Blog: Legal Requirements

Page 12

Apple's New Opt-In Consent for Advertising Identifiers

Apple's iOS 14 will require developers to request opt-in consent before tracking users with Apple's ID for Advertisers (IDFA). Failing to abide by the new rules will be a serious violation of Apple's App Store Review Guidelines that could lead to the removal of your app. The new rule was first...

The California Privacy Rights Act (CPRA)

On July 1, 2020, California's CCPA became enforceable. A few days prior, privacy advocacy group, "California for Consumer Privacy" (CFCP) declared it collected almost a million signatures to have the California Privacy Rights Act (CPRA) placed on the November 2020 ballot. Whether your business is in California or not, you should...

App Privacy Details Labels for Apple App Store Connect

From December 8, 2020, iOS and tvOS app developers need to provide Apple with detailed privacy information before uploading a new app or updating an existing app in the App Store. Apple has a lot of questions for developers. Among other things, the company wants to help users understand how your...

How EU and U.S. Privacy Laws Apply to Foreign Businesses

Privacy law evolved to protect citizens against state surveillance. But it increasingly focuses on protecting citizens from online surveillance by international businesses. The internet's porous borders have forced lawmakers to extend the jurisdiction of national privacy laws. Increasingly, such laws now apply both to domestic and foreign businesses. We're going to look...

Washington D.C. Security Breach Protection Amendment Act of 2019

Following several other US states, and many legal jurisdictions around the world, Washington, D.C. has strengthened one of its key privacy laws: the Washington D.C. Data Breach Notification Law. The Security Breach Protection Amendment Act of 2019, B23-0215, makes several important changes to the D.C. data breach law, including a broader...

Why the EU-U.S. Privacy Shield Was Invalidated

Editor's Note: In July of 2023, the new EU-U.S. Data Privacy Framework was adopted. On July 16, 2020, the Court of Justice of the European Union (CJEU) delivered its judgment on the case of Data Protection Commissioner v Facebook Ireland Ltd and Maximillian Schrems (otherwise known as "Schrems II"). The CJEU decided...