Cisco’s 2025 Data Privacy Benchmark Study reveals the evolving landscape of data privacy, with organizations balancing local data storage for security and reliance on global providers for expertise. Conducted across 12 countries, the study highlights the growing…
Posts by Category: Data Protection & Privacy
California Privacy Protection Agency Begins Investigative Sweep into Location Data Collection under CCPA
The California Privacy Protection Agency (CPPA) has launched an investigation into companies’ collection of sensitive location data, including inquiries to advertising networks, mobile apps, and data brokers. The CPPA aims to ensure compliance with the…
Sensitive Data Protections Expand Under Sweeping New DOJ Rules
The U.S. Department of Justice will implement new regulations on April 8, 2025, to protect sensitive personal and government-related data from foreign adversaries. The rules limit data transactions with countries of concern, including China and Russia, aiming to…
Potential for Deepfake Audio, Video to Warp Reality is Building to Crisis Level
Persona’s Q1 2025 fraud insights highlight the growing threat of deepfakes, with financial losses from fraud projected to reach $40 billion by 2027. Generative AI tools like ByteDance’s OmniHuman are enabling realistic deepfakes, making defense strategies…
Key Findings from Oregon’s Consumer Privacy Act Report
Six months into Oregon’s Consumer Privacy Act (OCPA), the Attorney General reports strong consumer engagement and business compliance, but highlights issues with unclear privacy notices, hidden opt-out options, and denials of data deletion requests. The DOJ received…
GDPR: What Impact Has It Really Made During Its First Year?
As we come up on the one-year mark of the GDPR, it makes sense to take stock of what seems to be working well—and what may be working less well. The breach notification plank of the regulation has clearly had a significant impact, while the fining authority has been…
FDIC Announces Electronic Fingerprinting Requirement for Background Checks Conducted in Conjunction with Applications and Notices
The Federal Deposit Insurance Corporation (FDIC) recently announced that it will require electronic fingerprinting in order to conduct more efficient and effective background checks when reviewing various applications and notices for FDIC-insured and proposed insured…
Are Work Email Addresses and Business Contact Information Considered Personal Data
In most cases, email addresses and business contact information are considered “personal data.” Personal data is defined by the General Data Protection Regulation (GDPR) as “any information relating to an identified or identifiable natural…
US Companies Doing Business in the EU or Impacting EU Individuals Must Comply with the EU GDPR by May 25, 2018
In a short two months, the European Union’s General Data Protection Regulation will take effect. The deadline for compliance is May 25, 2018. The GDPR significantly expands the jurisdiction of the EU’s data privacy framework to companies processing or…
GDPR: The Most Frequently Asked Questions: If I receive a Right to Be Forgotten Request From a Former Employee That was Terminated for Cause, Do I have to Honor it?
Bryan Cave addresses the common question “If I receive a Right to Be Forgotten Request from a former employee that was terminated for cause, do I have to honor it?” The General Data Protection Regulation (GDPR) indicates that people have a “right to…