Blog - Page 71
Legal articles in easy to understand language.
Cookie Consent Examples
If you use cookies, you must notify your users of this. While the specific requirements vary depending on what cookies you use and where you do business, the method used to notify users and get consent is quite consistent across the board. This method is a cookie consent notice. In this...
Updated GDPR Data Processing Agreement Guidance
The European Data Protection Board (EDPB) has published an opinion that has significant implications for data processing agreements (DPAs). It's crucial for all businesses covered by the EU General Data Protection Regulation (GDPR) to note this updated guidance. Any transfer of personal data from a controller to a processor must be...
CCPA (CPRA): How to Legally Sell Personal Information
The headline provision of the California Consumer Privacy Act (CCPA/CPRA) is the "right to opt out:" the right of consumers to object to the sale of their personal information. Since the CCPA came into force, its broad scope has become increasingly clear. And then the CPRA amended the CCPA by expanding...
Biometrics and the CCPA (CPRA)
The California Consumer Privacy Act (CCPA) as amended by the CPRA is changing how businesses collect and use consumers' personal information. If your business processes biometric information, it's essential that you're aware of your obligations under this law. The CCPA (CPRA) follows privacy laws such as the EU General Data Protection...
GDPR Requirements for US Businesses
The General Data Protection Regulation (GDPR) is the main data protection law of the European Union (EU) and took effect on May 25, 2018. GDPR requirements apply to many US businesses, including those without a physical presence in the EU. Does GDPR apply to US companies? Yes. The GDPR applies to...
What the EasyJet Data Breach Means for Your Business
In May 2020, UK airline EasyJet announced that the personal data of over 9 million of its customers had been breached in a cyberattack. The airline could face massive financial and reputational consequences, including a multi-billion dollar lawsuit and a possible administrative fine under the EU General Data Protection Regulation (GDPR). This...