The National Cyber Directorate against the GDPR?

The memorandum of proposed Israeli Cyber Defense and National Cyber Directorate Law, 2018, published in June, proscribes, among other things, the disclosure of “information provided to the organization concerning a cyber-attack and the measures taken by the organization, unless permitted by a qualified employee of the Directorate, under the conditions he may prescribe and subject to any law”. The Memorandum ...

The EU and Japan agree on reciprocal adequacy for data transfers

The EU and Japan have agreed to recognize each other's data protection systems as 'equivalent', allowing the transfer of personal information between the EU countries and Japan. The agreement was announced during an economic summit in Tokyo. The agreement is due to enter into effect at the end of the year, after the European Data Protection Board (the pan-EU privacy ...

French Privacy Regulator Issues Two Warnings to Marketing Companies

The French data privacy regulator (CNIL) served formal warnings on two advertising companies - FIDZUP and TEEMO - in relation to their collection and processing of personal data from mobile phones. The companies offer software development kit (SDK) tools for using the information collected in targeted marketing campaigns. The CNIL found that the consent upon which the companies relied on ...

Israeli Privacy regulator issues opinion on surveillance cameras in kindergartens

Following incidents of child abuse in kindergartens and calls to install security cameras in order to ensure the safety of infants and toddlers, the Israeli Privacy Protection Authority (PPA) has published an opinion on surveillance cameras used in kindergartens.

According to PPA’s opinion, before deciding to install surveillance cameras, a kindergarten must obtain legal counsel on whether the installation is ...

European parliament calls for suspension of EU-US Privacy Shield

The European Parliament passed a nonbinding resolution calling on the European Commission to suspend the EU-US Privacy Shield unless the United States becomes fully compliant with EU data protection laws by September 1, 2018. 

The Privacy Shield is an arrangement between the authorities in the US and the EU, enabling US companies who certify to the Privacy Shield framework to ...

New Ohio State Law Immunizes Organizations that Comply with Cyber-Security Standards

A new and first-of-a-kind law was enacted in the State of Ohio, providing a safe harbor to organizations that demonstrate compliance with cybersecurity standards. The law establishes a legal safe harbor operating as a defense to causes of action in tort that allege or relate to the failure to implement reasonable information security controls, resulting in a data breach. The ...

Google faces record breaking fine by EU regulators

The European Commission has fined Google with an unprecedented penalty of 4.3 billion Euros (about 5 billion dollars) for breaching EU antitrust rules. The European Commission determined that since 2011, Google has been imposing unlawful restrictions on Android device manufacturers and mobile network operators to establish the dominant position of its search engine. In particular, the EU Commission alleges that, ...

New privacy legislation hastily enacted in California

California lawmakers enacted a new privacy-centric law known as the “California Consumer Privacy Act of 2018” (CCPA). The CCPA will take effect on January 1, 2020.

This comprehensive legislation shares certain similarities with the European General Data Protection Regulation (GDPR) that became enforceable this May. Amongst other similarities, the CCPA adopts a number of GDPR principles, such as ...