Blog: US Privacy Laws
Page 17
The CCPA/CPRA's "Business to Business" Exemption: AB 1355
The California Consumer Privacy Act (CCPA (CPRA)) has attracted some criticism from businesses due to its extensive definition of personal information. The broad definition of "consumer" covers all California residents, including those acting as representatives of their employers. This has significant implications for businesses that provide products and services to other...
CCPA (CPRA): What Constitutes a "Sale" of Personal Information?
The main purpose of the California Consumer Privacy Act (CCPA/CPRA) is to enable consumers to opt out of the sale of their personal information. However, there was a lot of debate about what constitutes a "sale" of personal information. Given the serious consequences of violating the CCPA (CPRA), this ambiguity is a...
CCPA/CPRA: What Constitutes "Sharing for Business Purposes"
Many businesses are worried about the CCPA/CPRA's broad definition of "selling" personal information. Under the CCPA (CPRA), "selling" personal information includes sharing it for any "valuable consideration" (benefit). A lot of routine business activities could fall under this definition. However, there's an important exception. The definition of "selling" specifically excludes using...
What the Zoom Class Action Means For Your Business
The California Consumer Privacy Act (CCPA) has transformed the state of privacy law in the United States. As the CCPA gradually takes effect, we're already seeing consumers bringing cases against businesses for alleged violations of the act. One of the first significant CCPA cases is Cullen v Zoom Communications, Inc. The...
Privacy Laws By Country
Complying with privacy law is crucial for any business operating online. Due to the nature of online commerce and marketing, businesses often collect personal information from people in multiple legal jurisdictions. If you offer goods or services in a given country, you must obey the privacy laws of that country. We've compiled...
NY SHIELD Act: How to Implement a Data Security Program
The Stop Hacks and Improve Electronic Data Security Act (SHIELD Act) requires all covered entities to implement a "Data Security Program." Complying with the SHIELD Act's Data Security Program requirement could consume significant time and resources. Businesses must put in place administrative, technical, and physical safeguards across 13 different metrics to...