UK Legislator Prepares for Brexit

Two regulations readying UK data protection law for a post-Brexit world have been promulgated in recent weeks. These regulations will only come into force upon the UK’s withdrawal from the EU. The regulations are intended to preserve the status quo post-Brexit by amending certain provisions of the GDPR to allow it to become UK domestic law and by gradually adopting ...

EU Regulators Clarify GDPR Data Transfers in the Event of a No-Deal Brexit

The European Data Protection Board (EDPB) – the panel of EU privacy regulators – has published an information note on data transfers under the GDPR in the event of a no-deal Brexit. The note explains that in the absence of an agreement between Europe and the UK, the UK will be deemed an inadequate “third country” after the Brexit on ...

FTC Imposes Unprecedented Fine for Violations of Children’s Online Privacy Rules

Operators of the video social networking app Musical.ly have agreed to pay a record penalty of $5.7 million to settle an enforcement lawsuit brought by U.S. Federal Trade Commission (FTC). The lawsuit alleged that Musical.ly violated the U.S. federal Children’s Online Privacy Protection Act (COPPA) by failing to notify parents about the app’s collection and use of personal information from ...

Israeli Court Rules Police May Forcibly Take A Fingerprint from a Suspect to Unlock His Smartphone

The Tel Aviv District Court has permitted the Israeli police to forcibly take a fingerprint from a suspect in order to unlock his smartphone, in an unprecedented decision that reverses a lower court’s decision. The suspect in this case was arrested for possessing 37 grams of marijuana, but refused to unlock his smartphone, arguing that compelling him to provide his ...

Illinois Supreme Court Finds Unconsented Processing of Biometric Data Actionable For Liquidated Damages

In a landmark decision, the Supreme Court of Illinois unanimously held that unlawful collection and processing of biometric data, in violation of the Illinois Biometric Information Privacy Act of 2008 (BIPA) is actionable per se for liquidated damages of up to 5,000 dollars and can be asserted in a class action suit. 

Illinois is one of only three states in ...

Stakeholders in The U.S. Advocating for a Federal Privacy Law

The United States Congress is considering the opinions of various stakeholders on the question of a federal privacy law. In a hearing held at the U.S. House of Representatives, industry stakeholders like the Internet Advertising Bureau (IAB) urged Congress to enact a federal privacy law that would preempt state laws, arguing that state laws are not only complicated to navigate ...

EU Court Clarifies Boundaries of Journalism and Household Exceptions in Data Protection Law

The Court of Justice of the EU (CJEU) has delivered a decision on data protection issues regarding a Latvian individual who published a video he filmed on YouTube, which shows police officers going about their duties in a police station. The Latvian privacy regulator found that he had infringed data protection laws for failing to inform the police officers of ...

Eu Commission and Japan Mutually Recognize Each Other As Adequate For Cross-Border Data Transfers

The European Commission and Japan have mutually recognized each other’s data protection laws as providing an adequate level of data protection. This mutual adequacy decision allows personal data to flow freely between EU countries and Japan, in accordance with European data protection law which generally restrict the transfer of personal data to destinations outside of the EU. The adequacy decision ...