Another Year Wasted for U.S. Federal Data Privacy Legislation
As the rest of the world continues to move forward with national data privacy legislation, the United States continues its well-established habit of proposing piecemeal data privacy laws that go nowhere
California Privacy Protection Agency (CPPA) Publishes Revised Draft Cybersecurity Audit Regulations in Advance of December Board Meeting
On November 8, 2023, the CPPA published an updated draft of its cybersecurity audit regulations, intended, in part, to facilitate board discussion and public participation during the upcoming CPPA board meeting...
EU-UK Data Privacy Round Up
November was a busy month for data privacy. See below for updates to the EU AI Act, the Information Commissioner’s Office’s (ICO) response regarding third party cookies, the ICO’s appeal of Clearview ruling, and the Italy data protection a
HHS Publishes New Cybersecurity Resources
The U.S. Department of Health and Human Services (HHS) Office of Information Security recently published new cybersecurity resources with the goal of mitigating common cybersecurity threats in the health care sector. HHS Resources Webinars: Thes
Not Sneaky Enough: Google Pays $391.5M Privacy Violation Settlement
Written by: Savannah Liner Avera, Esq. Connecticut Attorney General William Tong announced a historic settlement with Google regarding its predatory disregard for users’ location tracking preferences. Google will pay $391.5 million to 40 state
Canada’s Consumer Protection Privacy Act (CPPA) at Least One Year Away
Written by: Richard Sheinis, Esq. Canada’s Federal Privacy Law, the Personal Information Protection and Electronics Documents Act (PIPEDA) is over 22 years old. Its replacement, proposed Bill C-27, which introduces the Consumer Protection Pr
European Union Considering a Complete Ban on Facial Recognition Technology
Written by: Gabriel Lopez, Esq. Earlier this month, European Union (EU) lawmakers began political debate on the EU’s Artificial Intelligence Act (AI Act). The legislation focuses on regulating the use of artificial intelligence in society. T
Snapchat Agrees to $35 Million Settlement with Illinois Residents
Written by: Gabriel Lopez, Esq. A $35 million settlement between the residents of Illinois and Snapchat has been reached following a class action lawsuit over the collection of biometric data. According to the complaint filed on May 11, 2022, fo
Virginia Amends the Virginia Consumer Data Protection Act (“VCDPA”)
Written by: Richard Sheinis, Esq. As many of you know, the VCDPA is scheduled to go into effect on January 1, 2023. In advance of the effective date, the Virginia Legislature has passed several amendments to the Act. The amendments are as fo
Shopify and Leger Facing Second Class Action Over 2020 Data Breach
Written by Joseph Stepina, Esq. Canadian e-commerce company, Shopify Inc., faces a new class action lawsuit over a 2020 data breach in which hackers were able to access personally identifiable information of over 270,000 individuals. Shopify con