Topic
Personal Data
336 published works
Data Privacy Dish
Are law firms considered “processors” or “controllers” of the personal data that they collect from third parties as part of a representation of a client?
A law firm will most likely be considered a controller when processing personal data from third parties as part of a representation of a client (e.g., when collecting information from…
Data Privacy Dish
What types of information do law firms collect that may be subject to the GDPR?
Law firms typically collect personal data subject to the GDPR in the following five contexts: Employee data. If a law firm has employees in the European Union, the human resource…
Data Privacy Dish
Will the CPRA require that businesses impose additional contractual requirements on service providers?
The CCPA requires that a service provider agree to three substantive restrictions involving the retention, use, and disclosure of personal information. The CPRA ostensibly expands upon the three substantive contractual…
Privacy Blog
Privacy During Bankruptcy Proceedings: Why It Matters
During these particularly trying times resulting from the COVID-19 pandemic, businesses of all sizes have been concerned about the future. As a result, considering potential liquidation or restructuring through bankruptcy…
Data Privacy Dish
What additional requirements were imposed upon businesses by the CPRA?
By Jena M. Valdetero, David A. Zetoony
The CCPA’s core requirements can be grouped broadly into three categories: (1) rights owed by businesses to Californians concerning their personal data, (2) data security breach risks and obligations, and…
Technology Law Dispatch
EDPB releases draft guidelines on the targeting of social media users
By Cynthia O’Donoghue, Nadia Avraham
In September 2020, the European Data Protection Board (EDPB) released new guidelines on the targeting of social media users (Guidelines) for consultation. Background The Guidelines address the privacy risks and…
IT Law Blog
Mobile Health Apps and GDPR. Tips for developers
The digitalization of everyday life influences directly our habits, diet, and diseases. Now with the help of new mobile apps everyone can track the number of calories consumed, create personalized…
Tech Law Blog
Court of Appeal warns against “overstretching” the concept of personal data
The Irish Court of Appeal has held that while the definition of "personal data" is very broad, to interpret a document as constituting personal data for the sole reason that…
The IP Breakdown
The Death of Privacy Shield and The “Necessity” of Processing
By Tara Aaron
ID 10364985 © Kirsty Pargeter | Dreamstime.com Last time, we gave witness to the demise of the EU-US Privacy Shield program. I promised you I would explain who might…
Privacy Compliance & Data Security
CCPA Regulations: Are Session Cookies Unique Personal Identifiers?
By Odia Kagan
Commentors on the final California Consumer Privacy Act regulation queried: "Are session cookies a "unique personal identifier?" The California Attorney General replied: Maybe, depending on the context. A "unique personal…