NY A.G. settled with five companies whose mobile apps were not secure

On December 14, 2018, New York Attorney General Barbara D. Underwood announced settlements with Western Union Financial Services, Inc., Priceline.com, LLC, Equifax Consumer Services, LLC, Spark Networks, Inc., and Credit Sesame, Inc., “for having mobile apps that failed to keep sensitive user information secure when transmitted over the Internet.” No fraud had happened with those apps but they all suffered from a well-known security vulnerability that could have allowed third parties to access Read more [...]

Italian DPA doesn’t deem the words “father-mother” to be accurate on electronic IDs

  Expressing an opinion on a proposed bill aiming at substituting –in a 2015 Ministerial decree, Ministero dell’Interno del 23 dicembre 2015 – the words “father“ and “mother” in place of “parents or legal guardians” on the application for a minor’s ID, the Garante per la Protezione dei Dati (the Italian Data Protection Authority) highlights how the change may raise issues where the request for an ID is filed by individuals exercising parental responsibility that may Read more [...]

Data broker legislation enacted in Vermont

On May 22, 2018, Vermont passed a new data broker piece of legislation, Act No. 171 (H.764), which adopts a number of consumer protection provisions relating to data brokers, their data collection practices, and consumers’ right to opt out of them. It ensures that data brokers have adequate security standards, it aims at prohibiting the acquisition of personal information through fraudulent means or with the intent to commit wrongful acts, and requires data brokers’ annual registration. The Read more [...]

Draft of U.S. Data Protection Act lands in Senate for discussion: high fines and jail time are a possibility

On November 1, 2018, Senator Ron Wyden introduced for discussion the draft of a new Consumer Data Protection Act (Bill SIL18B29). The Bill aims at allowing consumers “to control the sale and sharing of their data, gives the FTC the authority to be an effective cop on the beat, and will spur a new market for privacy-protecting services.” The Bill would strengthen the FTC’s role by vesting it with the power to: establish minimum privacy and cybersecurity standards; Read more [...]

California Consumers Privacy Act got amended and enforcement actions delayed

After only three months from its approval the California Consumers Privacy Act (CCPA) was amended. On September 23, 2018 Senate Bill 1121 was signed into law. The legislation, which takes effect immediately, amends the CCPA, which was passed on June 2018. Among other things, the amendment: - clarifies the definition of “personal information”, explaining that it “includes, but is not limited to, the following if it identifies, relates to, describes, is capable of being associated with, Read more [...]