Privacy Ref Blog

Don’t Forget Basic Communication

Most of us have been wrapped up in GDPR preparations for several months. While there are many organizations “not quite there yet”, many others have made great strides towards compliance. As we continue to do assessments for clients, both GDPR and General Privacy,  I have been surprised at the frequency of the gap between a privacy official describing their organization’s data subjects, information collected, and business processes  with the reality of what is happening.
Continue reading this post…

Posted on July 9, 2018 by Bob Siegel - No Comments

 


California – The Next GDPR?

Starting January 1, 2020, if you are a for-profit company doing business in California, you may have new data privacy compliance obligations. Specifically, California just enacted the California Consumer Privacy Act of 2018 (the country’s strictest data privacy law to date), placing new privacy mandates on certain businesses with respect to the personal information of consumers (defined as natural persons who are California residents). Many aspects of the new law smack of EU-GDPR influences, such as a new and improved (in other words, broader) definition of personal information and the inclusion of guaranteed consumer rights with respect to such personal information. If your business is already in compliance with the EU’s GDPR, the California law will be nothing new to you. For other businesses, however, you have 18 months to get with the program.
Continue reading this post…

Posted on by Kelly Cheary - No Comments

 


Here We Go Again….

Not one to sit idly, twiddling his thumbs while the digital world goes by unchecked, Max Schrems has struck again. As you may recall, Schrems, a young Austrian attorney who became the EU champion of privacy rights, was the driving force behind having the EU-US Safe Harbor rule nullified. Now, on May 25, 2018, his non-profit organization, NOYB (which is actually a slang acronym for “None of Your Business”), celebrated the official implementation of the GDPR by filing four separate complaints against the digital giants Google and Facebook (can you say “déjà vu”?), and two of Facebook’s subsidiaries, Instagram and WhatsApp.

Continue reading this post…

Posted on July 8, 2018 by Kelly Cheary - No Comments

 


My First Taste of GDPR

It is no secret that I am, for lack of a better term, a nerd. I am also a Privacy Consultant here at Privacy Ref, so I usually pride myself on knowing about privacy goings on in the world. However, for the first time I was bamboozled by changes to a privacy policy. Continue reading this post…

Posted on June 4, 2018 by Ben Siegel - No Comments

 


Defining GDPR for Non-Privacy People

During the IAPP’s most recent Privacy Summit, I was approached with an interesting question. “I am a privacy professional and I know why GDPR is important. I know about the fines and requirements for compliance, but few others at my company do. How do I explain GDPR to my colleagues effectively?” I responded with a quick and simple answer that probably did not cover all the bases, so I wanted to write up some deeper thoughts on the subject.

Continue reading this post…

Posted on April 30, 2018 by Ben Siegel - No Comments

 


Breach Notification and Follow Up

Unfortunately, it is a given that as an organization you will receive a notice from a third party that they had an incident or breach that may have compromised personal or sensitive employee or customer information.  A majority of the breach laws require immediate notification or notification within a 24hr to 48hr timeframe, not including notification times from a contractual perspective. The question then becomes what does the third party need to provide, the level of assurance in order for an organization to re-establish connectivity and/or to use third-party moving forward.

Continue reading this post…

Posted on by Jen Spencer - No Comments

 


On the Horizon??  A Quick Peek at Pending Bills that Could Change the U.S. Legal Landscape

In the past, despite numerous bills being submitted to it, Congress has not had much of an appetite for enacting a federal data privacy and breach notification law, choosing instead to leave it to the States.  In light of the recent Cambridge Analytica fiasco and the massive Equifax data breach, the time might now be ripe for concrete action by Congress.  Indeed, immediately following the commencement of the Congressional Hearings in which Mark Zuckerberg was the main attraction, two Democratic Senators (Ed Markey from Massachusetts and Richard Blumenthal from Connecticut) proposed the Customer Online Notification for Stopping Edge-provider Network Transgressions (or, for short, the “CONSENT Act”), which would expand the authority of the Federal Trade Commission (“Commission”). In today’s digital parlance, an “edge provider” deals with internet content (whether as a provider, website, application, host, etc.) as opposed to an internet service provider.  Edge providers include the Big Dogs of the internet: Google, Facebook, Amazon, etc.

Continue reading this post…

Posted on by Kelly Cheary - No Comments

 


Top 6 Things For GDPR Procrastinators To Do

May has many holidays; Mothers Day, Memorial Day, Cinco de Mayo, Star Wars Day (May the fourth), and, of course, the new GDPR Day. Almost everyone is ready for the first four, but we continue to get calls from those GDPR procrastinators to help them prepare. With less than a month left to GDPR Day, what is a procrastinating business to do? Here are six ways to get started.
Continue reading this post…

Posted on by Bob Siegel - No Comments

 


Facebook and Trust

I have previously written about the importance of a privacy program to in part, manage trust between an organization and its customers. As more data breaches occur and privacy is made more of an issue that is embraced and examined by the general public, this trust will become more important. One example of this is the evolving situation at Facebook.

Continue reading this post…

Posted on April 10, 2018 by Ben Siegel - No Comments

 


Is Your Response Plan Responsive Enough?

So, you have a formal data breach response plan in place or an informal plan of action in mind….now what?  With Alabama and South Dakota in a race to become the 49th state to enact data breach notification legislation (for sure, no one wants to be the “last man standing” in this scenario!), it may be a good time to review your plan.  Continue reading this post…

Posted on April 9, 2018 by Kelly Cheary - No Comments

 


Next Page »

Subscribe to our mailing list

Please fill out the form below.

Required

Want to find out more?

Simply go to the contact page, fill out the form, and someone from Privacy Ref will be in touch with you. You can also send an email to info@privacyref.com or call (888) 470-1528.

News

April 16, 2018

IAPP Training Classes
Privacy Ref is proud to announce that we are an official training partner of the IAPP. You now have the opportunity to learn from one of our knowledgeable privacy professionals using the most respected training content in the industry. The robust interactive training offered, aids in the understanding of critical privacy concepts. The contents of the courses are integral to obtaining your privacy certifications and to educate your new team. Learn more here.

Latest Blog Posts

July 9, 2018

Don’t Forget Basic Communication
Most of us have been wrapped up in GDPR preparations for several months. While there are many organizations "not quite there yet", many others have made great strides towards compliance. As we continue to do assessments for clients, both GDPR and General Privacy,  I have been surprised at the frequency of the gap between a privacy official describing their organization's data subjects, information collected, and business processes  with the reality of what is happening. Continue reading this post...

California – The Next GDPR?
Starting January 1, 2020, if you are a for-profit company doing business in California, you may have new data privacy compliance obligations. Specifically, California just enacted the California Consumer Privacy Act of 2018 (the country’s strictest data privacy law to date), placing new privacy mandates on certain businesses with respect to the personal information of consumers (defined as natural persons who are California residents). Many aspects of the new law smack of EU-GDPR influences, such as a new and improved (in other words, broader) definition of personal information and the inclusion of guaranteed consumer rights with respect to such personal information. If your business is already in compliance with the EU’s GDPR, the California law will be nothing new to you. For other businesses, however, you have 18 months to get with the program. Continue reading this post...

Other Recent Posts

PRIVACY REF