Blog: US Privacy Laws
Page 14
NY SHIELD Act: How to Implement a Data Security Program
The Stop Hacks and Improve Electronic Data Security Act (SHIELD Act) requires all covered entities to implement a "Data Security Program." Complying with the SHIELD Act's Data Security Program requirement could consume significant time and resources. Businesses must put in place administrative, technical, and physical safeguards across 13 different metrics to...
Consumer Rights Under the CCPA (CPRA)
One of the biggest responsibilities for businesses covered by the California Consumer Privacy Act (CCPA) is to facilitate consumers' rights under the law. And the CPRA expanded the rights granted under the CCPA. This means putting systems in place to allow consumers to make consumer rights requests, and then fulfilling those...
NY SHIELD Data Breach Notices
The Stop Hacks and Improve Electronic Data Security Act (SHIELD Act) requires all covered entities to provide a Data Breach Notice to New York residents in the event of a data breach that exposes their private information. The SHIELD Act contains specific rules about what to include in your Data Breach...
The Complete Guide to CCPA (CPRA) Service Providers
Service providers are an important part of the CCPA, as amended by the CPRA. Under the right conditions, businesses can share personal information with service providers in a way that does not count as a "sale." However, the CCPA (CPRA) provides a very narrow definition of "service provider" and sets...
CCPA (CPRA) Toll-Free Number Requirement
The California Consumer Privacy Act (CCPA) (as amended by the CPRA) brings consumers some powerful user rights over their personal information. It also requires businesses to set up a toll-free number for consumers wishing to exercise some of those rights. Like many parts of the CCPA (CPRA), the toll-free number requirement...
CCPA (CPRA) Notices
The California Consumer Privacy Act (CCPA/CPRA) requires businesses under its scope to provide a number of notices addressing a variety of issues. In this article, we're going to look at what the CCPA (CPRA) specifically requires, how businesses are providing CCPA-compliant notice and how you can create your own notices to...