Data Privacy Dish

Updates on the Evolving Data Protection Landscape

As the holidays approach, time seems to fly – not in the reindeer sense — but quicker and more rushed than usual as year-end work increases and as parties and other social events seem to multiply like presents under the Christmas tree. In that rush it is easy to overlook the fact that entities that “conduct business” in New York state and collect information of New York residents must also be aware of the New…
At the end of October 2019, the Berlin Commissioner for Data Protection and Freedom of Information imposed a fine of about EUR 14.5 million against a German residential real estate company for various violations of the EU General Data Protection Regulation (GDPR). The fine is not yet legally binding but, reportedly, has been appealed. However, irrespective of the outcome of the appeal, the sanctioning measures taken by the Berlin Data Protection Commissioner show that GDPR…
On Nov. 22, 2019, the representatives of the EU member states rejected the Finnish Presidency’s proposed text for the ePrivacy Regulation, making the future of ePrivacy Regulation uncertain. The ePrivacy Regulation, which if adopted would be binding across all EU member states, will govern direct electronic marketing messages, cookies, and similar tracking technologies. The ePrivacy Regulation also seeks to increase website users’ protection against online tracking. Currently, the ePrivacy Directive, issued in 2002 and amended…
On Nov. 12, Greenberg Traurig Tel Aviv office Shareholder Adam Snukal, in conjunction with NICE, led a webinar on the California Consumer Protection Act (CCPA), due to be enforced in January 2020. The most stringent privacy regulation to be enforced in the United States is bound to trigger changes in the way U.S. contact centers process data and make privacy a customer experience differentiator. From control, to access, and through knowledge management, this webinar…
On Oct. 10, the California Attorney General’s Office issued the California Consumer Privacy Act Proposed Regulations.  Stakeholders have until Dec. 6 to submit comments, and there will be four public hearings prior to that date. On the same day, the Attorney General’s Office also published the Initial Statement of Reasons describing the basis for each provision in the proposal. The ISOR includes a Standardized Regulatory Impact Assessment because the economic impact of the CCPA is estimated to exceed $50 million annually once…
Greenberg Traurig, LLP shareholders Ian C. BallonKate Black, and Gretchen A. Ramos will speak at the 2019 Privacy + Security Forum Oct. 14 – 16 at the George Washington University Marvin Center in Washington, D.C. The annual forum brings together thought leaders from across the privacy and security sector to discuss the latest trends and issues facing those industries. Speakers include privacy and security professionals, attorneys, academics, policymakers, and more. Read more
On the heels of the California Attorney General’s release of the draft California Consumer Privacy Act (CCPA) Regulations, on Friday Gov. Newsom signed seven bills amending various provisions of the CCPA. The relevant amendments signed by the governor are described below. With less than three months before the CCPA becomes effective on January 1, 2020, businesses will now need to take into account these amendments as they continue their compliance efforts. Click here to
On Oct. 10, 2019, the California Attorney General’s Office issued the California Consumer Privacy Act Proposed Regulations. The proposed regulations focus on the following CCPA provisions: notice to consumers; business practices for handling requests; verification of requests; special rules regarding minors; and nondiscrimination. Organizations will have until December 8 to submit comments on the proposed regulations, and four public hearings will be held in early December to collect further comments. Summary While the proposed…
On October 1, 2019 the Court of Justice of the European Union (CJEU) issued a new judgment on the use of cookies which, under the EU E-Privacy Directive, requires users’ informed consent. The court decided that the cookies consent cannot be obtained by using a pre-ticked consent checkbox; and information must be provided to users which includes the duration of the operation of cookies and whether third parties may have access to the cookies. Background…