In the past two years, a flurry of states have enacted laws and amendments to laws governing businesses’ collection, use, sharing, and protection of consumers’ personal information, including the SHIELD Act (SHIELD Act or Act) in New York, amendments to Nevada’s Security and Privacy of Personal Information Law, and the California Consumer Protection Act (CCPA). …
The California Consumer Privacy Act (CCPA or Act) will become operative on January 1, 2020. In light of recent amendments, regulatory enforcement of the CCPA will not take place until July 1, 2020, or six months after implementing regulations have been published by the California Attorney General (CaAG), whichever is sooner. Although the potential delay…
Spain has joined other EU Member States by enacting its own Data Protection Act, the Organic Law for the Protection of Personal Data and the Guarantee of Digital Rights (Act). The Act was approved by a large majority in the Spanish Parliament on November 21 and will take effect the day after it is published in the…
In September of 2018, the Federal Trade Commission filed complaints against four companies for falsely claiming to be certified under the EU-U.S. Privacy Shield, alleging such acts constituted deceptive acts or practices violating Section 5(a) of the Federal Trade Commission Act. One company claimed on its website that it “complies with the EU-U.S. Privacy [S]hield framework”…
The question of whether European data protection authorities will, in fact, seek to enforce the General Data Protection Regulation (GDPR) on non-European entities has been answered. The UK Information Commissioner’s Office (ICO) issued an enforcement notice (Notice) against a Canadian corporation with no EU operations, AggregateIQ Data Services Limited (AIQ). Canadian Company had Ties to…
Laura Clark Fey, CIPP/US, CIPP/E, CIPM, FIP, Principal of Fey LLC, will speak at the IAPP Denver KnowledgeNet on “Third-Party Vendor Selection and Contracting: Limiting Risk under the Privacy Shield, GDPR, and Privacy Regulations Worldwide.” She will co-present with Jennifer Mullins, CIPP/E, General Counsel of SafeGuard World International. We have inserted more information on this…
Laura Clark Fey, CIPP/US, CIPP/E, CIPM, FIP, Principal of Fey LLC, will speak to senior information security leaders at the 2017 Alliance Leadership Summit on “Overcoming EU GDPR Challenges at the Intersection of Privacy and Security.” She will co-present with Leon Ravenna, CIPP/C, CIPP/E, CIPP/G, CIPP/US, CIPM, FIP, PMP, Chief Information Security Officer of KAR…
Next week, Laura Clark Fey, CIPP/US, CIPP/E, CIPM, FIP, Principal of Fey LLC, will moderate a panel at the DRI Cybersecurity and Data Privacy Seminar that will provide seminar participants with an opportunity to not only listen to two regulators and a prosecutor talk about important privacy and cybersecurity issues—but also to interact directly with…
It is now less than one year before the EU General Data Protection Regulation (“GDPR”) takes effect—bringing with it increased compliance obligations, penalties (as high as 20 million euros or 4% annual worldwide turnover), and enforcement. EU regulators have already advised organizations that there will be no grace period for compliance after May 25, 2018. …
If your company plans to join the Privacy Shield, if possible, you should try to self-certify by September 30, 2016. By doing so, you will be able to take advantage of a nine-month grace period to bring existing third-party relationships in conformance with the Accountability for Onward Transfer Principle. Why is this nine-month grace period…
(913)948-6300 
