Tuesday, December 29, 2020
Record retention and records management policies are key elements for a company’s data protection program. Numerous recently enacted, or amended, data protection laws adopt data retention or storage limitation principles to safeguard personal information. Companies that do not have clearly defined record retention practices should take notice. Companies with existing practices should review those practices to ensure they comply with applicable legislation and their information security program.
The recently passed California Privacy Rights Act of 2020 (CPRA), which amends and supplements the California Consumer Privacy Act (CCPA), adopts the EU General Data Protection Regulation (GDPR) storage limitation principle. Under the GDPR, record retention practices play a significant role; storage limitation is a key data processing principle. Personal data must be stored only as long as needed to achieve the articulated purpose for which it was colle
To embed, copy and paste the code into your website or blog:
Record retention and records management policies are key elements for a company’s data protection program. Numerous recently enacted, or amended, data protection laws adopt data retention or storage limitation principles to safeguard personal information. Companies that do not have clearly defined record retention practices should take notice. Companies with existing practices should review those practices to ensure they comply with applicable legislation and their information security program.
The recently passed California Privacy Rights Act of 2020 (CPRA), which amends and supplements the California Consumer Privacy Act (CCPA), adopts the EU General Data Protection Regulation (GDPR) storage limitation principle. Under the GDPR, record retention practices play a significant role; storage limitation is a key data processing principle. Personal data must be stored only as long as needed to achieve the articulated purpos
To embed, copy and paste the code into your website or blog:
After struggling with developing a national-level data privacy law for over a decade, the National People’s Congress of People’s Republic of China released the draft
Personal Information Protection Law (Draft Law) on October 21, 2020. The Draft Law was open for public comments for almost a month and is likely to be adopted as is. Once issued, the
Personal Information Protection Law will be the first national-level law on data privacy in China.
Drawing on the main rules of the
Cybersecurity Law,
Information Security Technology - Personal Information Security Specifications (Specifications) and other relevant laws and regulations in China and overseas, the Draft Law stipulates the personal information processing rules, rights of individuals in personal information processing activities, and the obligations of personal information processors, etc. and provides a comprehensive regulatory legal framework for person
To embed, copy and paste the code into your website or blog:
While California has been characterized by some of the nation’s most long-standing and aggressive privacy laws, businesses operating in the state have faced uncertainty over the last three years as to what a final omnibus privacy regulation would look like. While the California Consumer Privacy Act (CCPA) passed in 2018, several modifications from the California state legislature, a lengthy rulemaking process undertaken by the Office of the Attorney General, and a looming proposition – Proposition 24, the California Privacy Rights Act (CPRA) – created an environment of reticence on the part of businesses to go “all in” on compliance.
Jules Polonetsky: FPF December Update LinkedIn 12/23/2020
With Thanksgiving behind us, and in the midst of the holiday season, I wanted to express our thanks to so many people for helping me not only get through 2020, but to thrive and learn even during a global pandemic.
First and foremost, I am thankful for our FPF staff. Our team has produced engaging events, thought-provoking analysis, and insightful reports under the ongoing pressures of the pandemic, even as privacy-related issues have become more challenging and relevant than ever before.
I’m thankful for the FPF Board and Advisory Board members for providing us with their acumen, their experience, and the expertise of their powerful networks.