The digital advertising industry is undergoing a rapid regulatory transformation. The EU General Data Protection Regulation went into effect more than a year ago, and the California Consumer Privacy Act is right around the corner. Other jurisdictions are likely to follow. Industry lawyers created legal frameworks to comply with the GDPR but now need to determine what changes are needed to comply with the CCPA and, potentially, future privacy laws in other states. One important part of that assessment is the data processing addendum. In this post for Privacy Perspectives, the Interactive Advertising Bureau's Michael Hahn, along with Lowenstein Sandler's Sundeep Kapur, CIPP/US, and Matt Savare, explore whether companies need to amend their existing data processing addenda to comply with the CCPA and if there is a long-term solution to avoid having to draft new addenda every time a jurisdiction adopts a new privacy law.
If you want to comment on this post, you need to login.