On July 19, 2023, the U.S. Securities and Exchange Commission (SEC) announced that it will hold an open meeting on Wednesday, July 26, 2023, to consider whether to adopt rules to enhance and standardize disclosures
Continue Reading SEC Announces Open Meeting to Consider Cybersecurity RulesTexas, Oregon, and Delaware Join the Comprehensive U.S. State Privacy Law Landscape
New Requirements Include Identifying Specific Third Parties to Whom Businesses Disclose Data and Consent for Targeted Advertising to Teens
Texas, Oregon, and Delaware are the latest states to join the growing landscape of comprehensive data privacy laws, adding to the many state privacy laws that were passed this year.1 On June 18, 2023, Governor Greg Abbott signed the Texas Data Privacy and Security Act. On July 18, 2023, Governor Tina Kotek signed Oregon Senate Bill 619, referred to as the Oregon Consumer Privacy Act. Similarly, on June 30, 2023, the Delaware legislature passed the Delaware Personal Data Privacy Act. In doing so, Texas and Oregon officially became the 10th and 11th states, respectively, to enact a comprehensive privacy law. Assuming Governor John Carney also signs the Delaware Personal Data Privacy Act, his state would join as the 12th with that status. All three of the most recent laws are substantially similar to the prior state comprehensive consumer privacy laws, but they each include some key particularities that companies should be aware of as they plan their compliance strategies.Continue Reading Texas, Oregon, and Delaware Join the Comprehensive U.S. State Privacy Law Landscape
UK Privacy Regulator Continues to Focus on Children’s Privacy
Updated Guidance for Edtech Providers
The UK Privacy Regulator (ICO) recently updated its guidance on privacy compliance for providers of education technologies (Edtech). This should be seen as a call to action for Edtech providers…
Continue Reading UK Privacy Regulator Continues to Focus on Children’s PrivacyEU and U.S. Finalize Data Privacy Framework: Here’s How to Get Certified
On July 10, 2023, the European Commission (EC) adopted an adequacy decision in relation to the EU-U.S. Data Privacy Framework (DPF). This paves the way for organizations to certify to the DPF, reducing friction for transfers of personal data from the EU to the U.S., and allowing companies to simplify their compliance with EU data flow restrictions. It thus represents a major development in the regulation of data flows from the EU to the U.S.Continue Reading EU and U.S. Finalize Data Privacy Framework: Here’s How to Get Certified
The Final Countdown: Designation of Digital Platforms Under the EU’s Digital Markets Act Formally Underway
Midnight on July 3, 2023, heralded the deadline for potential gatekeepers to notify the European Commission (EC) as to whether they meet the thresholds for gatekeepers set out in Article 3 of the Digital Markets Act (DMA).Continue Reading The Final Countdown: Designation of Digital Platforms Under the EU’s Digital Markets Act Formally Underway
What’s in a Review? The FTC’s Updated Endorsement Guides and Proposed New Rule on Consumer Reviews
In late June 2023, the Federal Trade Commission (FTC) announced revised Endorsement Guides to strengthen and clarify guidance for advertisers and address emerging market trends concerning the use of endorsements and testimonials in advertising. The FTC also announced a proposed rule banning fake reviews and testimonials.Continue Reading What’s in a Review? The FTC’s Updated Endorsement Guides and Proposed New Rule on Consumer Reviews