The California Consumer Privacy Act (CCPA) enters into effect on January 1, 2020, less than two months away. It imposes complex privacy-driven obligations on many organizations. While companies in recent years have dedicated efforts to enter into and maintain compliance with the EU General Data Protection Regulation (GDPR), the CCPA imposes distinguishable requirements with significant implications from legal, technological, administrative ...

The United States and the United Kingdom have entered into the world’s first-ever CLOUD Act Agreement that will allow American and British law enforcement agencies, with appropriate authorization, to demand electronic data regarding serious crime, including terrorism, child sexual abuse, and cybercrime, directly from technology companies based in the other country, rather requesting the information through the other country’s governmental ...

CJEU holds cookie consent must be active and explicit.  The Court of Justice of the European Union (the “CJEU”) issued a decision in a case discussing companies’ use of cookies under the European General Data Protection Regulation (the “GDPR”) and the ePrivacy Directive. The CJEU held that a pre-ticked statement of users’ consent to cookies does not qualify as ...