Blogs

Is opt-out consent deceit?
Opt-out consent won’t be tolerated in negative option marketing, according to the FTC. Earlier this month, the Federal Trade Commission released guidance on negative option

Privacy and the fixed vs. growth mindset
You might have heard of the \”fixed mindset vs. growth mindset\” psychology concept that helps students overcome failure and make progress in areas of weakness.
What’s New
With 2021 almost over, we have taken a look at our offerings at Privacy Ref and wanted to share what we are working on. Training
Can Regulations Promote Good Vibes?
1. Can regulations promote good vibes? The International Association of Privacy Professionals (IAPP) posted last week about a new draft regulation from the Cyberspace Administration
Direct Marketing Consent Exemptions Globally
If you’ve ever received an email from a business and wondered how they got your information or when you signed up for emails, you were

The most Epik breach
Behold! The Worst Breach Response! In the last five years, I have seen a fair number of breaches and most of them are similarly—notify appropriate
How to interpret GDPR, LGPD, and PIPL when choosing Data Protection Officers?
Two recently passed data privacy laws impact the selection of Data Protection Officers, but provide varying degrees of specificity on the subject: the Chinese Personal

WhatsApp paying 225 Million Euro Fine
Earlier today, the Irish Data Protection Commission (DPC) announced a 225 million euro fine against WhatsApp. As many know, WhatsApp is owned by Facebook and

What\’s in a name (or Why Privacy Ref)
An important decision when starting a company is the name. Many people have asked me \”why Privacy Ref?\” There are actually four reasons the name
Dungeons and Data Breaches
It is no mystery that I am a fan of most nerdy things, most of all table-top games like Dungeons and Dragons. Interestingly, the skills

Exposing Employee Personal Information (Unintentionally)
Before COVID, my wife and I tried to get out for lunch together at least once a week (when I was not on the road).

Databreach or Ransomware?
An interesting point about ransomware was made to me after my most recent quarterly breach webinar. Essentially, the statement noted that ransomware is a not

In person training is back!
COVID is not over, but life is returning to what is being called \”normal\”. I\’m looking forward to traveling, seeing my family, eating in restaurants,
How much personal data did your cup of coffee cost you today?
A simple trip to your local coffee shop or visit to their website to browse or place a pick-up order can lead to divulging more

Making Privacy Impact Assessments less of a PIA
Every day I speak with clients about a number of different privacy related matters. However, the one that has become most prominent is setting up