Topic
Privacy Notices
73 published works
CyberAdviser
California Issues Record $1.35M Fine Against Retailer for CCPA Violations
By Gregory P. Szewczyk, Mo Pham-Khan, Parisa Zarelli
On September 30, 2025, the California Privacy Protection Agency (CPPA) issued a $1.35 million fine, the largest in the CPPA’s history, against Tractor Supply Company, the nation’s largest rural lifestyle…
Privacy Compliance & Data Security
To Do: Annually Review Privacy Notices or Risk CPPA Enforcement
By Odia Kagan
The annual review and update (if necessary) of privacy notices just got an upgrade to a "must do." This provision, found in California Consumer Privacy Act from the beginning, requires…
Data Privacy Dish
Under the GDPR, is an organization required to distribute its privacy notice to every individual whose information is included in an AI prompt?
Not necessarily. Under the GDPR, controllers are required to provide information relating to what personal data they process, and how that processing takes place. If the personal data the organization…
Data Privacy Dish
Under modern US privacy laws, is an organization required to distribute its privacy notice to every individual whose information is used to train an AI?
By David A. Zetoony, Greenberg Traurig, LLP
Probably not. Under the European GDPR, if the personal information that an organization is going to use as part of training an AI has been collected directly from individuals, then…
Data Protection Report
Privacy notices – the ICO follows the lead of the EU data protection authorities in their interpretation of Article 13 UK GDPR
By Marcus Evans, Lara White (UK)
Introduction On 15 May, the ICO published the monetary penalty notice (MPN) in relation to the £12.7 million fine it imposed on TikTok in April. This MPN and its accompanying…
Privacy Compliance & Data Security
New Day, New Colorado CPA Rules Revisions
What do you need to know about the latest revisions to the Colorado CPA Rules? Some key points: Universal Opt-Out Mechanism (UOOM) The Universal Opt-Out Mechanism does not need to…
Data Privacy Dish
Does a business have to provide a privacy notice directly to a consumer if it obtains the consumer’s data from a third party (i.e., purchases it)?
Modern data privacy statutes require that organizations inform individuals about the organization’s privacy practices by creating a privacy notice (sometimes referred to as a privacy policy or a notice at…
Privacy Compliance & Data Security
Clear & Concise and Everything Nice: What the IMY Decision Means for Your Privacy Notice
By Odia Kagan
What can we learn about disclosures and how to draft privacy notices from the Sweden IMY decision? And why is it important for both GDPR companies and CPRA, CDPA, CPA…
Employment Law
New York Will Soon Require Employers to Notify Employees in Writing About Phone, Email, and Internet Monitoring
By Randi W. Kochman, Marissa A. Mastroianni, Molly G. Rothschild
On November 8, 2021, Governor Hochul signed a bill into law that requires private New York employers to provide written notice to employees before monitoring their telephone, email, and internet…
RopesDataPhiles
Translating Privacy Notices: More Than a “Nice to Have”?
If French is the language of love (Italians: don't @ me), and music is a universal tongue, where does that leave English? Besides the obvious and universally loved cultural touchstones…