Massachusetts Bill Follows Latest Privacy Law Standards Last month, the Massachusetts Senate passed a privacy bill with amendments. The Massachusetts Data Privacy Act (MDPA) in many ways seems to follow the new wave of US state privacy laws such as the Maryland Online Data Privacy Act (MODPA) which came into effect on October 1st, although […]
Massachusetts bill follows latest Privacy Law standards Read More »
We Give You Permission to Take These Personal Privacy Steps The privacy community recognized Data Privacy Day on January 28th. Here at Privacy Ref, every day is Data Privacy Day. We promote privacy awareness and assist our clients from small to large businesses in meeting their obligations and following best practices five days a week.
Personal Privacy Tips Read More »
Artificial intelligence is seemingly, suddenly everywhere in 2025—and possibly already being used within your organization. With the increasing popularity and use of artificial intelligence by organizations also comes additional regulations and best practices. The European Union’s Artificial Intelligence Act may be the first law to regulate the use of artificial intelligence, but it is closely
Bring AI into the Privacy Program in 2025 Read More »
As of January 15th, 2025, fourteen US state comprehensive privacy laws will be in effect, as the laws of Delaware, Iowa, Nebraska, New Hampshire, and New Jersey join those of California, Colorado, Connecticut, Florida, Montana, Oregon, Texas, Utah, and Virginia. Applicable businesses have about a month (give or take a few days depending on the
Three things your business can do to comply with 2025 state laws Read More »
What the FTC’s “Click to Cancel” Rule Means for Your Business After more than a year, the Federal Trade Commission announced a final “click to cancel” rule. While consumers rejoice over the requirement to make it as easy to cancel a subscription as it is to sign up, we at Privacy Ref understand that this
The National Institute of Standards and Technology (NIST) Privacy Framework is a free online tool for organizations that can be used to measure privacy risk while protecting individuals’ privacy. The framework was created in 2020 in collaboration with both private and public sector stakeholders to be agnostic to any technology, sector, law, or jurisdiction. It
U.S. State Privacy Laws vs NIST Privacy Framework Read More »
Among the four newly passed comprehensive privacy laws signed in April and May–Kentucky, Maryland, Minnesota, and Nebraska—there are new takes on some common requirements from the existing laws and some entirely new requirements. New Takes on Recent Trends Right to a list of specific third parties The Oregon Consumer Privacy Act introduced a consumer’s right
New State Laws, New Spin on Requirements Read More »
California AG CCPA enforcement trends and takeaways The California Attorney General has enacted two major California Consumer Privacy Act (CCPA) enforcement actions so far, respectively against Sephora and DoorDash. A few takeaways can be made by comparing the two cases. Broad interpretation of “sale” of personal information The actions of these organizations were considered sales
CCPA enforcement action takeaways Read More »
As more US states pass comprehensive privacy laws with technological advances in mind, a recent trend emerging is a requirement that controllers’ websites comply with universal opt-out mechanisms. Here’s a breakdown of everything you need to know about implementing the specific law requirements. What is a universal opt-out mechanism (UOOM)? The term universal opt-out mechanism
Universal Opt-Out Mechanisms FAQ Read More »
Two new US state laws have been approved for New Jersey and New Hampshire already this year. As part of our commitment to keeping up with the latest law requirements, we have pulled out a few takeaways. Quick Overviews The essence of the New Jersey and New Hampshire privacy laws, otherwise referred to as SB
Some old, some new requirements in NH and NJ laws Read More »
