Epic Games, Developer of Fortnite, Will Pay Half a Billion Dollars for Privacy and Consumer Violations

The developer and operator of Fortnite, Epic Games, had agreed to a hefty settlement with the U.S. Federal Trade Commission (FTC). Under the settlement, the company will pay the FTC a civil penalty of $275 million for violations of the federal Children’s Online Privacy Protection Act (COPPA). This is the largest civil penalty ever given for violating an FTC rule. ...

Israeli Ministry of Finance Calls for Comprehensive Regulation of Digital Assets

A comprehensive regulation of digital assets in Israel is required, in accordance with the developing standards in the western world. This is the main recommendation in the long-awaited report published by the Israeli Ministry of Finance. The report covers digital assets that are not backed by another asset (such as cryptocurrencies such as Bitcoin and Ether), as well as digital ...

OECD Members Agree to Protect Personal Data from the Reach of Security Agencies

Nearly forty OECD member countries adopted the first intergovernmental agreement for the protection of personal data with an emphasis on freedoms and human rights when accessing personal data in times of emergency and for national security purposes.

The intergovernmental agreement joins the OECD guidelines for the protection of privacy that were updated in 2013. The new agreement reinforces the standard ...

European Union Enacts New Cybersecurity Directives

The European Parliament and the Council of the Europe Union have enacted a new directive on cybersecurity in critical infrastructures across the European Union. The new directive, dubbed the NIS2 Directive, is intended to replace the original Network and Information Systems (NIS) directive from 2016. It sets a higher standard of regulatory oversight and enforcement of cybersecurity throughout a wider ...

Final Guidelines in Israel on Conducting a Privacy Impact Assessment

The Israel Privacy Protection Authority published its final recommendations on conducting a privacy impact assessment before using personal information in a way that entails a substantial risk to the privacy of the data subjects, or a substantial change in their rights. The Authority highlights that because there is currently no general obligation in Israeli law to conduct a privacy impact ...

EU Commission Publishes Draft Decision on Transfers of Personal Data from the EU to the U.S

The European Commission published a draft decision to recognize the United States as an adequate country whose laws are essentially equivalent to the level of data protection required in the EU. The draft decision comes about two months after the President of the United States issued a new executive order to promote the legal mechanism that would facilitate the transfer ...

Israeli Ministry of Justice Proposes Enhanced Privacy Rights Only for EU Residents

The Israeli Ministry of Justice is proposing new obligations and definitions in newly proposed privacy regulations. The obligations will impact the owners of databases with personal data transferred from the European Economic Area. The new obligations include an obligation to delete information, an obligation to limit data retention periods, and data accuracy obligations.

The newly proposed regulations were prompted by ...

Israel Privacy Protection Authority Issues Draft Guidance on Handling Health-related Data

Israel Privacy Protection Authority published draft a draft position paper on the privacy aspects of employers’ practice of requesting that job applicant waive their right to the confidentiality of their health information to facilitate the disclosure of their health information to the prospective employer. The draft guidelines emphasize that such requests must be proportional, specific, and relevant to the requirements ...