The leaking of several documents Friday that apparently are a draft of the European Commission's digital simplification package, including GDPR reform, prompted mixed reactions from privacy professionals and advocates.
Compliance Techniques
Compliance techniques encompass the strategies, tools and processes organizations use to meet evolving privacy and data protection requirements. Privacy engineers, chief data protection officers and compliance teams deploy methods such as data mapping, privacy impact assessments and automated monitoring to align with new laws in the U.S. and abroad. These techniques help avoid costly enforcement actions and build trust by embedding privacy by design into products and operations.
California Privacy Protection Agency legislative staff is closely watching potential preemption efforts on Capitol Hill while developing possible bills to tighten the California Consumer Privacy Act in its home state’s legislature, said an agency official during the CalPrivacy Board’s meeting Friday. The proposed bills would add whistleblower protections, require alternative methods for submitting consumer privacy requests and expand California’s deletion right to cover all personal information collected about a consumer.
The number of enforcement actions under state consumer privacy laws is “building” and could soon explode, said Troutman privacy attorney David Stauss on his firm’s webinar Thursday. For companies, injunctive relief could be just as costly as the monetary penalty, he cautioned.
Privacy Daily is providing readers with the top stories from last week, in case you missed them. All articles can be found by searching the title or clicking on the hyperlinked reference number.
CHICAGO -- Privacy enhancing technologies (PETs) are "becoming a crucial part of the advertising ecosystem,” Google Government Affairs Manager Alex Propes said on a Wednesday keynote panel at the Association of National Advertisers (ANA) ad law conference. PETs can be helpful inside a business and during tough conversations with privacy regulators, other panelists said.
SAN DIEGO -- Data collection has moved beyond websites, paper forms and apps as the automobile has advanced technologically and has begun accumulating data, said Brandon Reilly, leader and lawyer in the privacy and data security group at law firm Manatt Phelps during a panel at IAPP's conference Friday.
SAN DIEGO -- The right to delete seems simple, maybe deceptively so, though California's new Deletion Request and Opt-Out Platform (DROP) is attempting to reduce complications, panelists said during IAPP's privacy and security conference Friday.
CHICAGO -- Privacy regulators are looking beyond a company’s privacy policy when they review its advertising practices, said panelists at an Association of National Advertisers (ANA) ad law conference Monday. That can help or hurt an entity under investigation, they said. Also, panelists said it’s important to convey the value of privacy, not just its costs, in business conversations.
SAN DIEGO -- States, especially those with consumer privacy laws coming online soon, are bolstering their privacy and consumer protection enforcement by beginning to onboard additional attorneys and technologists, experts said during a panel at IAPP's privacy and security conference Friday.
SAN DIEGO -- Companies are good at policing each other to ensure a “trust ecosystem” exists, said Julie Brill, expert in residence at Harvard Law School Innovation Labs and former chief privacy officer at Microsoft (see 2505300023). She was a keynote speaker during the IAPP's privacy and security conference Friday.