The Bottom Line With fines that can reach up to €20 million or 4% of worldwide annual revenue, the cost of non-compliance under the GDPR could be much more significant than it has been under the prior data privacy framework in the EU. With a little more than one month before the GDPR becomes Continue Reading
South Dakota Becomes 49th State to pass Data Breach Notification Law
The Bottom Line A patchwork of state, federal and international rules impose data breach notification obligations on companies.Every company subject to these rules must have a data breach response plan in place that complies with each state's requirements. Once it becomes law, a bill passed Continue Reading
What We Can Learn from the FTC’s 2017 Privacy and Data Security Update
The Bottom Line The FTC exercises broad reach over privacy and data security issues across numerous industries. The Report shows a continuing trend towards more enforcement actions and increased penalties. All companies should review their privacy and data practices to confirm that they are in Continue Reading
With GDPR Deadline Looming, Ad Tech Community Proposes Collaborative Industry Solution
The Bottom Line Ad tech companies, and all other businesses subject to the GDPR, are facing an imminent compliance deadline. Companies may be able to seek GDPR-compliant solutions through their own internal initiatives, using third-party services or collaborating with others in the Continue Reading
Internet Vendors Now Face New Tax Obligations in Massachusetts
The Bottom Line Internet marketers and vendors with customers in Massachusetts, Ohio and Rhode Island should pay particular attention to the new regulation and legislation that expands the tax nexus for out-of-state vendors making Internet sales in those states. Vendors should consult with a tax Continue Reading
Big Changes to Canada’s Anti-Spam Law Effective July 1
The Bottom Line Although advertisers may not have to be concerned with private lawsuits at this time, they still must comply with CASL — and the Canadian Radio-television and Telecommunications Commission retains the authority to enforce the law, and has been actively doing so for the past three Continue Reading
T Minus 1 Year Until GDPR: Are You Ready for Take Off?
The Bottom Line It remains to be seen what will happen after the GDPR becomes effective on May 25, 2018. The GDPR compliance roadmap can be helpful for any organization that collects or processes personal data, whether or not an organization in or outside of the EU believes it is subject to the Continue Reading
Trump Affirms Congress’s Repeal of the FCC’s Broadband Privacy Rules
The Bottom Line Last fall, the FCC and FTC both hailed the FCC privacy rules. After the change in administrations, the FCC and FTC both agreed to rescind such rules. Therefore, it remains to be seen how privacy and data security will be regulated going forward. Companies in all industries should Continue Reading
FTC’s New Staff Report Applies Privacy Principles to Cross-Device Tracking
The Bottom Line Between the new FTC guidance and pending DAA enforcement, cross-device tracking is an issue that promises to be of increasing importance for the online advertising industry as the year progresses. Publishers, ad tech companies, advertisers, agencies and other members of the Continue Reading