Move over, cybersecurity tabletops – there’s a new sheriff in town. While you’ve been busy simulating ransomware attacks, privacy professionals have been cooking up their own version of “what-if” scenarios. And trust me, it’s not just another boring compliance exercise.
Enter the privacy tabletop – the creative brainchild of privacy teams who are tired of
Nineteen states have followed the lead of California and passed consumer privacy laws. Three went into effect this year and eight will become effective in 2025. The remainder become effective in 2026. Charts at the end of this post track effective dates (see Table 1) and applicability thresholds (see Table 2). While there are many
I recently had the pleasure of speaking with the Atlantic County Bar Association. Here are some of the key takeaways from my presentation:
Employees are “consumers” under the California Consumer Privacy Act. It requires:
You probably got to do some fun experiments in high school chemistry class. Maybe you made fiery whoosh bottles to learn about combustion reactions or crafted a Diet-Coke-and-Mentos volcano.
But science isn’t always an exercise in explosions. You also learn about the safety precautions necessary for a productive experiment, like wearing goggles and gloves.
The draft guidelines provide further clarification to the EDPB’s interpretation of legitimate interests, and suggest a potential divergence with the UK ICO.
By Gail Crawford, Fiona Maclean, Myria Saarinen, Tim Wybitul, Alice Brunning, and Calum Docherty
On 8 October 2024, the European Data Protection Board (EDPB) released draft Guidelines 1/2024
State lawmakers filed nearly 500 AI-related bills in 2024 with Colorado, California, Illinois, and Utah passing notable laws. With state lawmakers emboldened by federal inactivity, 2025 promises to see even more state action. Regulatory agencies such as the California Privacy Protection Agency are also considering AI-related rulemaking that could have significant impact on businesses.
Join
On 20 November 2024, the EU Cyber Resilience Act (CRA) was published in the Official Journal of the EU, kicking off the phased implementation of the CRA obligations.
What is the CRA?
The CRA is a harmonising EU regulation, the first of its kind focusing on safeguarding consumers and businesses from cybersecurity threats. It is a
On November 8, 2024, the California Privacy Protection Agency (CPPA) Board met to discuss and vote on various proposed California Consumer Privacy Act (CCPA) regulations related to cybersecurity audits, automated decision-making technology (e.g., artificial intelligence (AI)), privacy risk assessments, and a wide assortment of other updates to existing CCPA regulations; data broker registration regulations; and
Norton Rose Fulbright Canada invites you to its leading annual technology, privacy, and cybersecurity virtual summit. Learn how to leverage AI for a competitive edge while mitigating its inherent risks.
This four-part series is tailored for legal professionals, business leaders, and IT specialists. Equip yourself with the knowledge to address critical legal challenges and ensure
@media screen and (max-width: 1023px){section[data-id=”block_146305170bbc848732bfbcad431409b0″]{ }}@media screen and (min-width: 1024px) and (max-width: 1365px){section[data-id=”block_146305170bbc848732bfbcad431409b0″]{ }}@media screen and (min-width: 1366px){section[data-id=”block_146305170bbc848732bfbcad431409b0″]{ }}
