Blog: Consumer Privacy
Page 5
AI Transparency and Privacy Notices: Preparing for the EU AI Act and Beyond
If your business uses AI to make decisions about people, like screening job applicants or approving loans, you must disclose this in your Privacy Policy or Privacy Notice. The EU AI Act, GDPR, and CCPA all require transparency about automated decision-making, with penalties up to €35 million for non-compliance under...
How to Handle California Consumer Data Requests (CCPA Rights Management)
To handle data requests in accordance with the California Consumer Privacy Act (CCPA), your business needs clear internal procedures, verified request channels, and documented proof that it has complied with the 45-day response deadline. The CCPA gives California residents five enforceable consumer rights, and your business must be able to receive,...
The Rise of Class Actions in Data Protection: What Companies Should Expect
Class action lawsuits are on the rise, and laws such as the European Union's (EU) Directive 2020/1828 make it easier for consumers to bring collective action against companies that breach EU privacy and data protection laws. This article explains what data protection class actions are, the role of Directive 2020/1828, common...
What to Do When You Receive a DSR via Third Party (Like Privacy Tools or Brokers)
Responding to a data subject request (DSR) has become a routine obligation under privacy laws like the GDPR and the CCPA/CPRA. But when those requests come through third parties or privacy tools, it often raises questions about how to handle verification correctly. While most privacy laws allow third parties to act...
A Privacy Officer's Guide to Building Region-Specific Privacy Policies
If you're a Privacy Officer or compliance lead at a growing business with a global reach, there are a number of drawbacks to a one-size-fits-all Privacy Policy. Customers, regulators, and even app stores expect clear, region-specific disclosures that match the data protection rights of local users. Failing to do so creates...
What Employers Can (and Can't) Monitor on Personal Devices Under Global Privacy Laws
Employers who monitor their employees' personal devices–including laptops, smartphones, and tablets–need to understand how to comply with applicable privacy laws. This article explains what employee monitoring is, details some of the main global privacy laws that apply to employee monitoring, and includes guidelines for compliance. What Is Employee Monitoring on Personal Devices? Employee...