It looks like a new tool is on the horizon with the potential to make the lives of people concerned about their personal privacy much easier. The Data Elimination and Limiting Extensive Tracking and Exchange Act or “Delete Act” was introduced February 10, 2022 and has been referred to the Committee on Commerce, Science and […]
The Universal Delete Button Read More »
1. Can regulations promote good vibes? The International Association of Privacy Professionals (IAPP) posted last week about a new draft regulation from the Cyberspace Administration of China charging service providers who use recommendation algorithms to “disseminate positive energy.” The idea of creating positive energy, or “good vibes,” from privacy regulations might seem absurd—or at the
Can Regulations Promote Good Vibes? Read More »
If you’ve ever received an email from a business and wondered how they got your information or when you signed up for emails, you were dealing with direct marketing communications. It might seem like a business is being tricky, but in many cases, it was actually their right to send you an unsolicited or spam
Direct Marketing Consent Exemptions Globally Read More »
Behold! The Worst Breach Response! In the last five years, I have seen a fair number of breaches and most of them are similarly—notify appropriate authorities, stop any further damage, investigate, and alert affected parties. Of course, these breaches happen more often than we would like to admit, but when a company botches their own
The most Epik breach Read More »
Two recently passed data privacy laws impact the selection of Data Protection Officers, but provide varying degrees of specificity on the subject: the Chinese Personal Information Protection Law (PIPL) and the Brazilian General Data Protection Law (LGPD). Since both laws share similarities with the EU General Data Protection Regulation, and I was already looking into
How to interpret GDPR, LGPD, and PIPL when choosing Data Protection Officers? Read More »
Earlier today, the Irish Data Protection Commission (DPC) announced a 225 million euro fine against WhatsApp. As many know, WhatsApp is owned by Facebook and this fine was targeted at the transparency of WhatsApp’s processing activities. In some ways, this even mirrors Cambridge Analytica from 2016. Why This Decision? GDPR requires that organizations are transparent
WhatsApp paying 225 Million Euro Fine Read More »
An important decision when starting a company is the name. Many people have asked me \”why Privacy Ref?\” There are actually four reasons the name was chosen.
What\’s in a name (or Why Privacy Ref) Read More »
It is no mystery that I am a fan of most nerdy things, most of all table-top games like Dungeons and Dragons. Interestingly, the skills necessary to play such games intersect quite often with the skills necessary to build an effective privacy program. Whether it is teamwork, preparation, or knowledge of applicable rules, there is
Dungeons and Data Breaches Read More »
Before COVID, my wife and I tried to get out for lunch together at least once a week (when I was not on the road). Today we went to one of our favorite lunch restaurants and found a surprising sign when we approached the hostess to be seated.
Exposing Employee Personal Information (Unintentionally) Read More »
An interesting point about ransomware was made to me after my most recent quarterly breach webinar. Essentially, the statement noted that ransomware is a not the same as a data breach. While this is technically true for the most part, there is enough relevant overlap in the implications of other “not quite breaches” to justify
Databreach or Ransomware? Read More »
