DPO Advisor

The popular video game was fined by the FTC for violating children's privacy law and will be forced to change its default privacy settings and pay a historic fine.

California's new privacy agency, the CPPA, has made recent tweaks to the upcoming CPRA, potentially altering its 2023 enforcement

On Aug. 31, hopes were dashed when the California legislative session ended without enacting Assembly Bill 1102. The bill would have extended grace periods for certain business-to-business and human resources personal information under the California Consumer Privacy Act as amended by the California Privacy Rights Act. CCPA/CPRA will become fully operational on Jan. 1, 2023, for B2B and HR personal information and will be subject to the same rigorous California privacy regulations as "consumer" personal information.

International cosmetics retailer Sephora has become the first company to be penalized under the California Consumer Privacy Act (CCPA). The cosmetics has agreed to pay $1.2M to settle allegations. California Attorney General Rob Bonta alleged that Sephora failed to: disclose to consumers that it was selling their personal informationprocess user requests to opt-out of sale via user-enabled global privacy controls in violation of the CCPAand that it did not cure these violations within the 30 days currently allowed by the CCPAIn addition to the $1.2M fine, the retailer must also: Clarify its online disclosures and privacy policy to include an affirmative representation that it sells data;Provide mechanisms for consumers to opt-out of the sale of personal information, including via the Global Privacy Control; Conform its service provider agreements to the CCPA’s requirements; and Provide reports to the Attorney General relating to its sale of personal information, the status of its service provider relationships, and its efforts to honor Global Privacy Control. ‍

On June 3, 2022, a discussion draft of the American Data Privacy and Protection Act (ADPPA) was released, described as “the first comprehensive privacy proposal to gain bipartisan, bicameral support.” The proposed bill would apply to the collection, processing, and transfer of “covered data”, defined as information that identifies or is reasonably linkable to an individual or device

On June 16, the Canadian government introduced Bill C-27, the Digital Charter Implementation Act 2022. The Act proposes to enact three new pieces of federal legislation: The Consumer Privacy Protection Act (CPPA) to replace Part 1 of the Personal Information Protection and Electronic Documents Act (PIPEDA) The Personal Information and Data Protection Tribunal ActThe Artificial Intelligence and Data Act (AIDA) to regulate artificial intelligence systems and the processing of data in connection with such systems