California Consumer Privacy Act (CCPA) Starts January 1, 2020

The California Consumer Privacy Act (CCPA) enters into effect on January 1, 2020, less than two months away. It imposes complex privacy-driven obligations on many organizations. While companies in recent years have dedicated efforts to enter into and maintain compliance with the EU General Data Protection Regulation (GDPR), the CCPA imposes distinguishable requirements with significant implications from legal, technological, administrative ...

Courts in the EU Can Order Facebook to Remove Defamatory Content Globally and Monitor Republication

The Court of Justice of the European Union (CJEU) has held that the EU eCommerce Directive does not preclude courts in member states of the EU from ordering Facebook to remove defamatory content on a worldwide basis rather than just within the platform’s instances in the EU. The decision was delivered in a lawsuit brought by an Austrian politician who ...

Israeli Teens Convicted of Sexual Harassment for Publishing Sexual Videos of their Classmate

Two 13 years-old defendants were accused of filming a Facetime call they had with the victim, who was their classmate. The video portrays the victim performing sexual acts that the defendants requested that she perform. The Juvenile Court attempted to avoid convicting the defendants due to their young age, and despite stating that they have committed the offenses attributed to ...

October GDPR Updates: Judgment and Penalty on Cookies, Proposed ePrivacy Regulations and More

CJEU holds cookie consent must be active and explicit.  The Court of Justice of the European Union (the “CJEU”) issued a decision in a case discussing companies’ use of cookies under the European General Data Protection Regulation (the “GDPR”) and the ePrivacy Directive. The CJEU held that a pre-ticked statement of users’ consent to cookies does not qualify as ...

September GDPR Updates: Judgments on Google's Search Engine, New Code of Conduct and More

Right-to-be-forgotten is limited to the EU. The Court of Justice of the European Union (CJEU) handed down its judgment in Google’s appeal against the CNIL – the French Data Protection Authority – about the territorial boundaries of the ‘right-to-be-forgotten’. The CNIL imposed a penalty of €100,000 on Google for its refusal to remove objectionable search results from the localized ...

California AG Releases Proposed Regulation Implementing the CCPA

The new California Consumer Privacy Act (the “CCPA”) set to enter into effect in January 2020, provides  stronger protection to the privacy of California residents, among others, by granting consumers significant rights and requiring businesses that are subject to the CCPA to provide proper notification and obtain consumers’ consent before processing consumers’ personal information. The recently published Attorney General’s proposed ...

US and UK Sign Treaty for Sharing Personal Data from Suspects' Online Accounts

The United States and the United Kingdom have entered into the world’s first-ever CLOUD Act Agreement that will allow American and British law enforcement agencies, with appropriate authorization, to demand electronic data regarding serious crime, including terrorism, child sexual abuse, and cybercrime, directly from technology companies based in the other country, rather requesting the information through the other country’s governmental ...

U.S. Federal Gov't Proposes Oversight of Foreign Investments in Companies Handling Sensitive Data

The U.S. Department of the Treasury issued proposed regulations that would comprehensively implement the Foreign Investment Risk Review Modernization Act (FIRRMA) which was signed into law last year. 

FIRRMA empowers the interagency Committee on Foreign Investment in the United States (CFIUS) to examine and permit or ban foreign investment transactions that give the foreign investor certain powers at the target ...