All Data Privacy articles – Page 4
-
Premium
Compliance lessons from Rite Aid facial recognition case
The Federal Trade Commission was clear in its recent enforcement action against Rite Aid regarding its expectations for companies using facial recognition technology or any biometric security or surveillance systems.
-
Premium
Ethical compliance for facial recognition technology
The lack of clear regulations and guidelines for the ethical use of facial recognition technology further exacerbates concerns of discriminatory practices and potential infringements on human rights.
-
News Brief
FTC seeking comment on proposed COPPA enhancements
The Federal Trade Commission issued a notice of proposed rulemaking to strengthen data security requirements and modernize certain aspects of the Children’s Online Privacy Protection Act Rule.
-
Premium
Shades of GDPR? Experts assess AI Act as global standard
As the European Union’s AI Act sets its sights on 2026 to take full effect, experts are concerned other key jurisdictions might introduce divergent legislation that treats artificial intelligence use differently, thus making it difficult for companies to ensure compliance.
-
News Brief
Rite Aid gets 5-year facial recognition use ban from FTC
Retail pharmacy chain Rite Aid agreed to a five-year ban on its use of facial recognition technology for surveillance purposes as part of a settlement with the Federal Trade Commission.
-
Premium
Assessing impact of court ruling on GDPR strict liability
The idea companies can be held “strictly liable” for violations of the European Union’s privacy rules was shot down, following a judgment from Europe’s top court relating to a case involving German property company Deutsche Wohnen.
-
Premium
Top ethics and compliance failures of 2023
A virtual currency exchange that sought to mislead regulators, banks failing after ignoring obvious risks, and a manufacturer that sold millions of its products in violation of U.S. export controls are among those that make up CW’s list of the biggest ethics and compliance fails of 2023.
-
Premium
Experts: More privacy rules, enforcement expected in 2024
Businesses can prepare for a bumpy ride as the 2024 global landscape of data privacy and other related laws and regulations begins to take shape.
-
News Brief
Deutsche Wohnen earns CJEU win in high-profile GDPR appeal
German property company Deutsche Wohnen’s court win regarding a penalty levied against it for alleged violations of the General Data Protection Regulation carries notable ramifications for enforcement of the EU privacy law.
-
Premium
Automated decision-making tech rules added to crowded CPPA agenda
The California Privacy Protection Agency drafted its rules to apply the rights allowed to residents under the California Consumer Privacy Act to automated decision-making technology used by businesses.
-
Premium
Compliance officers share lack of faith in off-channel comms monitoring policies
Addressing employee use of off-channel communications for conducting business was clearly on the minds of compliance officers who responded to our “Inside the Mind of the CCO” survey, but their confidence in their related policies and procedures was surprisingly weak.
-
News Brief
Medical center to pay $80K for Covid-19 patient info shared with media
Saint Joseph’s Medical Center agreed to pay $80,000 as part of a settlement with the Department of Health and Human Services’ Office for Civil Rights for potential violations of the Health Insurance Portability and Accountability Act.
-
Premium
Experts: ICO apology to ex-CEO does not absolve NatWest of GDPR liability
Just because Alison Rose received a public apology from the U.K. Information Commissioner’s Office regarding the suggestion she might have violated the General Data Protection Regulation doesn’t mean NatWest could avoid sanction.
-
News Brief
Axpo Italia fined $10.5M in GDPR case over data processing
Axpo Italia, a producer and trader of renewable energy products, was penalized under the General Data Protection Regulation by the Italian data protection authority for processing inaccurate and outdated personal data of customers.
-
Webcast
CPE Webcast: Privacy 201: Moving from concepts to implementation
In a world where privacy regulations are in constant flux, it’s essential to transition from mere concepts and sporadic projects to build a robust, adaptable, and sustainable privacy program.
-
Premium
The value of sales and compliance allyship
“Every compliance activity is a sales activity,” writes Al Raymond, privacy compliance officer at ZoomInfo, regarding his team’s approach to demonstrate to sales how a strong control environment can be a competitive advantage.
-
News Brief
Medical management company to pay $100K in landmark HHS ransomware case
Doctors’ Management Service agreed to pay $100,000 in settling the first ransomware agreement under the Health Insurance Portability and Accountability Act reached by the Department of Health and Human Services’ Office for Civil Rights.
-
Podcast
Digital Transformation of Compliance podcast: Ryder CCO Pilar Caballero
In this episode of the Digital Transformation of Compliance podcast series, Pilar Caballero, chief compliance officer and chief privacy officer at Ryder, discusses her company’s process for vetting privacy concerns regarding use of new technologies.
-
News Brief
FCA flags potential regulatory breaches at NatWest regarding Farage scandal
An independent review into how NatWest handled the closure of politician Nigel Farage’s Coutts account uncovered potential regulatory breaches by the bank that are on the radar of the U.K. Financial Conduct Authority.
-
News Brief
CFPB eyes open banking with financial data rights rule proposal
The Consumer Financial Protection Bureau is moving forward its plan to give consumers more control over their personal financial data as part of a new rule proposal.