-Specific Privacy Policies
If you're a Privacy Officer or compliance lead at a growing business with a global reach, there are a number of drawbacks to a one-size-fits-all Privacy Policy. Customers, regulators, and even app stores expect clear, region-specific disclosures that match the data protection rights of local users. Failing to do so creates...