It’s 2019, so why are we still talking about opt-in consent?

(Nov 12, 2019) Once again, legislators are touting their opt-in consent bills as the revolutionary solution to all our privacy woes. Once again, they could not be more wrong. At a time when even our toasters are online, opt-in consent is a horse in a self-driving car world.   State Rep. David Santiago, R-Fla., announced in September 2019 that he is introducing a privacy bill that calls for opt-in consent because the “basic framework should always start with the opt-in option. All too often, and somewhere in s... Read More

Microsoft to extend CCPA rights across US

(Nov 12, 2019) Microsoft has announced it will honor core California Consumer Privacy Act rights to all U.S. customers. "We are optimistic that the California Consumer Privacy Act — and the commitment we are making to extend its core rights more broadly — will help serve as a catalyst for even more comprehensive privacy legislation in the U.S.," Microsoft Corporate Vice President for Global Privacy and Regulatory Affairs and Chief Privacy Officer Julie Brill wrote in a blog post. Individuals can learn more abo... Read More

Appeals court rules against LinkedIn in data-scraping case

(Nov 12, 2019) MediaPost reports the 9th Circuit Court of Appeals denied LinkedIn's challenge of a prior decision to allow hiQ Labs to collect personal data from LinkedIn's public pages. A court order explained judges did not request a vote to provide LinkedIn with a new hearing, which can now only occur with intervention from the U.S. Supreme Court. The appellate judges wrote in their decision that there is "no evidence" suggesting LinkedIn's "Do Not Broadcast" option was deployed as a user privacy tool again... Read More

'Project Nightingale' allegedly collecting millions of US health records

(Nov 12, 2019) Google and Ascension health system have allegedly been performing a mass data collection project involving tens of millions of U.S. health records across 21 states, The Wall Street Journal reports. The collection, titled "Project Nightingale," began last year and is believed to involve extensive patient profiles that include names, birthdates, lab results, doctor diagnoses and hospitalization records. A whistleblower told the Guardian the project involves 50 million patients who, along with thei... Read More

EDPB announces 15th plenary agenda

(Nov 12, 2019) The European Data Protection Board has released the draft agenda for its 15th plenary meeting. The two-day gathering will be headlined by discussions on the recent EU-U.S. Privacy Shield review and an opinion on Exxon Mobil's binding corporate rules for data transfers under Article 64 of the EU General Data Protection Regulation. The EDPB is also slated to examine guidelines on data protection by design and default, as well as Guidelines 3/2018 on the territorial scope of the GDPR.Full Story... Read More

Se difunde iniciativa Who has your back? en Panamá tras la colaboración entre el Ipandetec y la EFF

(Nov 12, 2019) ¿Quién defiende tus datos? o Who has your back?, en inglés, es una evaluación anual que califica las políticas de protección de datos de las principales compañías de telecomunicaciones e Internet en Estados Unidos. Su objetivo es el de incrementar la protección de los datos personales y la privacidad por parte de las empresas frente a las solicitudes de información realizadas por el Estado. La información públicamente disponible en los sitios web de las empresas proveedoras de servicio de telefo... Read More

Privacy pros see more intersection with privacy, ethics

(Nov 11, 2019) Compliance in the privacy space focuses on meeting the requirements of the law and abiding by its language. However, both scopes start and end with ethical considerations. "Ethics is doing the right thing even when no one is watching," Akami Technologies General Counsel and Chief Data Protection Officer James Casey, CIPP/E, said at the IAPP's Privacy. Security. Risk. conference in Las Vegas. "It's the umbrella set of concepts that apply to your compliance, legal and trust efforts." IAPP Staff Wr... Read More

DOJ's antitrust chief: Big tech data practices considered in competition concerns

(Nov 11, 2019) The Washington Post reports U.S. Department of Justice Assistant Attorney General for the Antitrust Division Makan Delrahim has warned big tech companies that ongoing mass data collection and data misuse will draw the attention of federal regulators. Delrahim said, "It would be a grave mistake to believe that privacy concerns can never play a role in antitrust analysis." Delrahim added that personal information carries more value than "oil" to organizations, which he believes will opt for decrea... Read More

Facebook, Mass. attorney general spar over records disclosure

(Nov 11, 2019) Facebook has asked a Massachusetts Superior Court judge to allow records related to data misuse to remain withheld from a privacy probe into the social network by the Massachusetts attorney general, Reuters reports. The attorney general's office is seeking to obtain records on 10,000 apps that Facebook believes are putting user data at risk. While Massachusetts Assistant Attorney General Sara Cable, CIPP/US, argued the records were needed to examine Facebook's "blind eye" to data misuse, Faceboo... Read More

Kenya approves data protection law

(Nov 11, 2019) Kenyan President Uhuru Kenyatta has signed new data protection legislation, Reuters reports. The law is in line with the EU General Data Protection Regulation and will regulate the use, storage and sharing of personally identifiable information by organizations and government agencies. Those that violate the law will be subject to a maximum fine of 3 million shillings or a two-year jail sentence. The government will establish an independent office to police and investigate privacy violations.Ful... Read More