On February 29, 2016, the European Commission issued a draft “adequacy decision” introducing the EU-U.S. Privacy Shield (“Privacy Shield”). The Privacy Shield replaces the U.S.-EU Safe Harbor Framework (“Safe Harbor”) as the new data transfer agreement legitimizing transfer of EU personal data to the U.S. by certifying participants. As described and linked to in the Commission’s press release, several U.S. government agencies have provided written commitments to enforce the Privacy Shield. These commitments will be published in the U.S. Federal Register.
Read MoreU.S. Department of Commerce Issues Fact Sheet on the EU-U.S. Privacy Shield Agreement
By Carolyn Krol
On February 2, 2016, following the announcement of the EU-U.S. Privacy Shield Agreement, the U.S. Department of Commerce distributed a fact sheet about the new data-transfer agreement with the European Union. The fact sheet provides further detail on the elements of the agreement described in the EU Commission's press release.
Read MoreNew EU-U.S. Safe Harbor Deal Announced
By Carolyn Krol
On February 2, 2016, representatives of the European Commission and the United States agreed on a new framework for transatlantic data flows, referred to as the “EU-U.S. Privacy Shield.” This long awaited announcement follows the October 6, 2015, decision by the EU Court of Justice invalidating the EU-U.S. Safe Harbor agreement.
Read MoreCity of Seattle Adopts First of Its Kind Privacy Principles
On February 23, 2015, the Seattle City Council unanimously approved a resolution approving its first ever set of comprehensive privacy principles. The principles are also the first of its kind to be adopted by a major U.S. city.
Read MoreFTC Issues Internet of Things Report
in FTC
By Jeanie Gong and Susan Lyon-Hintze
On January 27, 2015, the Federal Trade Commission (“FTC”) released its new report on data protection for users of the Internet of Things (“IoT”) which includes connected products such as health and fitness monitors, home security devices, connected cars and household appliances. The report focuses on the following areas: security, data minimization, and notice and choice.
Read MoreFTC Updates COPPA Verifiable Consent Guidance
The FTC has updated its Children's Online Privacy Protection Act (COPPA) FAQs providing new guidance regarding verifiable parental consent, including an alternative method of verification, clarifying ability of operators to use third parties to obtain consent; and the potential liability of those third parties consent providers.
Read More