No.
The CCPA defines “deidentified” data as information that “cannot reasonable identify, relate to, describe, be capable of being associated with, or be linked, directly or indirectly, to a particular consumer.”1 A number of individuals and entities requested that the Office of the California Attorney General provide guidance as to what steps should be
One week into the final month of what has been a memorable 2020, maintaining an organization’s privacy hygiene is more pressing than ever – and includes new requirements.
From privacy policy updates mandated by the California Consumer Privacy Act (CCPA), to all businesses needing to stay current and non-deceptive in their public disclosures in relation
Greenberg Traurig Shareholder David A. Zetoony will be delivering the keynote remarks at the 2nd Annual ISACA Forum on CCPA taking place virtually on Thursday, November 19, 9:00 am – 4:00 pm PST. Attendance at this year’s virtual Forum is complimentary. If you are interested in attending, please register online here.
Greenberg Traurig Shareholder David A. Zetoony will be a speaker during American Lawyer Media’s webcast, “How to Adapt Your Incident and Breach Response Strategy to Today’s Regulatory Environment,” on Wednesday, November 18, at 2 PM EST / 11 AM PST.
In today’s ever-changing regulatory landscape, it is vital for legal professionals to build an incident
No.
The regulations implementing the CCPA require that in-scope businesses must provide two or more designated methods of submitting requests to opt-out, including an interactive form accessible via a clear and conspicuous link titled “Do Not Sell My Personal Information,” on the business’s website or mobile application.[1]
In addition to the “DNSMPI” link noted
Yes.
Where a global privacy control (“GPC”) conflicts with a consumer’s existing business-specific privacy setting or their participation in a business’s financial incentive program, the business must respect the GPC, but may notify the consumer of the conflict and give the consumer the choice to confirm the business-specific privacy setting or participation in the financial
No.
A group of privacy advocates and privacy software companies has proposed an “unofficial” specification for how consumers might transmit, and how companies might receive, a global privacy opt-out signal that indicates an intention for information not to be sold. As of 12 October 2020, the draft “Global Privacy Control specification” claims to have “no
A group of privacy advocates, publishers, and privacy software companies have proposed an “unofficial” specification for how consumers might transmit, and how companies might receive, a global privacy opt-out signal that indicates an intention for information not to be sold. They refer to their specification as the Global Privacy Control header, “GPC header,” or “GPC
No.
The regulations implementing the CCPA require that if a business sells personal information and collects personal information from consumers online it must honor “user-enabled global privacy controls” that communicate a desire of the consumer to opt-out of the sale of personal information.[1] There is no single format or technical specification for creating, transmitting,
No.
The European GDPR permits a company to retain personal data for “no longer than is necessary for the purposes for which the personal data are processed.”[1] As a result, if a company no longer needs information to accomplish a specific purpose, the company is, theoretically, required to delete that information. The requirement that