Privacy Ref Blog

Protecting kids online – are we doing our best?

I’m trying to work through some thoughts about how companies repeatedly take advantage of consumers’ privacy in the US.  The latest being TikTok, a video sharing app acquired from musical.ly, which has agreed to pay $5.7 million to settle allegations that it collected personal information from children – a violation of COPPA or the Children’s Online Privacy Protection Act.  Of note, TikTok is a $75 billion – with a B – dollar startup.  In GDPR terms, the maximum fine for egregious behavior could be 4% of gross revenues or in TikTok’s case $3 billion – with a B – dollars, which is a far cry from the fine that the FTC assessed for their alleged COPPA violations (FTC’s largest ever COPPA fine).

Continue reading this post… Posted on March 15, 2019 by Linda Brust - No Comments

 


In da House (of Representatives)

Recently, the US Congress met to discuss privacy protections from the perspective of a federal regulation. One of the most discussed topics was GDPR and whether it works or not. A lot was said, and I was pretty disappointed with the overall lack of nuance with regards to understanding what privacy is about from sitting politicians. That said, I want to go over some of the arguments.

Continue reading this post… Posted on March 13, 2019 by Ben Siegel - No Comments

 


CNIL’s Google Fine of 50 million Euros

The announcement from CNIL about their decision to fine Google provide a valuable insight into the thinking of Supervisory Authorities when it comes to transparency (notice) and consent.

Google’s vulnerability to fine is attributed to the complexity of their privacy notice and terms of service. The information a user may wish to find was scattered over several web pages, in different documents, making it difficult for a consumer. Further, CNIL cited that the information was sometimes vague and non-specific again leaving the user uninformed. Continue reading this post…

Posted on March 12, 2019 by Bob Siegel - No Comments

 


When snazzy apps fail at providing real-time information; gate agents (actual humans!) prevail

I was recently traveling, and I downloaded the airlines’ app to use on the road.  It did prove to be initially beneficial when checking in and selecting my seat.  However, I’d like to suggest that the app prompts to opt-in to push notifications, instead of leaving it as a toggle within the app.  When navigating travel itineraries, push notifications regarding flight status are very important, which gets me to my next experience. Continue reading this post…

Posted on February 18, 2019 by Linda Brust - No Comments

 


In praise of a privacy compliance program

Opening my newsfeed this morning I was not surprised to find an article about another data breach. Over the coming days I am sure we will discover that the organization’s policies were well defined, that training and awareness had taken place, and it was just that the procedures weren’t followed by one individual. The skeptic in me would say that if one person isn’t following procedures, there are probably others. To prevent situations like these, an organization must establish a privacy compliance regimen. Continue reading this post…

Posted on February 1, 2019 by Bob Siegel - No Comments

 


Political Campaigns Need Privacy Policies and Training

When I made the transition from working in American Politics to learning about Privacy, the first tidbit of information I was given was that there was a difference in terminology between the American  and the European practice. In America, we use the term Privacy but in Europe they use the term Data Protection. As I continued my journey in “Privacy” and I considered how my new-found training would have impacted my career in politics, I have come to feel that the term data protection is more applicable to the needs of political campaigns. If I were to review the numerous political campaigns that I have managed, marketed, and organized, data protection has always been woefully inadequate throughout them all. Continue reading this post…

Posted on December 19, 2018 by Andre Samuels - No Comments

 


How I Got Into Privacy

One of the questions I receive, mostly from my wife’s family and students considering their future careers, is how I got into privacy. It’s an interesting topic for me. I am a huge nerd, this is no secret, and my passion for games has played a huge part in my growth as a privacy pro. Continue reading this post…

Posted on by Ben Siegel - No Comments

 


Looking to 2019 Privacy Plans

2018 was a very eventful and active year for privacy professionals. As we come to the end, I have been discussing what plans are being put in place for 2019 with our clients. If their plans are any indication, 2019 will have privacy professionals busier than ever. Continue reading this post…

Posted on December 17, 2018 by Bob Siegel - No Comments

 


My path towards privacy

My path towards a career in the privacy field was a circuitous route. As a perennially engaged Political Organizer and activist, information privacy and data management would not have been the most obvious path for my next endeavor. However, after serving on a campaign that featured the most famous political data breach in history, privacy and the importance of data management came crashing into my life. Continue reading this post…

Posted on November 12, 2018 by Andre Samuels - No Comments

 


PSR and CCPA

A few weeks ago, I made it to Austin, TX for the Privacy Security and Risk Conference being held by the IAPP. As always, it was a great conference with pros and those who have only just begun as privacy professionals. One of the most interesting aspects of the conference was the focus on the newest US based privacy regulation, the California Consumer Protection Act. While not being in California, it was obviously the center of the conversation as many eyed this upcoming regulation as the next possible GDPR. Continue reading this post…

Posted on November 2, 2018 by Ben Siegel - No Comments

 


Next Page »

Subscribe to our mailing list

Please fill out the form below.

Required

Want to find out more?

Simply go to the contact page, fill out the form, and someone from Privacy Ref will be in touch with you. You can also send an email to info@privacyref.com or call (888) 470-1528.

News

April 16, 2018

IAPP Training Classes
Privacy Ref is proud to announce that we are an official training partner of the IAPP. You now have the opportunity to learn from one of our knowledgeable privacy professionals using the most respected training content in the industry. The robust interactive training offered, aids in the understanding of critical privacy concepts. The contents of the courses are integral to obtaining your privacy certifications and to educate your new team. Learn more here.

Latest Blog Posts

March 15, 2019

Protecting kids online – are we doing our best?

I’m trying to work through some thoughts about how companies repeatedly take advantage of consumers’ privacy in the US.  The latest being TikTok, a video sharing app acquired from musical.ly, which has agreed to pay $5.7 million to settle allegations that it collected personal information from children – a violation of COPPA or the Children’s Online Privacy Protection Act.  Of note, TikTok is a $75 billion – with a B – dollar startup.  In GDPR terms, the maximum fine for egregious behavior could be 4% of gross revenues or in TikTok’s case $3 billion – with a B – dollars, which is a far cry from the fine that the FTC assessed for their alleged COPPA violations (FTC’s largest ever COPPA fine).

Continue reading this post...

March 13, 2019

In da House (of Representatives)

Recently, the US Congress met to discuss privacy protections from the perspective of a federal regulation. One of the most discussed topics was GDPR and whether it works or not. A lot was said, and I was pretty disappointed with the overall lack of nuance with regards to understanding what privacy is about from sitting politicians. That said, I want to go over some of the arguments.

Continue reading this post...

Other Recent Posts

PRIVACY REF