18 Apr, 2024 U.S. House Unveils the Latest Attempt at a U.S. Privacy Law: The American Privacy Rights Act By Gary A. Kibel Richard S. Eisert Zachary Klein The United States is among the minority of large economies in the world without a comprehensive national privacy law. In the absence of...
16 Jul, 2023 Third Time’s A Charm - Adequacy Decision for EU-U.S. Data Privacy Framework Adopted by European Commission By Gary A. Kibel Jeremy Merkel Years of anticipation culminated on July 10, 2023, when the European Commission adopted an adequacy decision (the Adequacy Decision) on...
13 Jul, 2023 A Prime Example of Dark Patterns? FTC Sues Amazon for Use of “Dark Patterns” in Prime Enrollment By Paavana Kumar Alexa Meera Singh The Federal Trade Commission (FTC) filed a complaint against Amazon alleging that the company engaged in “dark patterns” to trick...
15 Jun, 2023 Pseudonymization and anonymization of data: Recent developments from European case-law By Laura Liguori Eleonora Curreli Thanks to Elena Mandarà for collaborating on this article On April 26, 2023, the General Court of the European Union issued its decision...
08 May, 2023 Ediscom Case: The Garante Sanctioned the Use of Dark Patterns for the First Time By Laura Liguori Thanks to Elena Mandarà for collaborating on this article With a resolution issued on February 23, 2023, the Italian Data Protection...
08 May, 2023 ChatGPT Case: How the Italian Data Protection Authority Is Trying To Address AI Risks By Eleonora Curreli Laura Liguori Thanks to Elena Mandarà for collaboratin on this article With a resolution issued on March 30, 2023, on an urgent basis the Italian Data...
18 Apr, 2023 Iowa Becomes the 6th State to Pass Comprehensive Consumer Privacy Legislation By Gary A. Kibel Zachary Klein Not to be outdone by California, Virginia, Colorado, Utah and Connecticut, Iowa is the sixth U.S. state to enact a comprehensive consumer...
14 Apr, 2023 European Data Protection Board Opinion on the Draft Adequacy Decision for the EU-US Data Privacy Framework By Eleonora Curreli Laura Liguori Thanks to Marco Boscariol for collaborating on this article On February 28, 2023, the European Data Protection Board (the “EDPB”)...
02 Mar, 2023 The Italian Data Protection Authority Blocks AI Chatbot Replika Due to Endangerment of Minors and Vulnerable People By Eleonora Curreli Laura Liguori Thanks to Angelo Aimar for collaborating on this article On February 2, 2023, the Italian Data Protection Authority (“Garante”) issued an...
25 Feb, 2023 The FTC Enforces its First Fine Under the Health Breach Notification Rule By Gary A. Kibel Alexa Meera Singh Ashley Haripal In a first-of-its-kind enforcement, the FTC has brought an action against GoodRx for allegedly violating its Health Breach Notification...
01 Feb, 2023 The Douglas Case: The Italian Data Protection Authority Issues a Resolution in the Data Retention Period Matter By Fabiana Bisceglia Laura Liguori With a resolution issued on October 20, 2022, the Italian Data Protection Authority (Garante per la protezione dei dati personali,...
05 Dec, 2022 Cybersecurity: The EU Parliament Approved the New NIS2 Directive By Laura Liguori Eleonora Curreli On November 10, 2022, the EU Parliament approved the directive on measures for a high common level of cybersecurity across the Union (the...
19 Sep, 2022 California Governor Signs Age-Appropriate Design Code into Law By Allison Fitzpatrick Gary A. Kibel Jeremy Merkel On September 15th, Governor Gavin Newsom signed into law a bill aimed at protecting children’s privacy online and regulating companies...
15 Sep, 2022 First CCPA Enforcement Action’s $1.2 Million Fine to Sephora is a Wakeup Call for the Ad Tech Industry By Gary A. Kibel The California Attorney General announced that a $1.2 million settlement was reached in the first-ever California Consumer Privacy Act...
01 Aug, 2022 Italian Data Protection Authority Warns TikTok Over Its Privacy Policy Revision By Laura Liguori Eleonora Curreli Thanks to Alessandra Ruggiero for collaborating on this article On July 7, 2022, the Italian Data Protection Authority (Garante per la...
05 Jul, 2022 Google Analytics: The Italian Data Protection Authority Banned Processing Without the Implementation of Safeguards for Transferring Personal Data By Laura Liguori Eleonora Curreli This article has been written in collaboration with Giulio Novellini On June 9, 2022, the Italian Data Protection Authority (Garante per...