Does the CCPA include a private right of action?
A private right of action allows individuals to file lawsuits against certain businesses.This enforcement mechanism under the law allows individuals and class actions to potentially collect a high amount of damages resulting from a business’s noncompliance. The CCPA: California Consumer Privacy Act is a privacy law focused on providing a
Nevada privacy law: how to respond to consumer requests
In 2017, the Nevada Privacy of Information Collected on the Internet from Consumers Act (“Nevada Privacy Law”) went into effect. Two years later, lawmakers updated the Nevada Privacy Law to require operators to provide consumers with a way to opt-out of having their information sold. To comply with the Nevada
Who does GDPR apply to?
The General Data Protection Regulation (GDPR) is one of the most comprehensive and heavily enforced privacy laws in the world. GDPR was enacted to protect the privacy of European Union residents (data subjects) and the law achieves this goal by providing EU residents with certain privacy rights, requiring a legal
State privacy law tracker
Last updated: May 13, 2020 It seems like every day there is a new privacy scandal: too much data collected by ubiquitous apps, improper sharing of data with third parties, the use of data for nefarious purposes or just plain old data breaches. With this much going on, what are
The California Privacy Rights Act of 2020: an overview
The CCPA: California Consumer Privacy Act (“CCPA”) is landmark privacy legislation in the United States. The law provides a variety of consumer rights to Californians, allowing individuals to expand their control over their personally identifiable information (“PII”). At a minimum, the CCPA is a step towards the European Union’s General
GDPR fines and penalties to date
Since the implementation of the General Data Protection Regulation (“GDPR”) in April 2016, at least 233 fines have been issued to businesses and organizations by supervisory bodies throughout the European Union. It is critical for businesses across all industries to stay up-to-date on: (i) where fines have been assessed under
What needs to be included in a Privacy Policy
As consumers have become more interested in the privacy of their Personally Identifiable Information (PII) online, more countries and states have passed their own privacy laws. These privacy laws protect the PII of consumers by providing them with certain privacy rights, requiring websites to have a Privacy Policy and imposing
A guide to the CalOPPA definition of personal information
The California Online Privacy Protection Act (“CalOPPA”) was the first state privacy law in the nation to require a web business to post a Privacy Policy. The purpose of the law is to strengthen the right to privacy that is in the California Constitution. CalOPPA requires an online business to
CCPA: how to confirm the identity of a consumer exercising their rights
The CCPA: California Consumer Privacy Act provides a broad array of privacy rights to Californians. These rights provide Californians with the ability to request disclosures relating to the categories and specific pieces of personally identifiable information (PII) the business has collected and/or sold to third parties, as well as the
A guide to Do Not Track under CalOPPA
California passed the California Online Privacy Protection Act (“CalOPPA”) in 2004 to protect the personal data of its residents. CalOPPA requires operators of online services that collect personal information to post a Privacy Policy. In 2014, California updated CalOPPA to require an operator to disclose how it handles Do Not
A closer look at the CCPA class-action lawsuit against Epic Games, Inc. and Life on Air, Inc.
The California Consumer Privacy Act: CCPA went into effect on January 1st and will be enforced by the California Attorney General on July 1st. The CCPA provides a number of privacy rights to Californians, including the ability to opt-out of the sale of their collected personally identifiable information (PII), request
How GDPR penalties and fines can affect your business
The General Data Protection Regulation (“GDPR”) stipulates that national authorities within the European Union (E.U) must assess certain GDPR penalties (including GDPR fines) for specific data protection violations by businesses/individuals. The processing of data is generally not allowed under the GDPR, and violating GDPR guidelines regarding the limited exceptions where
