South Florida Web Advisors

With many of us so busily focused on compliance with the European Union’s General Data Protection Regulation (“GDPR”) – and probably soon to be focused on the new California Consumer Privacy Act – it is easy to neglect (albeit inadvertently) other areas of the world. If you are a company with international operations or are

Since GDPR was introduced there\’s been an upsurge in the number of tools that are available to help you manage your privacy environment. Over the past several weeks our clients have been taking a closer look at some of these. but often they find that the number tools out there that claim to be supportive

Most of us have been wrapped up in GDPR preparations for several months. While there are many organizations \”not quite there yet\”, many others have made great strides towards compliance. As we continue to do assessments for clients, both GDPR and General Privacy,  I have been surprised at the frequency of the gap between a

Starting January 1, 2020, if you are a for-profit company doing business in California, you may have new data privacy compliance obligations. Specifically, California just enacted the California Consumer Privacy Act of 2018 (the country’s strictest data privacy law to date), placing new privacy mandates on certain businesses with respect to the personal information of

Not one to sit idly, twiddling his thumbs while the digital world goes by unchecked, Max Schrems has struck again. As you may recall, Schrems, a young Austrian attorney who became the EU champion of privacy rights, was the driving force behind having the EU-US Safe Harbor rule nullified. Now, on May 25, 2018, his

It is no secret that I am, for lack of a better term, a nerd. I am also a Privacy Consultant here at Privacy Ref, so I usually pride myself on knowing about privacy goings on in the world. However, for the first time I was bamboozled by changes to a privacy policy.

During the IAPP’s most recent Privacy Summit, I was approached with an interesting question. “I am a privacy professional and I know why GDPR is important. I know about the fines and requirements for compliance, but few others at my company do. How do I explain GDPR to my colleagues effectively?” I responded with a

Unfortunately, it is a given that as an organization you will receive a notice from a third party that they had an incident or breach that may have compromised personal or sensitive employee or customer information.  A majority of the breach laws require immediate notification or notification within a 24hr to 48hr timeframe, not including

In the past, despite numerous bills being submitted to it, Congress has not had much of an appetite for enacting a federal data privacy and breach notification law, choosing instead to leave it to the States.  In light of the recent Cambridge Analytica fiasco and the massive Equifax data breach, the time might now be