Yahoo agrees to terms of $117.5M data breach settlement

(Sep 6, 2019) After a new deal had been reached in April, Yahoo has agreed to the terms of the $117.5 million data breach settlement, ABC7 reports. Yahoo agreed to create a settlement fund for free credit monitoring or alternative forms of compensation for anyone who purchased credit-monitoring services or incurred out-of-pocket losses as a result of the breach. Yahoo users in the U.S. and Israel who had an account between Jan. 1, 2012, and Dec. 31, 2016, will be eligible to receive a portion of the settlemen... Read More

Facial-recognition software will be installed at Israeli checkposts

(Aug 23, 2019) Israel is adding facial-recognition technology to its West Bank checkpoints in an effort to expedite verifications for Palestinians to cross into the country, NPR reports. Israeli defense officials confirmed that AnyVision software will be at all checkpoints within the next few months. In a statement regarding the ethics of its software, AnyVision wrote that privacy "is of the utmost importance" and that privacy protection "is instrumental to both our business strategy and our own standard of et... Read More

5 takeaways from the Israeli Privacy Protection Regulations

(Aug 5, 2019) The Israeli Privacy Protection Regulations (Data Security), 5777-2017 entered into force concurrently with the EU General Data Protection Regulation in May 2018. The regulations significantly expanded the privacy protection obligations that apply to most of the companies operating in Israel. This article answers five key questions relating to the year that has passed since the regulations came into effect. What do the regulations require? The regulations impose detailed information se... Read More

5 takeaways from a year of the Israeli Privacy Protection Regulations

(Aug 5, 2019) The Israeli Privacy Protection Regulations (Data Security), 5777-2017 entered into force concurrently with the EU General Data Protection Regulation in May 2018. The regulations significantly expanded the privacy protection obligations that apply to most of the companies operating in Israel. In this article for Privacy Tracker, Assaf Harel, CIPP/E, answers key questions including what the regulations require, how the regulations have affected commercial agreements and if a company that has imple... Read More

Bahrain’s Personal Data Protection Law goes into effect

(Aug 2, 2019) Gulf Daily News reports Bahrain’s Personal Data Protection Law has now gone into effect. Organizations covered by the PDPL are required to obtain user consent in order collect, store, process and use personal information. Any organization found to have violated the law could face a fine between BD1,000 and BD20,000 and up to one year in prison. While the law has been implemented, there has been no announcement regarding the creation of the Personal Data Protection Authority that will enforce the... Read More

Roundup: Australia, China, EU, Kazakhstan, Turkey, US and more

(Jul 22, 2019) In this week’s Privacy Tracker global legislative roundup, the U.S. Federal Trade Commission has voted on a slew of privacy settlements, including ones with Equifax, Facebook and Google-owned YouTube. The FTC is also preparing to make amendments to the Children’s Online Privacy Protection Act. The Council of the European Union is set to review the EU General Data Protection Regulation. Turkey’s Personal Data Protection Board filed decision summaries on a handful of cases. A review of Australia’s... Read More

Global News Roundup — July 15–22, 2019

(Jul 22, 2019) In this week’s Privacy Tracker global legislative roundup, the U.S. Federal Trade Commission, along with the U.S. Consumer Financial Protection Bureau and all 50 U.S. states, settled with Equifax for $575 million related to its 2017 data breach. Separately, the FTC voted 3-2 to fine Facebook $5 billion, though the Department of Justice is reviewing the proposed settlement. The FTC is also preparing to make amendments to the Children’s Online Privacy Protection Act and is expected to settle with ... Read More

Perspective: Why EU privacy pros need to know about Turkey's data protection law

(Jul 3, 2019) At last year’s IAPP Europe’s Data Protection Congress in Brussels, MarşanErezTuran Founding Partner Serhat Turan, CIPP/E, was asked repeatedly if Turkey had a data protection law in place. The Turkish DPL has been in force since 2016, but Turkish citizens were unaware of the law until 2017. In this piece for Privacy Perspectives, Turan explores some of the underlying reasons the EU may be unaware of the Turkish DPL.Full Story... Read More

Why the EU should be more aware of Turkish data protection law

(Jun 25, 2019) Last year was the first time I attended IAPP Europe's Data Protection Congress in Brussels, and my first impressions were of how many people were overwhelmed by the storm of the EU General Data Protection Regulation and the uncertain future of Brexit. As a Turkish lawyer, I was asked repeatedly why I was there and if Turkey has a data protection law. There were sessions about third countries, including the Latin American countries, India, Japan and the U.S., but none on Turkey. It seems many pe... Read More

Egypt passes first data protection law

(Jun 24, 2019) Legislators in Egypt have passed the country’s first data protection law, Daily News Egypt reports. The laws will protect the information of Egyptian citizens, as well as European Union citizens who are in the country. Companies are required to obtain consent before any personal data can be collected, processed or disclosed. Any organization found to have violated the rules faces “[no] less than three months” of imprisonment and fines that can range from EGP 100,000 to EGP 1 million. Any entity ... Read More