Acting Head of Israeli PPA: Data Breach Incidents - the New Battlefield

Data breach incidents, including ransom demand incidents, are growing increasingly common. They emphasize the importance of data protection measures and compliance with the Protection of Privacy law and the Information Security Regulations. Organizations need to consider whether to discard some of the information in order to reduce the risk in advance. These were the statements of the acting head of ...

French Privacy Regulator Recommends How to Obtain Consent for Cookies

The French data protection authority (the “CNIL”) published for public comments its draft of practical recommendations on how organizations should obtain the consent of data subjects for processing their information through cookies. 

The draft contains practical examples for websites and apps owners and operators on the proper procedures for obtaining data subject consent to cookies. These include presenting the information ...

Israel: a bill proposes alternatives to ISA tracing of Covid-19 patients

The Israeli government will be required to develop civilian contact-tracing technology, taking into account privacy-driven design from the outset, much like dozens of other countries around the world have done. The applications will be available for use on a voluntary basis, free of charge, and will be based on encrypted and anonymous data. These matters are proposed in a bill [Hebrew] ...

GDPR Fines Reach an Aggregate €114 Million

A recently issued report by DLA Piper shows that since the General Data Protection Regulations (“GDPR”) came into effect in May 2018, EU regulators have imposed €114 million in penalties for companies violating the GDPR. 

The largest fine was €50 million imposed on Google by the French data protection authority (the “CNIL”), due to violations of the GDPR’s duties of ...

The Israeli Payment Services Law Enters into Force

The Israeli Payment Services Law entered into force on January 9, 2020. The law is a comprehensive legislative arrangement of all types of payment services, including digital payment methods such as payment applications. The new law regulates the use and offering of payment services on three levels:

  • Oversight of payment service providers;
  • The contractual relationship between a payment service provider ...

Israeli privacy and data protection in the context of the Coronavirus pandemic

In Israel, like other jurisdictions, the privacy and data protection regime continues to apply during the Coronavirus pandemic crisis. It is generally flexible enough to allow private and state actors to undertake various anti-pandemic measures.

At the governmental level in Israel, the Israeli prime minister has taken the extraordinary measure of enlisting Israel’s national security agency (known as the General ...

UK Privacy Regulator Publishes Code of Practice for Digital Services Aimed for Children

The UK privacy regulator – the Information Commissioner’s Office (ICO) – has published the final version of its Age Appropriate Design Code of Practice for designers, developers, and operators of digital services aimed to be used by children. 

The ICO requires that services provide greater protection of children’s personal data by default, stating, for instance, that location and profiling features ...

Not All Automatic Dialed Messages are Restricted, Says a US Appeals Court

The Court of Appeals for the Eleventh Circuit in Atlanta, Georgia held in a majority opinion that the Federal Telephone Consumer Protection Act (TCPA), which in general prohibits the use of Automatic Telephone Dialing Systems to play recorded messages and send text messages without the prior consent of the subscriber, applies only to systems that use randomly or sequentially generated ...