Written by: Richard Sheinis, Esq.  On March 17 a coalition of 35 advertising groups sent California Attorney General Xavier Becerra a letter calling for a delay in the enforcement of the California Consumer Privacy Act (“CCPA”) because of COVID-19.  Enforcement of the CCPA is currently scheduled to begin July 1.  The Attorney General’s office refused the call for a delay, stating, “Right now, we’re committed to enforcing the law

Written by: Chase Langhorne, Esq. The U.S. Department of Health and Human Services (“HHS”) released a bulletin this week waiving sanctions and penalties as of March 15, 2020 for non-compliance with certain provisions of HIPAA. The waiver centers around allowing people on the front lines to adequately handle and manage COVID-19 cases. Specifically, HHS is waiving sanctions and penalties against a covered hospital that does not comply with the following

Written by: Chase Langhorne, Esq. On February 21, 2020, Croatia released its proposal to attempt to move the ePrivacy Regulation across the finish line. The ePrivacy Regulation was proposed in 2017 with the main purpose of regulating personal data as it relates to internet cookies. The initial plan was for it to pass at the same time as the General Data Protection Regulation (“GDPR”) to align all personal privacy legislation

Written by: Chase Langhorne, Esq. On February 24, 2020, Egypt’s Parliament passed the Personal Data Protection Law (“PDPL”). The law has many similarities to the European Union’s General Data Protection Regulation (“GDPR”). Scope The PDPL applies to Egyptian citizens and non-Egyptian citizens residing in Egypt. This is similar to GDPR, but slightly more limiting because GDPR applies to any person in the EU, regardless of whether they are a citizen of

Written by: Sean Cox, Esq. The California Consumer Privacy Act of 2018 (“CCPA”) officially went into effect on January 1, 2020. According to the California Attorney General, enforcement will begin on July 1, 2020. One of the most important provisions of the CCPA allows consumers to opt-out of the sale of their personal information. Among other provisions, the CCPA requires that websites must include a page called Do Not Sell

Written by: Richard Sheinis, Esq. In this business, we are all familiar with GDPR's right to erasure (commonly called "the right to be forgotten") granted by the GDPR.  The question that often comes up is when a data subject exercises their right to erasure, does the organization also have to erase the data subject's personal data in the organization's backup system? Unfortunately, the GDPR does not address personal data

Written by: Richard Sheinis, Esq. Now that the UK has a withdrawal agreement with the EU, what will this mean for data privacy for personal data in the UK, as well as for personal data that is transferred between the UK and other countries.  UK's Information Commissioner's Office ("ICO") has provided some answers.  For the time being, during the transition period of 2020, the GDPR will continue to apply

Written by: Chase Langhorne, Esq. Ireland's Data Protection Commission (DPC) has opened two separate investigations into Google and Tinder, respectively, for GDPR violations. Google The investigation into Google centers around how Google treats location data collected from end users. “The Inquiry will set out to establish whether Google has a valid legal basis for processing the location data of its users and whether it meets its obligations as a data

Written by: Richard Sheinis, Esq. On February 7, 2020 the California Attorney General published a "redline" version of the CCPA Regulations. These regulations are open for public comment until February 24, 2020. In the meantime, here are a few of the more important redline changes in the latest draft: The definition of household is clarified to mean people who reside at the same address, share a common device or

Written by: Chase Langhorne, Esq. On November 26, 2017 Australia introduced the consumer data right (CDR) which was designed to give consumers greater control over their personal data. Since that time, Australians have been waiting for the Australian Competition and Consumer Commission (ACCC) to issue rules governing exactly how a consumer will be able to exercise their CDRs. On February 4, 2020 the ACCC finally issued those rules. The rules