Do you really need cookie consents to be incorporated into your mobile applications? New enforcement of the CCPA by California attorney general involving mobile game developer emphasizes the need to honor the right to Opt-Out in mobile applications as well.
Latest from Privacy Compliance & Data Security - Page 5
EU Regulators are coming directly after non-EU processors for GDPR violations
I’m a non-EU data processor, no EU regulator is coming after me right? Wrong, says French regulator, CNIL, in new decision fining SaaS provider 1 Million EUR!
At issue in this case was a non-EU processor that had failed to
40 State AGs Warn against Delusional LLM Outputs
10 Million EUR Fine Demonstrates Scope of Effort Needed for DPIAs
Spanish data protection authority, AEPD, imposes 10 Million EUR fine on a company, AENA for deploying a facial recognition system without an adequate DPIA. What does this mean for companies subject to US laws?
The decision clarified that the data
Big Beautiful AI Bill: Is the US State AI law ban back on the horizon?
A new draft Federal Executive Order released yesterday says: Maybe.
While the EU is busy putting the brakes on their EU AI Act due to being potentially too onerous and chilling innovation, the White House considers doing the same, for
EU Regulator Cookie Sweep Shows Importance of Website Tracking Compliance in the EU and US
New enforcement sweep on cookie banners, conducted by Netherlands privacy regulator, shows both EU and US companies that the need to prioritize website tracking hygiene and transparency.
In Europe:
Netherlands privacy regulator,, AP, issued warnings to 200 websites about their
State AG’s Ramping Up Enforcement of Student Data Privacy with new Landmark Settlement
The Attorney’s General of Connecticut, California and New York reached a $5.1 million settlement with Illuminate Education, for failing to implement proper information security measures to protect data of students that it was holding.
What should companies that provide services
HIPAA, but for non-Covered Entities?
New bill, proposed by Bill Cassidy (R-LA), Chair of the Senate Health, Education, Labor and Pensions Committee (HELP), purports to apply the privacy and security practices under the HITECH Act, to entities that process non protected health information (PHI) and
Philippines Data Protection Authority: Biometric Data Is Not for Sale: Lessons for U.S. Privacy Law
The Philippines’ National Privacy Commission (NPC) has directed Tools for Humanity (Worldcoin) to stop processing biometric data, emphasizing that biometric information is not a commodity for trade.
“Biometric data is a unique and permanent identifier. When consent is compromised by
“Smile, You’re on Camera”: Meets GDPR and U.S. Privacy Law in the retail context
A Bavarian court held that a store’s private security guard lawfully used a body-worn camera under Article 6(1)(f) GDPR to protect property, maintain order, and ensure staff safety, in a decision that provides actionable insights for U.S.-based retailers as well.